Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
File: ftCMDM2oAs8gznq97qICFOBeR68.mft (raw, json)
Hash identifier: oY4nAYnpNI/FlA4NqInFa5lgpo83arS3vZJSkxxVKWI=
Subject key identifier: B1:FD:DC:7A:CA:98:E5:EE:F3:8A:FC:E6:D0:EF:41:8B:4D:8E:DB:7A
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Certificate issuer: /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial: 019D28BB4433BA340DECD36A00839ECF5198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:00:54 +0000
Manifest this update: Thu 26 Mar 2026 06:00:54 +0000
Manifest next update: Fri 27 Mar 2026 06:00:54 +0000
Files and hashes: 1: KrMG047MsDkcwkxBcUD2n7II2ek.roa (hash: 6Sar3x354qtl7kCtCHhcg2W3/WLEoHt036CjyIz1o2g=)
2: ftCMDM2oAs8gznq97qICFOBeR68.crl (hash: rNP8VfM46F78UBPInW6jHVuBnC5YPHXoh0VHK3GKULg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:44:33:ba:34:0d:ec:d3:6a:00:83:9e:cf:51:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Validity
Not Before: Mar 26 06:00:54 2026 GMT
Not After : Mar 27 06:00:54 2026 GMT
Subject: CN=b1fddc7aca98e5eef38afce6d0ef418b4d8edb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:62:ef:f4:59:5d:60:ee:a3:ed:3a:93:fb:
be:eb:c6:10:52:62:1a:f0:26:2f:23:4c:5f:e8:fc:
b5:f7:99:98:9a:ce:30:1b:f0:77:61:c8:79:15:fe:
18:80:11:09:44:67:3b:57:93:03:8b:cd:e2:56:9e:
00:8f:4b:0d:c9:34:1e:66:79:cf:cd:fe:4e:e6:bf:
42:12:14:05:09:63:4d:df:fd:48:50:d7:d6:94:16:
ff:01:b0:15:28:24:5f:3a:bb:fa:26:e7:e0:09:07:
d8:7d:81:ae:11:50:d6:b0:72:3c:25:32:35:c3:d1:
59:7b:59:bd:b7:6f:8a:11:05:7e:6f:8e:a4:6e:08:
e0:5d:bb:62:fa:2c:52:28:35:04:13:0f:13:de:8f:
fe:8f:0b:98:ec:e1:54:80:c5:2a:b2:f1:f0:6b:d4:
1f:70:77:44:fa:92:65:dd:33:1e:3b:e6:d7:c8:29:
7f:b7:e3:3c:1a:37:de:ff:23:d6:7d:ad:13:74:b2:
e9:e7:c2:d4:b9:e6:c7:c9:32:12:2a:ce:b4:0a:e9:
25:2f:45:fa:a6:40:97:df:6a:9d:37:75:49:43:d5:
19:95:98:70:48:75:db:82:c9:f3:52:ed:fb:68:aa:
4b:9a:a0:5d:da:84:1a:36:a1:a9:0b:9d:c2:38:4a:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FD:DC:7A:CA:98:E5:EE:F3:8A:FC:E6:D0:EF:41:8B:4D:8E:DB:7A
X509v3 Authority Key Identifier:
keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:3a:ef:f3:e6:f3:a7:37:a2:be:d0:95:7e:8b:78:53:54:d7:
5b:3d:db:6b:4c:6e:ff:67:3e:03:40:b8:cb:82:f7:34:17:7a:
1a:6d:43:fc:10:6c:62:05:c6:ca:32:a7:7a:6b:42:38:b6:45:
dd:6e:ba:a3:22:3c:1d:71:da:7a:43:63:5f:3d:47:ba:20:96:
5f:9e:3f:44:2c:7a:d2:95:0b:bc:ff:dc:da:49:e7:dc:51:c3:
5d:c7:00:4b:f5:35:f7:f3:64:07:71:22:84:5b:c2:89:38:a6:
ce:b4:65:42:34:fd:51:b7:73:9f:28:d1:50:f9:1f:fc:0d:b6:
2d:23:34:c2:3a:fa:36:31:71:57:a2:87:54:c1:1e:71:0d:8a:
41:bf:72:60:de:7d:4a:e0:9b:8b:f9:56:7c:a1:72:ed:7f:32:
66:a2:f3:b6:e1:eb:be:6f:e1:a4:01:45:e9:db:06:01:f8:b4:
a9:70:9e:64:e4:fd:c5:a7:0e:fe:6a:b0:d5:ee:a1:26:de:1c:
05:a3:13:56:b3:89:c0:21:a3:69:7b:31:c9:79:94:fc:45:f8:
14:8d:ec:72:6a:51:c5:00:42:55:8e:ad:e3:f0:fe:fc:ec:1a:
e4:52:0d:ea:34:03:76:be:f8:14:88:9d:94:85:a0:b1:69:26:
a3:78:24:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:09:23 2026 by rpki-client