Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json)
Hash identifier: DM80e9Ol8eHIF7pKv0J6kH4oaTsbLKJUzP5KeNgfA3o=
Subject key identifier: E7:0E:A3:EB:58:CF:7C:08:42:20:EF:B5:66:45:C4:CC:72:7C:ED:EC
Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252
Certificate serial: 019E1ED9A3DF45F8FA9E21A31F5E0FB2F258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
Manifest number: 02C8
Signing time: Wed 13 May 2026 01:00:40 +0000
Manifest this update: Wed 13 May 2026 01:00:40 +0000
Manifest next update: Thu 14 May 2026 01:00:40 +0000
Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: E66Ly3pQaJuIYNX6RgV9cjCb/+DIE/K6oUqoHp9jYf8=)
2: LaKgTWrQkobeVQ1YjLHD79ykJ5M.roa (hash: aWACl4kesdkEy6/Xa5+RkoBL499zzk7WgONY6WBsSTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:a3:df:45:f8:fa:9e:21:a3:1f:5e:0f:b2:f2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d409032818a628cd2b28383802d77e7494a252
Validity
Not Before: May 13 01:00:40 2026 GMT
Not After : May 14 01:00:40 2026 GMT
Subject: CN=e70ea3eb58cf7c084220efb56645c4cc727cedec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:02:f3:76:4d:a4:c9:37:bc:34:f6:b9:2e:
3c:e2:af:15:d5:f0:87:61:44:10:36:47:f8:2c:09:
33:83:02:d5:32:96:af:52:22:df:60:c8:f5:70:c3:
26:58:06:3c:b5:3d:6c:25:48:0e:55:61:ba:4c:9b:
e4:00:08:c9:ff:5a:f8:ac:4a:75:5b:1d:c0:b6:8b:
f5:fd:15:55:fc:89:78:55:c4:9c:9d:7c:e2:3c:9a:
79:8a:81:87:b1:b0:31:e4:ca:7f:b4:14:bc:e0:32:
4b:e2:6d:9c:17:47:df:a9:b1:9c:a9:12:bd:80:34:
12:3a:65:5a:30:92:46:7b:fc:d7:b3:c6:23:ee:4f:
f0:cf:54:d8:52:91:d2:7c:d5:e0:69:53:4b:7d:1c:
21:cc:5c:b8:f6:f8:84:74:e7:c1:4b:d6:a7:cb:6b:
96:1e:45:a9:71:d5:37:29:57:ca:11:90:92:f8:cf:
4f:86:1f:10:9a:d6:79:4c:fb:8b:40:16:29:a4:76:
a0:de:ef:42:ca:29:3d:50:b0:33:54:21:5e:c6:45:
fd:65:9a:3a:e1:86:b2:be:0d:bb:a3:2e:c0:d7:58:
35:94:5a:27:4a:04:32:5e:c9:a0:1d:d2:54:d8:e4:
e7:12:63:cf:0a:a3:15:ff:5b:fe:4e:bf:02:80:b9:
fc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0E:A3:EB:58:CF:7C:08:42:20:EF:B5:66:45:C4:CC:72:7C:ED:EC
X509v3 Authority Key Identifier:
keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:03:33:fb:d6:59:e2:a8:5f:3e:d0:1b:9e:f3:3e:e4:d5:d9:
89:bc:0f:1b:bb:6a:43:ec:04:5d:95:34:66:cd:d6:c3:f2:99:
32:e2:dc:05:4b:dd:8d:cf:18:a1:34:0f:61:5a:76:d9:5d:d7:
55:e6:35:1b:e8:6c:9d:ae:95:a2:65:b8:84:26:f5:da:c7:cf:
5f:f7:7a:8b:3a:c6:40:0c:4b:92:30:87:db:63:72:24:4e:f2:
3a:d0:dd:25:8e:79:72:54:fe:57:a7:2b:23:15:2e:12:62:64:
cc:08:5f:a1:24:25:27:03:26:5f:b5:c4:88:c8:07:4c:02:cd:
a9:b1:9e:ee:30:05:27:d1:60:34:07:c8:8e:83:3f:8a:4a:d3:
2f:b7:b4:f1:f5:c4:0c:8d:6d:20:f8:d2:3e:b9:9a:b2:4a:c0:
5b:63:71:c3:2a:1f:85:31:ca:f7:b1:33:9e:89:74:5f:98:c5:
0d:6c:3e:8a:43:3f:b0:9c:ec:37:a4:4b:b8:34:27:8c:50:68:
64:30:2d:75:ee:50:ef:b2:a3:88:35:e5:09:3b:f1:c7:5c:4b:
85:d9:bc:a7:b2:65:6b:01:f2:b3:5b:ba:b3:1a:92:8e:2c:61:
99:eb:b5:3b:07:12:f0:42:f3:47:fa:f3:e8:89:fd:17:02:3a:
b2:b5:d4:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2aPfRfj6niGjH14PsvJYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZDQwOTAzMjgxOGE2MjhjZDJiMjgzODM4MDJkNzdlNzQ5
NGEyNTIwHhcNMjYwNTEzMDEwMDQwWhcNMjYwNTE0MDEwMDQwWjAzMTEwLwYDVQQD
EyhlNzBlYTNlYjU4Y2Y3YzA4NDIyMGVmYjU2NjQ1YzRjYzcyN2NlZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj4C83ZNpMk3vDT2uS484q8V1fCH
YUQQNkf4LAkzgwLVMpavUiLfYMj1cMMmWAY8tT1sJUgOVWG6TJvkAAjJ/1r4rEp1
Wx3Atov1/RVV/Il4VcScnXziPJp5ioGHsbAx5Mp/tBS84DJL4m2cF0ffqbGcqRK9
gDQSOmVaMJJGe/zXs8Yj7k/wz1TYUpHSfNXgaVNLfRwhzFy49viEdOfBS9any2uW
HkWpcdU3KVfKEZCS+M9Phh8QmtZ5TPuLQBYppHag3u9Cyik9ULAzVCFexkX9ZZo6
4Yayvg27oy7A11g1lFonSgQyXsmgHdJU2OTnEmPPCqMV/1v+Tr8CgLn8XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcOo+tYz3wIQiDvtWZFxMxyfO3sMB8GA1UdIwQY
MBaAFBbUCQMoGKYozSsoODgC1350lKJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMt
MGFlYjlkMzc3ODdlLzEvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMtMGFlYjlkMzc3ODdl
LzEvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwMz+9ZZ
4qhfPtAbnvM+5NXZibwPG7tqQ+wEXZU0Zs3Ww/KZMuLcBUvdjc8YoTQPYVp22V3X
VeY1G+hsna6VomW4hCb12sfPX/d6izrGQAxLkjCH22NyJE7yOtDdJY55clT+V6cr
IxUuEmJkzAhfoSQlJwMmX7XEiMgHTALNqbGe7jAFJ9FgNAfIjoM/ikrTL7e08fXE
DI1tIPjSPrmaskrAW2NxwyofhTHK97Eznol0X5jFDWw+ikM/sJzsN6RLuDQnjFBo
ZDAtde5Q77KjiDXlCTvxx1xLhdm8p7JlawHys1u6sxqSjixhmeu1OwcS8ELzR/rz
6In9FwI6srXUdQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:51:54 2026 by rpki-client