Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: EPq7o0pj6OghoHJE1XCGgYe+AESJkzhewILTUx5I2VI=
Subject key identifier: DD:BE:13:FF:9E:EC:26:94:41:6F:D1:03:37:F8:A0:73:D2:23:93:1B
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 019F122EA0E08067AFD64B1844516315260A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 0E3C
Signing time: Mon 29 Jun 2026 07:01:13 +0000
Manifest this update: Mon 29 Jun 2026 07:01:13 +0000
Manifest next update: Tue 30 Jun 2026 07:01:13 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: 1XNjO7DWOo0BdBjlMlBhs+bwYThFsu7e/B5y547shJ4=)
2: T6VuejcSwQHcI3KFBiZd8wLzDvA.roa (hash: zfY7Xe3vIsOwV9FdjgHpzNPpOrKaPMqNVGOPvCJExjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:a0:e0:80:67:af:d6:4b:18:44:51:63:15:26:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: Jun 29 07:01:13 2026 GMT
Not After : Jun 30 07:01:13 2026 GMT
Subject: CN=ddbe13ff9eec2694416fd10337f8a073d223931b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9f:45:f2:ed:c9:0c:09:54:e3:c9:c1:f6:81:
b2:7c:6c:aa:ef:c0:6b:dd:ff:51:a9:82:a4:e7:ce:
e0:ab:b5:e4:8c:85:c1:9d:90:64:45:b1:15:5d:76:
e2:2c:58:86:98:ea:b1:12:10:60:4f:04:8a:a9:6a:
50:73:de:f9:b4:3e:b8:1f:78:a4:7e:ff:aa:70:c2:
52:75:c5:6c:8b:b2:64:df:40:71:d0:88:4e:6a:db:
df:dd:dd:cf:ce:04:3e:c5:ce:ca:a6:cc:9c:52:79:
16:39:1d:d2:d8:73:37:2b:a1:27:11:df:26:63:6d:
d0:6d:d0:ba:61:25:30:1b:f8:13:89:17:8d:72:67:
f0:81:9f:6e:01:06:3c:d7:f6:9e:b9:15:23:fc:b5:
5c:bf:a5:34:bf:20:d9:50:71:83:86:13:1f:ff:0c:
65:83:86:ac:0e:41:92:7a:59:8f:7b:8b:88:64:7a:
0a:34:99:08:32:2c:ab:b3:39:6e:d5:b9:99:ca:e3:
7d:3b:65:bf:f6:a8:3a:fe:9a:3f:03:58:e9:90:00:
e8:13:ea:1f:66:92:68:96:cf:fe:e0:e3:55:18:b5:
d3:ff:0b:4e:4f:22:62:c0:d4:e0:b5:46:92:12:38:
0f:1e:4b:35:fb:19:f5:a2:f3:27:21:e1:0d:d9:d4:
b2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BE:13:FF:9E:EC:26:94:41:6F:D1:03:37:F8:A0:73:D2:23:93:1B
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:15:e6:32:1c:39:39:fa:d1:12:7b:c8:84:8e:48:53:ae:4d:
00:bd:41:86:93:00:61:d7:c7:a0:6d:da:c6:20:7f:d2:e8:f2:
1e:23:02:a6:db:04:b2:45:78:c2:41:6d:f4:83:d7:28:57:8d:
f1:d7:19:3a:13:cc:46:ac:80:ef:83:13:03:6e:3b:4a:57:13:
8c:e1:82:6e:ff:ae:17:07:45:1b:e6:1c:54:31:95:f5:c1:af:
e9:46:30:c9:49:c9:72:52:d2:24:ff:54:b5:79:f4:e0:b3:f3:
9a:88:7f:82:5a:b3:89:75:ee:a4:d0:d1:02:f4:4f:a0:b1:ec:
e5:61:2a:02:f6:62:11:6c:c9:b5:01:b3:55:e7:39:88:4c:e6:
fc:f1:60:f2:b4:91:00:d1:90:79:80:b5:c3:05:c0:ae:78:f5:
49:f4:13:52:e1:c8:4c:6f:71:58:f8:99:aa:c6:94:9a:db:da:
2b:b0:04:ad:7a:43:13:4d:6e:35:65:44:3e:67:0a:f7:06:49:
4c:3c:33:ac:25:14:36:2e:58:e1:33:36:6f:d6:15:11:90:e4:
48:7b:4c:23:d0:39:08:9e:bf:b0:45:ac:30:69:c5:13:b8:89:
56:32:7b:d1:02:05:e1:c8:9a:43:76:8a:38:76:72:54:19:93:
73:ca:b4:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SLqDggGev1ksYRFFjFSYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Njg0OTU4N2EyM2JmYjVkNjViMmExNDA0MDgyMjMyYjQz
OTI3MWIwHhcNMjYwNjI5MDcwMTEzWhcNMjYwNjMwMDcwMTEzWjAzMTEwLwYDVQQD
EyhkZGJlMTNmZjllZWMyNjk0NDE2ZmQxMDMzN2Y4YTA3M2QyMjM5MzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7J9F8u3JDAlU48nB9oGyfGyq78Br
3f9RqYKk587gq7XkjIXBnZBkRbEVXXbiLFiGmOqxEhBgTwSKqWpQc975tD64H3ik
fv+qcMJSdcVsi7Jk30Bx0IhOatvf3d3PzgQ+xc7KpsycUnkWOR3S2HM3K6EnEd8m
Y23QbdC6YSUwG/gTiReNcmfwgZ9uAQY81/aeuRUj/LVcv6U0vyDZUHGDhhMf/wxl
g4asDkGSelmPe4uIZHoKNJkIMiyrszlu1bmZyuN9O2W/9qg6/po/A1jpkADoE+of
ZpJols/+4ONVGLXT/wtOTyJiwNTgtUaSEjgPHks1+xn1ovMnIeEN2dSyGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2+E/+e7CaUQW/RAzf4oHPSI5MbMB8GA1UdIwQY
MBaAFBVoSVh6I7+11lsqFAQIIjK0OScbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgt
YzU5ZWZkMzQ4MTU4LzEvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgtYzU5ZWZkMzQ4MTU4
LzEvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBXmMhw5
OfrREnvIhI5IU65NAL1BhpMAYdfHoG3axiB/0ujyHiMCptsEskV4wkFt9IPXKFeN
8dcZOhPMRqyA74MTA247SlcTjOGCbv+uFwdFG+YcVDGV9cGv6UYwyUnJclLSJP9U
tXn04LPzmoh/glqziXXupNDRAvRPoLHs5WEqAvZiEWzJtQGzVec5iEzm/PFg8rSR
ANGQeYC1wwXArnj1SfQTUuHITG9xWPiZqsaUmtvaK7AErXpDE01uNWVEPmcK9wZJ
TDwzrCUUNi5Y4TM2b9YVEZDkSHtMI9A5CJ6/sEWsMGnFE7iJVjJ70QIF4ciaQ3aK
OHZyVBmTc8q0Kg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:45:02 2026 by rpki-client