Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: OqvrztPH+0w/kZMUkkv4CBPUnMySKCbDPkHdvJ/L35A=
Subject key identifier: 33:3B:A0:24:F7:29:6F:37:A6:17:B3:7C:12:21:BA:42:96:2E:2A:E9
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 01A00394A35D37F8920F2D57EA3FD9B69E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 0EB9
Signing time: Sat 15 Aug 2026 04:01:07 +0000
Manifest this update: Sat 15 Aug 2026 04:01:07 +0000
Manifest next update: Sun 16 Aug 2026 04:01:07 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: rMgLE91f0sbju2lBNAOAp0JKu4fCzQur+uyS23KaCl4=)
2: T6VuejcSwQHcI3KFBiZd8wLzDvA.roa (hash: zfY7Xe3vIsOwV9FdjgHpzNPpOrKaPMqNVGOPvCJExjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:94:a3:5d:37:f8:92:0f:2d:57:ea:3f:d9:b6:9e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: Aug 15 04:01:07 2026 GMT
Not After : Aug 16 04:01:07 2026 GMT
Subject: CN=333ba024f7296f37a617b37c1221ba42962e2ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:f9:7f:55:e1:2b:35:1a:06:7a:c6:c3:7f:
f5:87:1a:2b:bf:1e:04:45:8a:c7:6a:1c:e4:c5:e3:
d9:cc:98:e5:65:4e:ae:62:4b:52:42:10:3e:13:75:
fc:4b:5e:4a:36:38:a0:3a:f1:e6:23:07:04:1b:c4:
04:80:db:c0:be:f7:d9:9a:85:f8:5f:3e:bb:0d:cb:
64:25:7c:2a:b9:7b:9b:c6:9f:8d:23:07:39:f5:9a:
33:4a:23:41:37:58:f1:df:99:3d:0b:2f:7b:a8:c4:
f3:7f:0e:94:07:a2:dc:af:27:60:83:40:a7:46:b8:
62:7b:94:b9:34:c5:f8:84:a8:00:0d:9d:a7:68:ff:
d8:bb:67:55:9c:78:b0:24:b6:b6:b3:3e:ec:12:4b:
0b:f1:d9:59:9f:40:b2:b2:7f:0f:16:4b:36:c8:87:
8b:c4:65:71:60:8e:e0:99:73:bf:89:63:55:06:18:
2e:28:4d:a2:40:b7:8f:f1:86:41:8b:16:0f:d0:97:
9e:65:70:3e:9a:7f:bd:d0:b4:f3:a7:05:38:a6:38:
b2:f8:6b:1a:32:47:59:4b:a7:59:f6:97:6b:63:12:
23:e3:6f:7f:3a:d7:8a:cd:00:37:17:e6:cf:f2:42:
5b:43:41:c5:2c:ef:6e:1f:80:37:5f:61:bb:b9:97:
5c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3B:A0:24:F7:29:6F:37:A6:17:B3:7C:12:21:BA:42:96:2E:2A:E9
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c7:c5:56:bd:3c:15:c7:56:40:bc:ac:cf:0d:f6:b3:65:df:
e1:5c:d3:66:2f:b0:1b:f8:c0:0e:89:61:39:da:c6:79:56:b6:
23:5f:ce:aa:e9:9e:6f:be:90:54:38:4a:71:05:21:21:65:61:
be:fe:95:32:6d:8f:ad:73:c1:ba:b4:8e:e8:58:28:65:e7:8e:
91:33:36:d8:3f:ab:be:9f:cb:de:21:76:58:97:5d:e2:a0:29:
ca:95:0e:5e:9b:44:55:7f:57:2a:c3:d2:b3:4e:f8:08:2d:5e:
13:20:0d:3d:d2:c2:19:82:57:bc:6b:b4:f0:41:52:46:73:ae:
28:bd:19:c0:df:e2:e0:62:00:4a:6d:b9:47:0a:21:e3:f1:d4:
30:23:9a:b2:5a:ad:8e:cb:a8:80:a8:81:ed:4c:47:47:81:f6:
75:a7:01:19:da:3d:72:50:9b:c5:8d:21:2a:db:83:b9:e5:e4:
0f:f1:0b:f4:ca:39:38:11:cd:b6:2a:19:52:a1:68:8d:e9:37:
a6:9d:be:56:68:a8:6d:bf:77:76:7a:20:73:64:2d:ca:d8:42:
06:c5:5a:18:ce:69:cb:cc:96:8f:b4:9a:9e:e2:ca:c6:6f:33:
28:0c:93:16:42:5d:2d:ae:ae:78:f4:ca:aa:36:98:91:ed:88:
d0:a8:64:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:56 2026 by rpki-client