Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: 7pG45mxlq2n0jMD/BX/mqngQwkC/Kgoa5BZ2nG6+WNw=
Subject key identifier: 94:6A:7E:11:2A:99:20:D5:10:70:BE:9A:45:17:B4:64:FE:F2:71:73
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 019D390A43CB12C7A377431824EF2D0DC183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 0D47
Signing time: Sun 29 Mar 2026 10:01:07 +0000
Manifest this update: Sun 29 Mar 2026 10:01:07 +0000
Manifest next update: Mon 30 Mar 2026 10:01:07 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: WHC22NDWn+IZV8j4nzk2NokNyk9ze9S7P/L5rzFpKNA=)
2: T6VuejcSwQHcI3KFBiZd8wLzDvA.roa (hash: zfY7Xe3vIsOwV9FdjgHpzNPpOrKaPMqNVGOPvCJExjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:43:cb:12:c7:a3:77:43:18:24:ef:2d:0d:c1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: Mar 29 10:01:07 2026 GMT
Not After : Mar 30 10:01:07 2026 GMT
Subject: CN=946a7e112a9920d51070be9a4517b464fef27173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:8d:68:99:8f:64:26:d5:6a:c7:6c:ea:ce:
d6:47:39:ec:a1:b9:d0:f3:45:a6:48:34:1b:4d:3b:
4f:a6:ff:91:a1:38:d5:fd:0d:b2:1e:dd:4e:5a:8b:
de:15:7c:74:cf:eb:81:a6:73:55:6a:32:2a:23:ad:
82:41:2d:d8:fe:1d:3c:3c:25:be:97:72:13:85:c8:
1a:c8:3b:20:aa:42:36:79:d3:bc:d1:43:92:29:3e:
17:2b:7e:30:2f:19:9f:c3:33:09:3f:a1:4e:f4:ef:
76:28:72:3a:7d:8b:9a:a0:e1:50:6c:d1:6a:d4:05:
97:c9:54:d8:b0:5e:23:d2:9b:0e:b3:a1:a8:42:c4:
12:50:2b:91:2a:96:0a:fb:18:d5:75:1c:d6:4c:1f:
80:cb:81:2a:b9:8e:53:5d:3a:9e:ef:16:5b:1c:eb:
f4:0c:02:f3:39:08:e2:90:88:fd:b5:5f:cc:73:a6:
66:62:6a:ae:03:f5:d7:09:8e:b1:42:ce:b6:e2:af:
62:33:61:bd:ec:fb:46:79:20:a4:86:17:57:bc:b7:
f8:51:0c:13:d8:97:b1:d0:da:34:d0:3d:36:8a:20:
d4:d2:68:83:5d:17:08:8f:ab:27:69:1d:f2:08:ec:
b8:5a:10:82:49:2f:c5:9c:1b:6e:3d:a8:ab:02:f8:
c6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6A:7E:11:2A:99:20:D5:10:70:BE:9A:45:17:B4:64:FE:F2:71:73
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:72:0b:4f:65:a7:af:91:7a:fa:f7:4f:f6:52:ec:37:56:e2:
e1:8c:34:89:6b:b6:ef:43:93:90:9a:fe:8a:09:06:67:0d:9d:
f3:30:4d:c1:a9:d6:2d:34:aa:b8:01:f0:bd:2a:db:5c:b5:f2:
68:56:a0:a2:c1:3a:bd:81:c9:f3:73:70:2a:66:39:9d:8e:7e:
a7:d9:dd:69:e5:5b:c9:70:7c:8d:65:d1:0b:4d:4c:73:60:4b:
35:62:8e:eb:d5:6d:be:82:6d:e6:6b:de:ee:5f:91:b3:ea:74:
82:68:0e:da:cf:76:cb:1b:0f:16:f3:ba:0d:01:75:2f:59:7b:
04:dd:34:97:02:76:4c:35:3d:e0:13:42:e4:3a:5f:82:18:e5:
4d:dd:8c:ed:f6:75:c0:66:bc:b9:ba:f5:bc:36:dc:23:8a:34:
1b:82:28:c8:e3:60:4a:99:04:b8:4b:9d:31:f8:6b:45:19:b5:
f7:4e:ef:c2:42:13:6d:86:5d:43:90:81:c7:f7:88:de:60:5e:
2d:ec:e7:17:f1:98:b6:81:ca:f5:09:45:cc:4c:66:42:e7:ae:
79:ea:08:29:82:a0:44:91:87:32:eb:b7:d1:50:57:a7:66:92:
6b:e5:04:43:bc:ac:e9:f3:eb:b7:05:4c:09:bf:d4:96:77:83:
9e:a3:2c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:04 2026 by rpki-client