Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: bMJi8LFhbVoicXGVKSbVjjek32w6m/LbzWqjeSTiC44=
Subject key identifier: E5:C4:51:AF:5D:5D:28:5B:FA:4A:A1:2B:57:FD:BF:2D:5B:1E:5A:58
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 01A0CF361AC2DA7E8C4E222EA2054426B3AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 1A44
Signing time: Wed 23 Sep 2026 17:00:24 +0000
Manifest this update: Wed 23 Sep 2026 17:00:24 +0000
Manifest next update: Thu 24 Sep 2026 17:00:24 +0000
Files and hashes: 1: LJweqdiAuex5ffHJZ-p0UeT6XrY.asa (hash: qexPojaaUKUXJCAIdb2LuHOm0GKtKH2oA0dqsygCpWc=)
2: O7voTXfNHlJYLDFfFhD0IyP6RWQ.roa (hash: LffxuYhlhgmo9uurPfnZvk9c5Vb5QUT4U1yEBcpzUI0=)
3: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: M3WYwaZltpIEt9uU9YRMel6oXGiYNiFt3S8w6B9y3qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:1a:c2:da:7e:8c:4e:22:2e:a2:05:44:26:b3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: Sep 23 17:00:24 2026 GMT
Not After : Sep 24 17:00:24 2026 GMT
Subject: CN=e5c451af5d5d285bfa4aa12b57fdbf2d5b1e5a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:62:9d:37:08:71:ba:82:de:b3:63:c8:98:
50:c5:4a:89:23:ce:f3:f9:37:ed:24:9b:12:54:e1:
9d:90:03:2b:73:bd:a9:9f:be:fc:26:1f:25:19:8d:
08:e5:35:58:31:b2:68:63:4a:92:ad:9d:ee:08:3a:
2a:f7:80:11:b8:4c:7a:c7:4e:ae:4f:9c:e4:6c:6b:
09:d4:7b:17:5c:75:53:00:10:0c:40:a5:c3:14:78:
38:4f:d5:d4:0c:91:44:81:90:06:30:90:33:18:c8:
11:24:d5:48:d3:9f:d8:8a:2a:93:4d:1e:6c:b4:6c:
b2:f2:66:d1:98:1d:82:db:37:ef:48:df:5b:7f:6f:
4e:9b:b1:02:4d:6a:9f:35:05:5e:b1:14:2c:5d:0a:
24:77:e2:cd:3f:f0:32:26:4a:77:0a:da:86:60:97:
cc:f6:49:73:8e:20:7e:27:02:a3:70:03:12:44:35:
97:f7:62:0e:44:e3:77:56:46:64:e6:24:ea:8d:52:
ee:d9:2c:40:58:3b:dd:8f:38:ba:d6:2c:af:20:ce:
1a:d6:c2:52:1a:90:a4:46:ef:7b:0f:c8:4e:e4:61:
dd:3c:48:44:90:32:ba:10:bf:81:58:7f:40:09:f8:
95:c8:9a:3c:20:29:df:5c:3c:c9:28:6c:60:60:8c:
34:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C4:51:AF:5D:5D:28:5B:FA:4A:A1:2B:57:FD:BF:2D:5B:1E:5A:58
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:bf:75:bd:69:95:5f:a5:e9:31:5e:de:ce:d6:3a:df:88:45:
87:1a:f1:67:cd:99:a6:3b:5d:32:a8:db:1f:19:64:6e:2b:c6:
bf:84:1f:9e:b0:c0:6b:4c:58:ef:d7:24:9e:62:cd:17:2c:25:
7c:10:f1:55:bc:bf:cc:e8:19:9d:e8:9d:72:82:63:b9:f1:c1:
73:83:90:47:50:72:48:48:eb:3a:36:df:1c:de:52:db:91:32:
24:76:da:0d:b1:6d:ea:2b:50:21:77:d6:a6:1a:49:89:64:7f:
59:46:95:3b:a1:21:33:a3:0e:28:aa:f6:16:9e:a1:33:c6:b3:
0c:44:74:37:63:61:60:78:cc:61:2e:d4:a4:c1:e9:04:d0:41:
f3:4b:6c:ec:26:90:b2:38:3b:82:ce:4b:03:2e:f2:9d:cd:44:
64:0e:ee:46:c1:9a:4f:f9:7d:99:bf:3e:d8:e9:d5:f3:1f:9e:
0e:7a:1a:b1:09:55:6e:f8:86:1b:d9:6a:f9:b3:88:65:2c:db:
4e:11:f5:12:fd:5f:35:6d:4b:1c:ab:d3:a8:32:e2:40:01:80:
db:28:d3:df:86:b7:19:5a:a8:91:76:1e:aa:16:81:48:6c:78:
a1:48:dc:7f:ba:2f:c5:c7:02:3e:78:06:6a:4c:ae:d9:fc:6a:
48:22:9d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:50:07 2026 by rpki-client