Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
File: FW8E_FyodTFasLhUtkUGsJyZjpo.mft (raw, json)
Hash identifier: +bNlXkwZUJNNcZHnZK6OMF4FMAYIJ/KHn6xYRMXB5JU=
Subject key identifier: A0:04:04:45:C5:7A:95:04:AD:2D:06:D6:71:85:4F:FD:01:4C:13:19
Authority key identifier: 15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
Certificate issuer: /CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Certificate serial: 01A1792800E7BAFDEC24BBDF386633043CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
Manifest number: 1AC2
Signing time: Mon 26 Oct 2026 17:00:27 +0000
Manifest this update: Mon 26 Oct 2026 17:00:27 +0000
Manifest next update: Tue 27 Oct 2026 17:00:27 +0000
Files and hashes: 1: B4cjW010Zm8FXtNv-3s2C-U1eDo.roa (hash: d0ILe5715y8lBsM7jJKFWLnSTqykB9yP4A1a+KHXASg=)
2: FW8E_FyodTFasLhUtkUGsJyZjpo.crl (hash: uS9Ma4PqM4PXSnBeGhChiY4Kt2FbihFDLcjpC6MfZFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:28:00:e7:ba:fd:ec:24:bb:df:38:66:33:04:3c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Validity
Not Before: Oct 26 17:00:27 2026 GMT
Not After : Oct 27 17:00:27 2026 GMT
Subject: CN=a0040445c57a9504ad2d06d671854ffd014c1319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3c:eb:21:39:ac:34:f9:dd:fc:bb:98:a2:c5:
86:2b:cc:93:fc:cb:8e:2d:61:c8:c0:7b:19:5b:39:
ef:4f:ad:c8:54:cb:6e:2d:85:68:84:dd:00:15:ee:
ab:98:51:b1:64:8a:d3:ad:42:de:b8:1a:8a:c6:3d:
98:8d:d3:8c:54:86:73:5a:79:22:f1:b9:5b:4d:a4:
eb:bb:92:3e:32:27:a8:6f:4c:94:da:66:4f:f5:24:
3b:0a:33:5b:40:39:58:7b:dd:a5:8f:3e:44:bb:fe:
bf:f3:ab:61:04:bc:ef:bf:46:37:70:0b:d1:2b:aa:
4e:e7:91:d2:89:67:5b:3a:5a:25:43:05:89:db:5b:
09:84:a0:77:b9:1d:52:6a:74:d3:21:45:63:47:ab:
17:9d:10:ea:f7:7b:49:50:f3:a3:7f:30:c6:66:72:
dc:b1:8a:e5:ff:c0:e8:9c:1c:59:3f:44:90:7f:07:
de:77:e1:46:78:c2:c7:3d:ba:a9:fa:e7:2c:be:71:
f6:82:4b:ce:fa:e7:45:d2:23:cc:c0:98:85:00:9b:
27:be:66:32:a0:25:22:12:8c:dd:48:5f:ae:60:f2:
7c:f6:c1:e5:1f:52:6a:22:f9:b6:be:59:af:af:e9:
42:cc:77:c2:a0:7d:0f:89:32:24:3c:4d:27:da:fd:
e0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:04:04:45:C5:7A:95:04:AD:2D:06:D6:71:85:4F:FD:01:4C:13:19
X509v3 Authority Key Identifier:
keyid:15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b2:e0:19:f7:7a:6f:55:a2:41:c9:90:0a:35:0a:d3:03:91:
e0:5d:3f:8a:81:3f:80:16:00:8d:b6:d8:c3:ec:75:bc:b6:8e:
54:b7:b0:41:d2:30:5a:1a:36:28:a9:10:cd:a9:86:28:22:d2:
f4:31:34:60:73:ee:3a:a1:0d:b4:d6:60:77:c5:32:a3:a5:6a:
f6:b6:9a:57:87:91:b5:c7:fb:bb:67:4a:28:d0:46:d0:53:f9:
f1:f3:71:60:3c:5b:bf:fa:82:0b:44:5c:68:ae:6a:0a:b7:76:
a4:2f:2b:f1:ee:e3:c5:f6:10:96:4e:47:aa:00:43:8b:62:b2:
e5:a4:4e:34:98:b1:e9:e8:e7:b1:02:89:0e:ec:1f:3a:0e:40:
c1:06:b8:15:2f:7a:b9:9d:62:a5:6a:da:be:48:af:cd:f2:ff:
a3:d2:7b:46:1b:22:f9:d3:af:b7:a9:3d:63:33:7d:38:5c:79:
d1:97:70:5b:7e:e9:a3:9a:49:fc:56:0b:f0:92:bf:45:f2:05:
05:30:d2:81:68:6a:00:1f:5c:db:f8:8f:5e:1f:ef:fc:cf:a8:
34:07:e9:28:94:82:69:c6:f0:1e:51:59:c6:7b:e4:3f:60:29:
1d:7a:ec:79:e0:3a:35:9e:7a:45:4c:e0:9d:42:79:21:cb:64:
50:54:3a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:09:32 2026 by rpki-client