Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
File: FKwgrPKQIHHnL2fKBrCc2jgkeys.mft (raw, json)
Hash identifier: 64MsKqBpUVqr8x+5gCyeutTBaZWMAeXiCpODHbZy59E=
Subject key identifier: 3C:35:4C:3C:29:9C:39:50:A5:A1:76:91:3C:2C:4D:C6:D5:95:D0:AD
Authority key identifier: 14:AC:20:AC:F2:90:20:71:E7:2F:67:CA:06:B0:9C:DA:38:24:7B:2B
Certificate issuer: /CN=14ac20acf2902071e72f67ca06b09cda38247b2b
Certificate serial: 01A13E5CBC9E52B0A0C59759AEF3E3933DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
Manifest number: 01A2
Signing time: Thu 15 Oct 2026 07:00:27 +0000
Manifest this update: Thu 15 Oct 2026 07:00:27 +0000
Manifest next update: Fri 16 Oct 2026 07:00:27 +0000
Files and hashes: 1: FKwgrPKQIHHnL2fKBrCc2jgkeys.crl (hash: kwCwTbkYBiaWqVQZ7UbBhv0r7+DhY/8b5j1/g7Mhi98=)
2: itlXqJc3U1HM0l_aHUwuocZIOgY.asa (hash: jvgVkcjLMzzXYl6tKUWEg66gAP/y82yjskFxO+g+mRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:bc:9e:52:b0:a0:c5:97:59:ae:f3:e3:93:3d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ac20acf2902071e72f67ca06b09cda38247b2b
Validity
Not Before: Oct 15 07:00:27 2026 GMT
Not After : Oct 16 07:00:27 2026 GMT
Subject: CN=3c354c3c299c3950a5a176913c2c4dc6d595d0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:85:c1:90:1f:85:96:c9:fc:5a:31:bd:31:47:
5e:0f:93:0f:87:5a:ae:c3:67:50:ba:d3:20:dd:1d:
2c:a6:5e:7b:a9:12:56:8d:a0:24:bc:7b:91:41:53:
e5:92:b9:b8:30:8c:a6:b2:3a:50:48:aa:95:c8:17:
66:88:f8:34:3d:de:46:f6:42:9a:3c:9b:df:9f:75:
1e:4a:5f:b0:02:cf:8d:bc:15:f5:e1:dc:74:31:13:
fe:1b:53:8a:23:e2:cf:b9:5f:07:69:58:55:dc:c6:
d5:e8:36:c4:f7:4e:70:f5:64:b8:1a:6b:39:8a:4a:
be:27:b6:4a:49:7b:e1:3a:00:ad:61:cd:77:2c:98:
83:3d:0a:f8:df:b6:54:7b:fb:ea:16:0b:92:7c:bc:
94:a2:bb:03:9b:26:ad:0c:67:c0:45:4b:2c:34:91:
df:53:48:ab:4a:9d:d4:52:14:66:5d:32:e7:63:0f:
5d:09:43:ed:f4:3a:fb:77:bf:b8:7f:94:ff:63:f7:
bd:5c:46:00:68:47:bd:d7:77:fa:27:69:04:10:d3:
85:3b:2f:b3:0f:91:dc:19:ce:13:02:a5:ef:08:13:
34:c2:41:bf:cc:aa:57:9a:cf:53:0a:01:d6:47:1e:
ef:74:46:50:9e:d2:5b:d2:51:f9:3d:70:4c:09:e5:
2c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:35:4C:3C:29:9C:39:50:A5:A1:76:91:3C:2C:4D:C6:D5:95:D0:AD
X509v3 Authority Key Identifier:
keyid:14:AC:20:AC:F2:90:20:71:E7:2F:67:CA:06:B0:9C:DA:38:24:7B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6d:c4:ec:0e:14:37:21:26:34:b4:3b:ef:42:53:17:6f:cf:
5f:64:58:fa:30:f0:af:fa:af:97:a9:b8:b4:05:97:d2:ac:a7:
e6:18:a5:45:f5:92:b7:2f:6c:ae:89:2d:82:34:18:b3:8a:b1:
17:99:7b:2a:e4:ec:90:74:30:78:be:ba:2a:62:84:58:7a:28:
a3:60:b3:d6:48:9e:d4:e9:e9:4c:e7:dc:93:22:a4:08:6d:b9:
5d:a7:61:59:59:10:90:85:5b:c4:ef:fb:63:49:0f:ed:4f:9c:
83:aa:f3:22:bc:b3:e4:55:a7:63:c3:37:c6:f3:b6:f1:56:91:
84:12:34:0f:00:7c:50:49:53:7f:1d:48:da:00:19:af:25:c8:
db:41:06:db:20:ad:a8:e8:2c:01:fe:32:77:45:30:56:1c:f1:
eb:72:d5:12:21:8d:3e:f3:8b:d1:d0:6f:d0:a8:da:1d:0f:d3:
66:95:d5:6f:ba:ea:31:26:ea:79:01:32:c5:ad:d9:a1:04:15:
0b:8d:b2:7f:4b:7f:0c:91:23:9a:1e:46:b4:67:f7:2a:f7:54:
d2:0f:17:bd:2d:85:b6:81:6f:27:56:da:45:84:8c:7b:da:a7:
c9:98:4b:83:ea:88:6e:ea:af:f7:13:28:62:35:b1:d5:2f:78:
92:3e:99:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:35:09 2026 by rpki-client