Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: DtR1UNN7da4wcp7hOuigkD8QL/v3EZUapwFGZ5uBiVk=
Subject key identifier: 61:29:01:FD:04:4D:FB:96:89:CB:8A:DA:81:34:E6:5B:3B:28:06:7F
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 019E2881896B2E31E858E7ABD02ED66EDDD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 0DC3
Signing time: Thu 14 May 2026 22:00:38 +0000
Manifest this update: Thu 14 May 2026 22:00:38 +0000
Manifest next update: Fri 15 May 2026 22:00:38 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: rzNHJAZTRd1CM6hhm6vWTPv/pC07UsPIO16oPgEsF3s=)
2: T6VuejcSwQHcI3KFBiZd8wLzDvA.roa (hash: zfY7Xe3vIsOwV9FdjgHpzNPpOrKaPMqNVGOPvCJExjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:81:89:6b:2e:31:e8:58:e7:ab:d0:2e:d6:6e:dd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: May 14 22:00:38 2026 GMT
Not After : May 15 22:00:38 2026 GMT
Subject: CN=612901fd044dfb9689cb8ada8134e65b3b28067f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:8e:6c:8c:81:e7:f2:86:89:ed:00:9c:17:
59:93:db:dc:8a:b0:2a:f0:98:8d:bd:f7:b2:24:bd:
39:f8:c0:bf:28:d9:07:34:2f:11:83:75:99:ed:cf:
45:8d:93:76:7e:75:68:ee:3a:ed:2e:31:1f:c6:03:
74:91:b0:c5:5e:48:01:72:c2:83:c4:53:aa:6e:61:
26:27:5b:57:8f:7c:72:4b:c4:dd:1e:51:0e:3a:9b:
96:98:0a:f0:77:4d:54:04:50:26:4a:dd:f9:1b:84:
e4:24:2c:3d:55:12:1d:b8:84:fc:e8:f3:5f:f3:93:
be:7c:20:2e:03:36:79:fe:a5:28:d8:6d:99:16:b6:
d4:e2:60:bb:f3:60:4f:7e:b9:31:d6:16:78:ae:39:
14:6e:e9:f2:04:84:85:98:3c:08:a9:a5:99:5e:f6:
2b:4a:d4:ad:35:6f:18:ea:0e:fe:e6:13:54:b2:78:
db:eb:80:67:19:a3:91:77:6c:f4:8a:07:b2:43:75:
47:0a:95:61:76:9e:42:f6:51:00:5e:3d:d8:22:51:
f3:38:91:35:8f:c7:8d:02:77:42:5a:4a:28:ec:10:
1a:33:69:23:43:89:8f:b7:89:05:cd:bc:58:1e:e0:
4a:c4:37:4d:04:a3:78:a0:24:dc:07:ce:9c:65:7c:
cc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:29:01:FD:04:4D:FB:96:89:CB:8A:DA:81:34:E6:5B:3B:28:06:7F
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2b:e9:06:7f:79:ec:af:c5:6c:ca:0d:c2:7a:18:d3:99:b8:
cd:6e:05:03:fd:a5:cd:60:b9:e7:14:d4:a8:14:60:5b:2d:a2:
d7:b0:99:17:4e:53:d3:e7:7e:ed:d8:ab:2c:a7:16:16:c1:2c:
81:38:da:e0:87:76:20:fb:d1:7b:52:f9:ec:7f:eb:fd:7c:5f:
79:e0:d1:05:62:19:f3:b5:71:ed:f0:b9:88:8a:d6:8b:51:be:
bb:25:d5:54:98:50:ea:a1:da:67:c6:ba:29:ef:7c:82:62:aa:
2b:a0:80:09:d2:f4:e4:c7:3b:f7:91:08:ed:93:fb:58:c3:a3:
41:62:c5:5b:26:02:be:06:ba:82:b0:75:ea:2a:2b:75:c0:91:
31:93:94:87:07:d7:a0:59:f4:0d:ef:ed:c4:52:3e:c5:5b:a0:
9b:f8:25:21:16:75:db:37:db:e4:79:70:5f:de:aa:8e:7f:69:
37:c8:02:31:51:85:ea:ae:01:f5:c0:f4:d6:35:8f:76:a6:bf:
1e:df:14:48:ee:15:41:83:48:6e:d3:7d:34:e9:ab:c4:27:f4:
9f:92:e0:e2:3e:93:71:a3:bb:b2:1b:f6:40:8a:79:3f:d2:2d:
60:48:5a:94:54:00:0f:29:4f:c6:50:ef:d4:75:f4:bc:9a:f8:
04:68:90:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ogYlrLjHoWOer0C7Wbt3RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Njg0OTU4N2EyM2JmYjVkNjViMmExNDA0MDgyMjMyYjQz
OTI3MWIwHhcNMjYwNTE0MjIwMDM4WhcNMjYwNTE1MjIwMDM4WjAzMTEwLwYDVQQD
Eyg2MTI5MDFmZDA0NGRmYjk2ODljYjhhZGE4MTM0ZTY1YjNiMjgwNjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8qObIyB5/KGie0AnBdZk9vcirAq
8JiNvfeyJL05+MC/KNkHNC8Rg3WZ7c9FjZN2fnVo7jrtLjEfxgN0kbDFXkgBcsKD
xFOqbmEmJ1tXj3xyS8TdHlEOOpuWmArwd01UBFAmSt35G4TkJCw9VRIduIT86PNf
85O+fCAuAzZ5/qUo2G2ZFrbU4mC782BPfrkx1hZ4rjkUbunyBISFmDwIqaWZXvYr
StStNW8Y6g7+5hNUsnjb64BnGaORd2z0igeyQ3VHCpVhdp5C9lEAXj3YIlHzOJE1
j8eNAndCWkoo7BAaM2kjQ4mPt4kFzbxYHuBKxDdNBKN4oCTcB86cZXzM1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEpAf0ETfuWicuK2oE05ls7KAZ/MB8GA1UdIwQY
MBaAFBVoSVh6I7+11lsqFAQIIjK0OScbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgt
YzU5ZWZkMzQ4MTU4LzEvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgtYzU5ZWZkMzQ4MTU4
LzEvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyvpBn95
7K/FbMoNwnoY05m4zW4FA/2lzWC55xTUqBRgWy2i17CZF05T0+d+7dirLKcWFsEs
gTja4Id2IPvRe1L57H/r/XxfeeDRBWIZ87Vx7fC5iIrWi1G+uyXVVJhQ6qHaZ8a6
Ke98gmKqK6CACdL05Mc795EI7ZP7WMOjQWLFWyYCvga6grB16iordcCRMZOUhwfX
oFn0De/txFI+xVugm/glIRZ12zfb5HlwX96qjn9pN8gCMVGF6q4B9cD01jWPdqa/
Ht8USO4VQYNIbtN9NOmrxCf0n5Lg4j6TcaO7shv2QIp5P9ItYEhalFQADylPxlDv
1HX0vJr4BGiQ9g==
-----END CERTIFICATE-----
Generated at Fri May 15 07:03:02 2026 by rpki-client