
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
File: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft (raw, json)
Hash identifier: YYnp6tZakCCfqm6+H+WTWTBYlviiIvMRGDR7XhVyBxg=
Subject key identifier: 0F:BF:5D:15:E3:63:30:AD:92:01:C9:5F:96:36:E2:6F:FC:A6:7B:1F
Authority key identifier: 15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
Certificate issuer: /CN=153d757b77067befd9446694748ad2b04e97b38c
Certificate serial: 019F9548F85DB5C97B7A5511A199997A9FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 18:00:15 +0000
Manifest this update: Fri 24 Jul 2026 18:00:15 +0000
Manifest next update: Sat 25 Jul 2026 18:00:15 +0000
Files and hashes: 1: 2_PmjSq2ymAnVudAlocm7T1tmn4.roa (hash: QSuT7TExW9U0JzR64tb3XYLCTidPjZYgevzpEmIents=)
2: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl (hash: 3LfKr2lafa/7zgBBgsF/YuMNyD33bMt75EzcqBzu7ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:48:f8:5d:b5:c9:7b:7a:55:11:a1:99:99:7a:9f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d757b77067befd9446694748ad2b04e97b38c
Validity
Not Before: Jul 24 18:00:15 2026 GMT
Not After : Jul 25 18:00:15 2026 GMT
Subject: CN=0fbf5d15e36330ad9201c95f9636e26ffca67b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:44:7c:a8:e7:f4:c4:e8:69:7f:d4:ee:bd:
b2:61:c5:84:13:99:90:d3:7c:7e:95:e2:88:66:a0:
6f:72:5c:41:dd:40:b1:54:6c:1f:03:31:c7:cc:44:
07:ba:ef:48:1f:13:1c:9d:83:b0:0a:01:55:97:fa:
6d:44:f3:2b:a9:ba:82:30:47:c3:9b:cf:4d:cd:b0:
0e:9d:0e:28:9d:b2:2a:7e:70:68:d4:69:d9:c1:ae:
ba:1e:ed:3b:33:cc:38:63:e7:c2:da:35:54:9d:b1:
69:01:b9:fa:bf:9c:77:ea:80:88:2a:19:06:b7:d8:
8b:cb:35:41:4e:b8:43:c0:d3:50:e3:6d:c8:f3:43:
51:40:50:9c:db:b2:e5:1a:ab:db:fc:8d:cb:3e:e0:
af:11:d4:3b:48:fb:1d:03:31:28:47:b8:1b:52:be:
60:23:2a:d9:a5:0b:48:84:c5:4a:7f:1d:d2:c4:7a:
f6:bb:05:f1:3e:d5:5e:07:7b:26:02:de:98:aa:7f:
53:93:ea:94:b8:3f:1c:bb:41:79:cb:29:b8:15:08:
6c:13:73:72:b1:cd:ff:5c:e8:f7:62:d2:f8:8b:7b:
44:57:ed:f3:8b:19:1d:01:b4:0a:4d:40:8d:f0:72:
04:99:41:94:a5:15:63:a9:2c:f1:dc:eb:4d:df:aa:
54:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BF:5D:15:E3:63:30:AD:92:01:C9:5F:96:36:E2:6F:FC:A6:7B:1F
X509v3 Authority Key Identifier:
keyid:15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b4:3c:41:31:ce:39:39:b2:d3:17:98:83:be:93:f9:6d:14:
6d:d4:99:6b:08:25:8b:a3:4d:dc:13:5a:73:8f:51:e3:89:16:
ef:ba:23:b0:01:85:d3:3e:d8:b6:a9:28:9b:9a:e8:90:3d:62:
91:e1:c0:1c:3e:d4:2b:83:50:24:b8:a0:07:c0:71:b9:51:8d:
99:7d:08:db:b8:6a:50:6e:b0:eb:4d:72:32:cb:c9:c6:75:36:
14:e3:d9:06:d4:d7:df:bb:96:b0:e8:94:63:be:2e:86:cc:5e:
dd:42:da:57:67:1d:88:86:a3:f1:6e:c4:a8:c6:27:7d:98:ed:
28:db:b5:6a:60:f1:84:19:b4:a4:7c:fe:c1:3b:28:5f:14:a9:
c1:13:de:40:d4:0d:c3:6e:69:b8:7a:c6:ef:0f:e1:17:85:47:
00:30:d1:46:5a:c0:af:31:d2:e5:44:23:18:f5:ec:06:68:cb:
88:cc:d7:35:43:49:89:50:da:a5:a8:7b:1d:c0:bc:df:ed:80:
eb:03:e6:55:9e:54:76:63:34:39:3e:e4:39:a1:9e:a2:36:40:
2c:0f:f6:f3:f2:7e:f0:c1:a9:b7:32:65:62:a4:43:de:a7:19:
e8:03:bb:bf:10:45:0e:ad:5f:9f:4f:f0:46:ed:09:ee:a4:82:
be:eb:c6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:14:43 2026 by rpki-client