Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
File: ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft (raw, json)
Hash identifier: YDAbSH25f8SNimPr+2gSFzXxoPWNyPSbOEG/MCHpQ2c=
Subject key identifier: 7B:E7:6E:B6:3A:15:DF:7F:27:C9:09:07:37:08:73:EF:DB:2D:5D:37
Authority key identifier: 7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52
Certificate issuer: /CN=7ed77eafdb387afd17574272c9374c8180370f52
Certificate serial: 019D2A724CB858557B70B1D9C758CAECAC85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
Manifest number: 033C
Signing time: Thu 26 Mar 2026 14:00:26 +0000
Manifest this update: Thu 26 Mar 2026 14:00:26 +0000
Manifest next update: Fri 27 Mar 2026 14:00:26 +0000
Files and hashes: 1: ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl (hash: vZVmFoeL64yHwDFp4GHByeaTdlYVAnZfQzZ4e41oPHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:4c:b8:58:55:7b:70:b1:d9:c7:58:ca:ec:ac:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed77eafdb387afd17574272c9374c8180370f52
Validity
Not Before: Mar 26 14:00:26 2026 GMT
Not After : Mar 27 14:00:26 2026 GMT
Subject: CN=7be76eb63a15df7f27c90907370873efdb2d5d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:25:7f:16:22:a4:4d:c7:6a:b1:a2:9e:5d:
c5:20:52:87:c5:d6:56:0a:8d:7f:e7:13:75:9f:7b:
39:5b:26:a2:dd:62:04:fb:96:94:9e:f2:14:ec:ca:
08:64:3c:66:7c:ad:30:8d:80:ef:71:fb:12:56:ef:
64:46:0d:36:82:f2:1b:8d:bd:bb:18:21:c4:2c:84:
e6:5d:fb:26:7e:4a:da:6d:2e:39:96:12:5f:6f:ed:
78:b4:65:cc:10:6f:7d:28:df:49:a9:ca:92:04:54:
01:25:0f:19:e7:aa:74:97:d6:2f:1b:a7:f6:9e:4f:
42:d4:7c:c0:13:19:bb:12:20:5c:55:10:b2:0d:e7:
d3:9f:ed:c1:c7:ff:54:11:8d:35:38:07:4d:fd:a7:
cb:40:d5:08:3e:f8:81:54:ef:d3:16:6f:98:50:91:
23:d8:bc:dd:7e:1c:6e:0d:3a:a8:e1:aa:41:80:c4:
b5:3c:44:de:82:d9:f3:00:fc:5d:92:97:39:5b:0e:
f1:b1:68:40:7f:55:c9:af:cc:62:8f:8d:a4:b9:3e:
87:ee:75:11:e9:28:95:c4:31:eb:67:0b:88:78:01:
4f:c5:6c:59:45:28:8b:d7:39:dc:36:70:b8:52:35:
09:0c:e0:6c:35:d9:5c:69:c6:1c:3c:9e:3c:94:d0:
72:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E7:6E:B6:3A:15:DF:7F:27:C9:09:07:37:08:73:EF:DB:2D:5D:37
X509v3 Authority Key Identifier:
keyid:7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ec:9a:31:73:f3:d4:d0:54:11:82:26:00:d5:b0:9e:1d:75:
e2:e4:f2:e2:1b:b1:c7:6a:eb:fe:2b:dc:fd:04:da:9c:27:d8:
0f:46:1c:5b:38:d5:b3:1a:ac:c3:d6:3f:25:88:3e:ca:70:b8:
39:df:f9:9a:28:28:64:0f:f6:ec:e3:a4:21:3f:df:d4:bc:e7:
58:75:ff:a8:c7:38:2b:48:62:ad:ce:af:34:51:98:29:f5:4d:
4a:2e:e3:d0:ae:b8:cd:71:5e:76:07:a1:e5:ae:95:1c:78:38:
1c:a2:28:87:7f:b3:59:d2:40:9b:e3:d4:f7:1c:fb:2d:c2:af:
2c:9c:3d:fc:2b:71:d7:16:44:71:3b:04:7c:df:37:3e:fb:a6:
37:ea:92:b0:1b:47:07:84:25:35:41:ee:02:70:28:5f:a4:a9:
6b:cb:47:19:8e:3f:3a:92:84:24:e9:86:5d:77:54:eb:a1:65:
d5:c9:68:93:61:2b:9d:bc:37:bc:1d:ef:f9:8f:69:b4:c5:7a:
43:e2:f9:ad:55:7d:60:cb:96:54:6f:3a:a9:ab:04:0d:5a:8c:
78:cc:da:8d:51:de:ae:28:d4:46:09:de:66:30:b6:f7:b8:56:
8c:94:50:8c:e8:d1:59:7e:78:bf:52:21:9d:78:ea:79:7d:2d:
97:8c:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:07 2026 by rpki-client