Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
File: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft (raw, json)
Hash identifier: uT9h5Pxo7CdRo0KY/em0u7flzVfYbEMO3FOAKxNKIHQ=
Subject key identifier: 59:FA:00:77:B2:82:BE:8D:D4:50:5A:6D:16:9E:E2:54:DD:A9:2A:1E
Authority key identifier: 15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
Certificate issuer: /CN=153d757b77067befd9446694748ad2b04e97b38c
Certificate serial: 019D2771CF75647FF2C9CC1352E3DE3CF5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 00:01:03 +0000
Manifest this update: Thu 26 Mar 2026 00:01:03 +0000
Manifest next update: Fri 27 Mar 2026 00:01:03 +0000
Files and hashes: 1: 2_PmjSq2ymAnVudAlocm7T1tmn4.roa (hash: QSuT7TExW9U0JzR64tb3XYLCTidPjZYgevzpEmIents=)
2: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl (hash: 3ZAonSHAL4RgXVEtMS1+ksTvc9W6oejMBG9vhVQQmAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:cf:75:64:7f:f2:c9:cc:13:52:e3:de:3c:f5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d757b77067befd9446694748ad2b04e97b38c
Validity
Not Before: Mar 26 00:01:03 2026 GMT
Not After : Mar 27 00:01:03 2026 GMT
Subject: CN=59fa0077b282be8dd4505a6d169ee254dda92a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:61:64:c9:09:74:69:95:2c:00:ba:f0:59:
ae:8f:18:f4:be:87:81:49:5d:e6:9b:7a:4f:15:42:
c6:cb:a6:09:e9:10:0f:81:5b:fb:f2:4a:d4:40:a6:
68:dd:ba:89:5a:98:0d:28:5e:f2:bd:09:82:9b:e8:
46:8f:9f:a0:08:c3:46:76:f4:29:bd:74:c2:16:ff:
bd:ea:89:60:73:05:25:82:7f:61:a1:bd:b2:2c:4d:
65:74:86:7b:8a:ec:de:74:b7:e3:85:c7:12:76:b1:
09:25:29:1a:43:52:d9:44:db:a6:54:6e:94:c3:43:
8a:31:c0:05:1c:09:38:3b:da:8d:ef:fc:a2:d8:cc:
95:4d:ea:b1:8c:18:24:2f:bc:30:6b:b7:01:b0:5b:
c5:bf:55:76:a5:c1:00:8c:a5:2d:92:5a:05:40:70:
f3:3e:fb:0d:fd:61:87:d1:e2:c4:86:9d:c3:96:ea:
b7:16:63:62:e1:f5:79:19:bc:76:67:0a:a5:e4:44:
28:d3:dc:e6:d5:d0:32:10:25:2a:45:c5:f4:75:3c:
42:3f:fc:55:d3:4e:d9:88:58:a0:21:00:10:03:80:
a9:3f:7a:be:e7:99:5b:a3:05:f3:7c:0a:4c:45:cd:
03:4c:19:d3:39:56:48:a2:58:7c:ae:46:2c:b2:0f:
82:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FA:00:77:B2:82:BE:8D:D4:50:5A:6D:16:9E:E2:54:DD:A9:2A:1E
X509v3 Authority Key Identifier:
keyid:15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9b:4a:4c:33:98:7f:2e:bc:ee:fa:c6:c8:a3:21:0f:9e:af:
3d:b8:71:1f:ec:1f:50:80:01:e3:05:43:02:c8:fd:1e:91:94:
a3:db:50:61:d9:fe:74:2d:b1:02:ae:b1:68:f7:87:52:16:02:
d6:09:d4:90:dc:c6:f7:7e:86:08:49:39:45:2f:c0:99:12:6c:
74:ef:79:4d:07:16:64:e2:0a:dc:da:2a:6e:f8:f4:34:56:2e:
93:82:d8:5d:f2:a0:93:d4:d3:a8:40:a8:98:da:87:5d:c7:1c:
e5:61:4c:ff:87:33:e5:d0:07:9a:bd:e9:3b:b4:69:2d:df:5d:
9e:41:fe:aa:a6:4b:11:40:53:5d:24:ab:96:6b:db:fb:a1:88:
6b:f0:6a:28:4b:8f:62:65:6e:97:54:d9:16:a8:a2:fe:0f:3d:
04:e4:e9:ee:4e:44:f2:12:3f:ef:18:42:50:e9:6c:93:56:66:
76:1c:c2:6a:de:10:40:bf:00:3a:0b:f4:58:56:69:b6:a3:df:
49:3e:00:bc:00:e3:8e:1f:71:fc:40:c3:bc:be:2a:21:73:2a:
b3:53:49:d0:da:79:b5:07:d0:0b:77:0e:ed:72:2b:71:59:d2:
d3:6e:5f:dc:e9:cd:5d:30:39:d1:4c:88:d7:35:bc:fe:0d:71:
6d:b9:c8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:15:25 2026 by rpki-client