Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json)
Hash identifier: iFPuaSn+ftsiLbnsG9xyjs+rwFXk/nZCkAm979Ckmds=
Subject key identifier: B5:C2:DA:73:40:8B:6F:E9:6F:F1:A8:2F:ED:D2:96:FB:BC:C1:D0:5A
Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252
Certificate serial: 01A0D9F1C6CE22BF5D096F52036E4FDA8337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
Manifest number: 0432
Signing time: Fri 25 Sep 2026 19:01:35 +0000
Manifest this update: Fri 25 Sep 2026 19:01:35 +0000
Manifest next update: Sat 26 Sep 2026 19:01:35 +0000
Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: cJcgefXT1mxNRxmBSMCmSckEOgEnWrtUpBCS0zDEJPU=)
2: LaKgTWrQkobeVQ1YjLHD79ykJ5M.roa (hash: aWACl4kesdkEy6/Xa5+RkoBL499zzk7WgONY6WBsSTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:c6:ce:22:bf:5d:09:6f:52:03:6e:4f:da:83:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d409032818a628cd2b28383802d77e7494a252
Validity
Not Before: Sep 25 19:01:35 2026 GMT
Not After : Sep 26 19:01:35 2026 GMT
Subject: CN=b5c2da73408b6fe96ff1a82fedd296fbbcc1d05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:7d:5a:ea:51:a0:1e:0e:bc:a5:3a:2f:63:
09:64:3e:e0:91:98:9f:82:f8:4e:79:3e:1d:0f:a7:
29:dc:9a:60:0d:d9:9e:c7:fb:3e:17:07:1a:77:b9:
2b:35:c0:1e:0f:f1:ce:10:56:c5:bc:bc:9d:5c:08:
ca:09:54:d9:c3:f4:7d:e3:19:ea:d8:33:3d:0f:00:
1a:df:d9:af:df:6b:b4:53:1b:3b:d0:0a:9f:98:a4:
7a:2e:16:ff:fa:d4:b2:1c:2e:7b:63:4b:45:85:17:
05:7c:76:6d:a2:81:41:82:0d:91:27:c8:43:51:77:
e8:3d:19:d3:b3:b3:86:fe:ba:ce:db:5e:35:00:43:
19:6d:94:cc:7e:66:65:d0:6e:d7:54:69:c9:46:1e:
12:02:bd:ab:0d:32:c2:9c:81:a0:c4:98:ae:46:4b:
2e:92:8c:d6:fb:96:71:88:0d:64:60:1c:c9:2f:1c:
57:d7:bb:f8:84:77:f1:43:6b:9f:e3:9a:a2:5b:c2:
69:c5:0f:59:05:58:59:09:e9:c3:f9:27:56:39:c6:
ed:00:d1:24:44:8b:42:d2:a5:98:9e:98:95:fc:39:
85:1b:91:48:e5:fb:8c:65:be:e9:5f:72:ec:b1:42:
74:ef:7d:7f:66:2f:f0:f3:b0:8c:e2:90:91:3d:18:
f4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C2:DA:73:40:8B:6F:E9:6F:F1:A8:2F:ED:D2:96:FB:BC:C1:D0:5A
X509v3 Authority Key Identifier:
keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fc:8a:2f:26:da:b7:54:a5:48:33:59:73:c4:4f:05:cf:69:
41:39:a2:6d:e3:dc:3b:9f:27:b0:d6:ff:4c:c4:7c:79:d4:4e:
3e:64:b6:a2:b0:0f:2a:1a:3a:84:70:a0:87:76:27:e3:61:ac:
ef:fc:10:30:13:b2:56:62:78:d8:2b:cf:2e:e1:6b:2a:12:fc:
dc:5a:b6:39:83:f3:03:3b:30:da:eb:eb:c0:78:52:4e:b5:0d:
dd:1d:c3:76:de:ba:f5:0f:d0:3d:ff:86:f8:e5:a4:a7:25:d3:
ab:4e:4f:d1:d7:e8:6d:1a:d8:af:6c:9a:67:de:3b:99:eb:9f:
22:73:99:2a:ab:99:a7:ec:ab:4c:27:a9:aa:1e:03:10:87:d5:
db:be:14:24:da:eb:63:85:9f:c3:eb:0d:2c:b0:9c:85:20:aa:
91:c3:7e:dd:6a:35:3d:81:94:9d:c0:bc:32:68:ef:e8:61:59:
97:36:6c:31:3f:4f:2e:81:bf:d3:23:af:7f:2b:19:7f:bc:b1:
29:f5:e1:98:cf:e2:ce:6f:5b:91:a5:c6:ee:57:ca:a4:74:9f:
aa:10:fb:a1:5d:f3:64:6f:a4:fa:ce:65:b9:c1:1f:31:4a:88:
03:d6:d2:a7:fc:51:8c:51:af:82:9a:4b:16:b8:0b:9b:3e:ef:
cd:99:20:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:03:46 2026 by rpki-client