Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: HIXZbraWm0biL7GGE/L3aRAmLbLivg1uWXbUVXOB4UY=
Subject key identifier: BF:EA:BE:B2:2E:7B:E9:68:52:C7:29:93:D7:AF:F7:D4:92:D0:B5:90
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 019E1DFEADB2F872CA5DF2FEA1190B13FACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 18DF
Signing time: Tue 12 May 2026 21:01:30 +0000
Manifest this update: Tue 12 May 2026 21:01:30 +0000
Manifest next update: Wed 13 May 2026 21:01:30 +0000
Files and hashes: 1: LJweqdiAuex5ffHJZ-p0UeT6XrY.asa (hash: qexPojaaUKUXJCAIdb2LuHOm0GKtKH2oA0dqsygCpWc=)
2: O7voTXfNHlJYLDFfFhD0IyP6RWQ.roa (hash: LffxuYhlhgmo9uurPfnZvk9c5Vb5QUT4U1yEBcpzUI0=)
3: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: +f0mOwmARmds4ctN+CUglLCaQkpL93vX2V3clYSo+/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:ad:b2:f8:72:ca:5d:f2:fe:a1:19:0b:13:fa:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: May 12 21:01:30 2026 GMT
Not After : May 13 21:01:30 2026 GMT
Subject: CN=bfeabeb22e7be96852c72993d7aff7d492d0b590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:88:6f:4a:10:2b:e6:59:9f:47:0a:54:19:
03:87:2e:8e:8f:27:22:cf:db:6e:f8:5a:99:4a:02:
02:41:97:6c:f5:cd:2e:7c:47:15:1d:cc:fe:b8:9c:
6a:62:13:6a:f4:4d:83:0e:45:e5:76:ac:7b:54:b7:
2a:bd:38:8a:00:1b:cf:55:fe:3c:00:a2:26:bb:f4:
af:19:8a:89:06:67:76:36:3e:38:35:09:d4:16:dd:
b5:0c:4d:97:3d:7c:29:13:d3:21:15:f0:5f:b5:3c:
89:be:b3:88:e1:be:98:95:4a:62:52:1b:d8:b8:e0:
0c:8d:33:87:88:20:69:9f:a3:24:eb:52:af:be:d3:
93:9a:f8:dd:dd:0f:e3:f6:90:43:92:07:c5:7c:d3:
5f:c2:eb:17:d5:c6:0e:2e:bc:3d:ed:73:67:aa:ea:
f4:54:b9:53:1c:5b:ad:4e:13:54:3f:ef:c2:7b:d4:
11:e4:10:5c:74:f4:e4:0f:9c:2f:9d:51:d8:1b:aa:
92:78:00:42:ef:08:8e:72:e9:28:4e:9d:8c:3a:74:
12:7b:92:4a:0c:b4:97:72:d0:9b:c0:4d:24:8b:b7:
14:b6:96:a7:c7:29:8d:2f:19:64:05:2f:1d:f6:cd:
03:97:62:3d:eb:09:fa:d0:1c:61:ad:11:68:42:a9:
7b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EA:BE:B2:2E:7B:E9:68:52:C7:29:93:D7:AF:F7:D4:92:D0:B5:90
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e4:de:63:13:ca:7a:aa:89:dc:00:69:16:3f:43:49:34:98:
94:38:57:74:c5:a5:18:54:48:79:d3:76:3c:65:a4:79:eb:c9:
75:d0:4d:d1:da:d0:99:cb:26:60:0a:72:16:9c:24:bf:6c:bc:
5f:bf:45:eb:9c:7e:1a:52:fc:14:c9:ae:ee:2e:26:43:58:86:
59:38:cc:e3:f9:bf:ca:58:29:ff:c3:6f:23:dd:d5:a5:b9:6a:
bc:32:a7:0e:d8:dd:75:78:ba:8b:97:6c:60:63:d7:ad:0a:81:
db:63:6c:33:79:59:7f:ec:81:09:5e:9c:70:b1:bf:74:d8:a0:
79:f3:6b:68:e1:28:f9:8d:e6:99:26:df:79:70:13:72:4e:70:
18:5f:8f:e3:a3:f5:4b:c3:b2:fc:bc:a8:5b:08:06:d9:20:35:
39:02:60:b9:8f:3a:cf:c9:fc:f3:90:b2:5f:0d:f2:f5:b6:0d:
7c:c6:6c:3f:24:cb:55:c5:17:78:be:a0:67:a0:48:d2:49:4d:
70:13:9f:ea:1b:7a:76:97:32:11:8e:7a:39:78:87:40:6b:09:
05:36:c4:cd:69:4b:e5:39:0e:66:db:50:a4:f7:46:7b:a7:a4:
0e:7b:aa:55:81:2a:fe:b1:2c:f1:61:97:81:0d:b0:0e:c3:35:
8c:f0:9a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:58 2026 by rpki-client