Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json)
Hash identifier: c4ewusjCTIXZW0haSH36MZWs85dn5gsGIf2PWsNyMgk=
Subject key identifier: 2F:1A:38:51:54:84:9E:6B:1D:36:66:9A:CA:B0:BF:22:76:29:FD:2F
Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252
Certificate serial: 019D27A936C816FA3D798C4F2FC079386429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
Manifest number: 0248
Signing time: Thu 26 Mar 2026 01:01:34 +0000
Manifest this update: Thu 26 Mar 2026 01:01:34 +0000
Manifest next update: Fri 27 Mar 2026 01:01:34 +0000
Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: qXNnR9ZvIiRI8Cm2p7tN5SKnUazY7uTPjeus7zV7c5U=)
2: LaKgTWrQkobeVQ1YjLHD79ykJ5M.roa (hash: aWACl4kesdkEy6/Xa5+RkoBL499zzk7WgONY6WBsSTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:36:c8:16:fa:3d:79:8c:4f:2f:c0:79:38:64:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d409032818a628cd2b28383802d77e7494a252
Validity
Not Before: Mar 26 01:01:34 2026 GMT
Not After : Mar 27 01:01:34 2026 GMT
Subject: CN=2f1a385154849e6b1d36669acab0bf227629fd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:d2:fc:d1:d0:f2:aa:b8:dd:c4:cd:4b:5b:
23:fa:88:5a:2c:42:d0:17:5c:98:56:f7:df:1b:2e:
f5:61:1f:ab:f8:a6:53:50:5c:af:fd:3e:c6:f7:5f:
37:ba:bd:41:00:8d:b1:b9:a5:81:0c:6f:03:04:b1:
01:ec:03:98:1d:33:e8:cd:74:e9:06:f8:5c:34:63:
59:52:c7:77:6c:8f:b3:fe:27:a3:d0:5a:db:a6:e4:
b0:30:7c:30:35:29:e8:6c:fe:85:9b:db:2e:ee:2d:
5c:ea:41:e0:f8:f2:27:c0:e6:3a:67:65:67:a3:89:
3c:68:76:d5:1b:29:4f:0c:07:f2:bd:92:79:6e:85:
66:55:ed:30:a2:c4:d5:60:39:4e:2b:0f:5a:68:f7:
a5:f3:52:9f:62:84:e3:67:0d:74:01:48:0c:f7:b7:
15:5d:20:c0:bd:70:c8:95:d0:be:d3:11:f4:86:c4:
f1:b6:49:75:2a:5d:bf:39:13:31:23:a1:63:1c:7b:
64:02:8a:db:eb:8c:08:a2:f4:55:e2:b8:3e:a8:d6:
8c:af:55:75:d2:3c:b9:da:37:62:26:ab:21:cb:ee:
f0:2f:c5:27:56:82:f5:68:82:75:02:10:57:6b:92:
a2:b6:53:4f:b8:81:0e:ac:66:0b:22:3d:ad:f4:de:
e1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1A:38:51:54:84:9E:6B:1D:36:66:9A:CA:B0:BF:22:76:29:FD:2F
X509v3 Authority Key Identifier:
keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a2:7e:a6:7b:a1:b0:05:01:af:88:9b:1c:9a:3d:70:ad:f5:
29:21:0e:ba:29:62:a3:b7:f1:6d:b9:66:8a:ec:0d:df:64:93:
eb:49:db:2e:66:2e:81:69:02:33:8b:a1:eb:7d:5b:67:86:15:
ae:5d:d0:bc:fb:1b:cd:bc:bf:6b:28:c3:d6:3c:33:f1:50:7a:
ee:a6:b3:5c:f2:8d:13:a8:10:b6:62:2b:45:9d:4e:e2:a0:b8:
62:3c:19:09:c3:c7:e0:95:ba:0a:cd:c9:da:eb:76:50:a8:42:
8d:7f:b0:14:f4:c7:47:27:85:5d:4a:f5:80:1f:fe:d0:cf:73:
ca:b4:56:68:a5:ff:9a:50:4b:c2:a4:93:7b:08:4e:d6:4a:ce:
53:7d:2d:62:47:bf:ba:03:6a:5c:f2:36:91:1f:a1:7f:8b:69:
ad:1e:6d:b7:76:dd:f1:ba:f8:d9:47:31:e7:19:4c:8b:a1:e2:
a7:31:9b:de:dd:54:92:d4:c5:42:82:7d:3d:ca:39:b9:c8:ff:
cc:f8:b8:24:7e:71:90:47:65:68:e9:61:4a:c0:07:bf:5d:ac:
fc:22:54:5c:5e:e4:f9:03:5a:14:be:f2:e7:99:4d:9b:f5:f2:
3c:3d:91:32:9a:25:31:a1:c9:c4:0a:99:92:56:a4:a1:04:30:
60:2d:bd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:11:35 2026 by rpki-client