Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json)
Hash identifier: WhNcUrK+PnTZ97ZZvgoVcTkR+/KmFbEs4OzCvxlUD4E=
Subject key identifier: 23:44:A2:51:75:32:4B:86:77:60:18:33:A7:6D:E3:E3:1A:58:6F:07
Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252
Certificate serial: 019F91A3BBE21F611CD33889F2162B2B1B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
Manifest number: 0388
Signing time: Fri 24 Jul 2026 01:00:54 +0000
Manifest this update: Fri 24 Jul 2026 01:00:54 +0000
Manifest next update: Sat 25 Jul 2026 01:00:54 +0000
Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: GfOmfu6SHaL5FSvEITEL2p5eeXgZZ3XWZee70gy1HrA=)
2: LaKgTWrQkobeVQ1YjLHD79ykJ5M.roa (hash: aWACl4kesdkEy6/Xa5+RkoBL499zzk7WgONY6WBsSTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:bb:e2:1f:61:1c:d3:38:89:f2:16:2b:2b:1b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d409032818a628cd2b28383802d77e7494a252
Validity
Not Before: Jul 24 01:00:54 2026 GMT
Not After : Jul 25 01:00:54 2026 GMT
Subject: CN=2344a25175324b8677601833a76de3e31a586f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:be:85:3a:8a:b4:22:d5:d8:6c:e1:52:86:
a2:a1:7e:1d:db:af:a8:35:48:9d:d9:ea:69:ed:74:
e1:e1:90:fe:7f:8e:db:c1:b7:58:cd:f3:cd:53:9f:
5e:8f:24:23:db:ad:58:e0:07:59:77:6d:65:ae:2d:
b9:dc:21:4a:25:70:37:40:8e:85:7c:6c:a3:7d:71:
60:81:65:bc:c5:3e:79:81:5a:23:3f:f9:bc:da:f4:
7a:66:b5:98:73:55:54:37:ec:02:47:ab:b8:d9:7f:
c6:a3:6a:fa:e1:b7:39:8c:e6:28:4c:93:0a:12:84:
73:f2:3a:7a:ce:a7:9d:e2:48:72:8a:5a:dc:32:38:
2b:53:47:b0:ee:d4:23:72:ed:7e:b8:35:7d:1d:b6:
bb:13:f4:34:2b:f0:41:3b:31:18:a5:15:ee:ab:d9:
f0:ed:ec:86:ff:e1:2b:09:3e:5d:0c:7d:19:86:cb:
38:d7:12:a2:e6:8e:1d:23:55:b5:17:51:dd:0b:f1:
b5:e6:54:7d:83:3b:6e:e6:a3:53:9b:51:05:db:47:
22:bb:5f:ca:11:12:47:56:58:c8:4c:8a:43:eb:ad:
76:a7:92:0e:4e:9f:5d:f4:d4:f0:f1:1d:e7:3b:7d:
62:83:68:cf:f3:b0:a8:78:66:6d:ad:d0:24:14:c9:
b2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:44:A2:51:75:32:4B:86:77:60:18:33:A7:6D:E3:E3:1A:58:6F:07
X509v3 Authority Key Identifier:
keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:58:35:b0:8e:b0:80:e1:c0:28:1f:65:c7:42:53:a8:8d:5d:
59:64:3b:9f:d5:1d:74:f9:56:8c:b3:5b:00:46:67:f6:9a:46:
58:11:aa:8a:6b:b8:b2:95:cf:d8:90:08:13:3a:b4:c9:87:fd:
32:61:db:2b:71:f8:39:3a:09:a5:b1:18:11:fb:ac:21:55:f6:
20:6f:31:68:03:4f:a0:9e:1a:29:e2:24:f8:d8:1d:7b:68:f7:
b8:26:3d:97:01:fa:df:2f:ef:df:73:af:1a:e7:d2:a0:32:48:
22:ef:c6:38:e8:34:f9:70:17:c3:90:79:ed:65:a9:72:8d:d3:
4a:d2:36:da:62:59:33:d2:2f:28:00:6b:c5:1e:65:28:b4:f9:
f3:cb:5e:ad:b8:1f:d5:b4:56:95:95:8f:09:74:c6:27:ba:75:
e6:d9:c1:a0:5f:c7:59:0a:5d:29:86:36:57:96:2b:c1:38:aa:
24:69:66:af:3d:2f:57:af:df:93:5a:33:9f:78:23:d8:41:0b:
60:f9:c3:9d:16:f6:c8:72:87:e9:d4:19:91:ef:d0:b5:ab:8a:
c8:7a:b9:2c:c9:eb:b0:ca:cc:43:fd:c4:49:83:54:c8:f3:32:
49:98:58:83:f4:14:28:4b:64:1d:75:77:db:8d:28:f5:56:0d:
25:e0:c7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:56:40 2026 by rpki-client