Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
File: FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft (raw, json)
Hash identifier: KOKVs/qNR3GgPDEJd0FyEck9zXEaQrGgvbkQh6g4U/8=
Subject key identifier: 5A:A3:99:CE:59:2A:4E:C1:91:0C:45:C2:23:39:FD:16:97:47:2E:2B
Authority key identifier: 17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C
Certificate issuer: /CN=1702685b1a4ef6cd313980a42ffd95eed139772c
Certificate serial: 019D37C08F83D83D2D16052D810C53BB5E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
Manifest number: 0846
Signing time: Sun 29 Mar 2026 04:00:59 +0000
Manifest this update: Sun 29 Mar 2026 04:00:59 +0000
Manifest next update: Mon 30 Mar 2026 04:00:59 +0000
Files and hashes: 1: FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl (hash: d1xvtGgSUKVWx5g+C8hbLXxWfQUbEWlbVLooT70yFnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:8f:83:d8:3d:2d:16:05:2d:81:0c:53:bb:5e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1702685b1a4ef6cd313980a42ffd95eed139772c
Validity
Not Before: Mar 29 04:00:59 2026 GMT
Not After : Mar 30 04:00:59 2026 GMT
Subject: CN=5aa399ce592a4ec1910c45c22339fd1697472e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:41:43:18:05:e0:7b:c2:fb:b6:c1:99:54:
fa:85:cc:84:1a:ce:19:b1:3d:c8:1b:f5:00:de:98:
6d:8d:8a:f2:e6:d2:17:cc:1a:67:ff:81:a6:69:43:
22:a2:b4:8a:91:51:e7:57:3f:4a:16:4d:5e:a8:f9:
2a:45:d0:49:aa:87:76:6c:65:0d:b6:79:95:2c:f3:
2f:0f:cf:c9:f5:53:5c:a1:20:69:fb:03:c4:8e:1b:
ec:43:26:86:94:a1:aa:ae:12:27:ea:20:2f:bf:f6:
9a:d7:60:a3:6f:5b:31:60:c9:50:a6:84:69:bd:fa:
a2:12:1c:8e:70:a4:66:f9:7a:0a:6a:2c:70:19:d2:
8b:50:5a:bf:f9:13:8d:54:28:21:31:7d:7e:0c:93:
2b:34:cf:e3:ef:d2:c3:7f:4f:9b:51:cf:92:5f:7f:
cf:5e:47:16:e9:54:b3:97:ba:4b:1b:b1:45:e7:88:
9b:26:34:72:d2:4b:7d:37:b5:7c:52:ef:79:cf:1f:
7d:24:6b:d1:5e:22:29:70:36:7b:ae:e5:0e:40:66:
4c:fe:0a:65:ed:94:f3:14:8a:1d:a1:66:5c:75:f5:
40:b2:3d:af:e2:a1:19:27:f6:9b:fd:3f:7c:81:03:
d2:50:fd:66:14:69:17:dd:7d:2f:30:33:8b:c7:df:
75:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A3:99:CE:59:2A:4E:C1:91:0C:45:C2:23:39:FD:16:97:47:2E:2B
X509v3 Authority Key Identifier:
keyid:17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9f:87:a9:39:07:33:be:aa:b5:71:c4:b5:b8:98:cf:ce:f2:
91:a2:cd:ce:81:85:a3:11:3d:4a:a3:21:62:a8:67:7b:50:ec:
d6:31:6a:81:80:31:4f:e8:69:6a:dd:c7:97:10:fd:c4:64:7d:
f5:82:d8:9b:19:7d:0f:64:d9:a1:da:b4:a1:41:0b:12:4a:0b:
26:3f:cc:2a:5b:08:37:62:be:9d:fe:e1:a7:f9:3e:0b:27:0d:
99:d6:87:2e:67:6e:72:dd:9e:3d:5a:b6:52:1f:28:30:21:96:
c0:40:ad:59:7c:91:b5:37:30:ca:37:dc:08:24:40:d8:48:35:
0e:4d:12:9f:c2:31:65:6b:11:0c:15:df:e7:4f:62:e2:80:11:
6c:44:cb:99:51:08:8c:7d:0a:39:fe:7d:ee:d4:05:71:ac:df:
96:84:48:48:8c:85:f5:6b:d8:6e:d4:33:b9:92:cd:46:52:ea:
66:aa:28:74:24:f3:f5:23:5a:cf:32:37:55:60:d8:82:e8:ac:
0f:8d:23:75:f0:64:22:8c:c9:3f:43:dc:50:ee:0b:35:64:3e:
ee:f0:e8:48:bc:ed:9e:89:ae:e5:fa:4d:1a:18:a0:f0:67:e8:
d3:f5:81:6f:40:e4:62:a5:c3:7b:d1:f9:5f:21:e3:77:f8:a0:
e8:c5:44:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:25 2026 by rpki-client