Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
File: FWKPn9qri4VJS8M4gJGhIrC7pcg.mft (raw, json)
Hash identifier: yot7nRAi0cUnme+uJ1cL5dijUCyrUuIWX8gLOgUZf8g=
Subject key identifier: 99:91:53:8F:A9:6A:CA:F0:F2:05:E1:43:53:69:6E:E9:6B:D9:A5:C4
Authority key identifier: 15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
Certificate issuer: /CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Certificate serial: 019D371BD04B170490AE2F77CC7522ECFC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 01:01:02 +0000
Manifest this update: Sun 29 Mar 2026 01:01:02 +0000
Manifest next update: Mon 30 Mar 2026 01:01:02 +0000
Files and hashes: 1: FWKPn9qri4VJS8M4gJGhIrC7pcg.crl (hash: r6pn32bX+nt5YUEeDdHFMzl14dvf4p0VsBnKIQ4SQOY=)
2: jduoIfuNX3eaUl5mu4CdCj0unUU.roa (hash: N1HIki9uzOLOpvfkwPn2Cb9BQ/V7gPNrS+CdWusx3Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:d0:4b:17:04:90:ae:2f:77:cc:75:22:ec:fc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Validity
Not Before: Mar 29 01:01:02 2026 GMT
Not After : Mar 30 01:01:02 2026 GMT
Subject: CN=9991538fa96acaf0f205e14353696ee96bd9a5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:11:3e:69:9d:26:15:ec:93:30:4d:ea:62:
50:78:45:09:c7:22:aa:45:3b:4b:4c:ff:fc:52:78:
ae:1c:e8:04:31:30:c8:9b:9f:9a:97:8a:73:55:d5:
82:c3:79:43:34:5a:ec:76:ae:0d:82:bd:ba:a4:b4:
a5:89:e5:04:78:c3:1a:6a:67:01:b0:93:a1:55:f6:
64:86:c5:6b:3f:88:27:d9:f7:61:b8:01:b5:c0:1e:
20:5d:35:2e:65:cf:86:69:e3:1e:73:7a:9a:04:5b:
04:21:71:6f:24:24:33:79:a2:aa:90:0b:71:09:92:
2c:1c:c8:b4:61:4a:7e:84:cd:b9:cd:97:a0:8f:48:
c7:e3:a1:96:3b:61:05:92:dc:e7:a6:ff:9c:41:09:
0b:96:d6:49:0f:e2:0d:2f:58:12:19:c0:18:a4:aa:
9d:61:f3:c3:7a:5b:61:e5:dd:2d:0b:b5:fb:53:f2:
93:1e:b5:43:95:b2:c3:73:b4:5c:ef:0e:53:0b:d6:
1f:4b:7d:c5:ea:e4:cc:9d:61:b8:36:06:31:d9:c9:
68:06:f5:40:5e:25:72:e9:4c:ce:94:0b:0d:f2:84:
c0:a2:2b:f3:49:8b:8f:95:b2:a9:e7:a1:f6:ae:25:
a5:90:84:16:c3:35:48:77:eb:77:80:b7:c8:83:48:
b0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:91:53:8F:A9:6A:CA:F0:F2:05:E1:43:53:69:6E:E9:6B:D9:A5:C4
X509v3 Authority Key Identifier:
keyid:15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5f:81:19:67:dc:2b:b3:86:b2:7d:46:ae:85:03:c9:c7:96:
6c:d3:60:cf:4e:c0:c5:cb:b9:d4:81:ec:18:56:9e:13:79:0a:
98:66:09:ef:34:32:cb:68:9d:c5:0e:b7:3d:d0:da:ba:ef:47:
48:7c:9e:00:ac:58:ad:87:8e:a8:35:0e:53:99:5a:c8:66:7b:
30:5d:37:73:d8:74:4d:57:bd:93:1c:27:bb:a2:68:fc:16:2c:
cb:55:3e:84:ed:33:fa:c1:6b:a8:ac:56:bf:3b:e4:a4:05:45:
18:da:eb:65:13:09:4c:a7:73:78:02:f6:9c:d2:5a:a1:af:92:
bc:67:b8:05:12:bc:5e:e8:29:98:13:18:9a:68:88:9b:68:e5:
8c:6d:2f:29:98:8a:7b:c0:7d:04:08:01:b6:b6:67:99:8a:1d:
b8:c6:72:1d:53:c9:9a:3f:a4:42:82:3e:30:11:e0:ab:1a:5b:
d8:4a:a9:3b:a3:42:9a:a6:1c:f9:68:f4:4b:f1:88:32:84:0d:
11:88:35:c0:a1:21:db:f1:77:1b:b6:2e:53:d2:0c:c3:75:e2:
8c:23:94:b4:c0:b2:1b:42:77:bc:13:e1:29:80:18:69:f8:e4:
f0:4a:c6:5d:0d:93:0a:41:0c:ca:a9:3c:e1:71:e6:30:d6:8d:
8f:03:b2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:40 2026 by rpki-client