
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
File: FTtGcCg5p5W6uo2NFezcymN-M2w.mft (raw, json)
Hash identifier: M+YLu6UZCoHNrb95Jzf4rdMv1eVIMFU9V/0GaPYR3Kg=
Subject key identifier: B2:AF:CE:8F:4E:CA:67:A0:0F:CD:4B:C7:C6:79:F5:AB:27:1D:24:69
Authority key identifier: 15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
Certificate issuer: /CN=153b46702839a795baba8d8d15ecdcca637e336c
Certificate serial: 019E2023B0A0B7CE464A9C3ABCFBFC1D1291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 07:01:10 +0000
Manifest this update: Wed 13 May 2026 07:01:10 +0000
Manifest next update: Thu 14 May 2026 07:01:10 +0000
Files and hashes: 1: 60Yzg5ovYbhNZtsG87V10o4lft0.roa (hash: pwf3Cr849YIF4wTPFp3jPWoUW71SDRP921dWjmbB0ls=)
2: FTtGcCg5p5W6uo2NFezcymN-M2w.crl (hash: nb4rgz+/1yRN6G6akUp0lztI+ra8f09cO6JSvIOn99g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:b0:a0:b7:ce:46:4a:9c:3a:bc:fb:fc:1d:12:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153b46702839a795baba8d8d15ecdcca637e336c
Validity
Not Before: May 13 07:01:10 2026 GMT
Not After : May 14 07:01:10 2026 GMT
Subject: CN=b2afce8f4eca67a00fcd4bc7c679f5ab271d2469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:98:c2:8e:6e:cc:92:92:0e:2e:bc:33:47:
4b:fc:cc:99:dd:75:35:92:5e:89:fc:5f:27:7f:12:
b5:c7:94:9e:42:3a:71:39:18:e6:19:c4:ac:94:58:
50:38:7a:56:e0:e4:24:09:7e:8a:27:f5:b6:10:a3:
2a:9b:1b:51:3b:34:e3:14:80:1d:13:27:0b:75:ee:
0f:4f:db:6f:9e:d9:12:b9:75:cd:ee:44:19:a0:6f:
a7:03:79:df:eb:ad:ac:30:d3:a2:ac:66:b1:22:0e:
7f:2a:61:1f:72:59:fa:95:64:38:35:1f:c3:00:3b:
e4:ee:ca:69:eb:8d:bd:44:a1:a9:db:64:79:7c:9a:
2e:89:54:4a:ce:78:7d:a3:87:60:ea:a0:e5:20:33:
0a:da:66:3a:b9:6d:2b:cb:eb:f3:9f:c0:43:f4:b2:
e9:ef:d3:69:65:bc:06:8d:c2:20:a0:ef:c9:ac:24:
63:06:1a:78:6f:58:e3:25:56:fe:6d:4c:35:d6:29:
2d:32:c4:ee:66:6d:6b:47:7b:3b:44:93:2b:c0:2e:
1a:54:92:d9:94:02:9e:11:05:66:f0:26:70:d2:2f:
d8:39:da:a3:9d:56:5b:f6:91:c0:af:e6:f6:86:f2:
f8:10:55:b3:92:d2:bc:ea:03:ce:04:0a:bd:07:f7:
db:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AF:CE:8F:4E:CA:67:A0:0F:CD:4B:C7:C6:79:F5:AB:27:1D:24:69
X509v3 Authority Key Identifier:
keyid:15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e4:c2:fd:f1:aa:08:4e:58:38:7b:29:b3:a5:a0:94:fd:52:
7d:0c:56:1d:b9:52:81:1a:c0:9d:db:f0:a1:cb:a4:5b:c5:b6:
6a:2e:22:d5:be:8d:9d:20:e0:82:d5:4a:c2:d4:75:ee:10:56:
32:56:2c:08:0c:08:fd:f6:c5:4f:0e:d2:30:2b:a7:c0:ab:f8:
87:2d:52:8c:41:aa:99:c0:9b:53:6a:e7:d8:d6:78:cf:93:a6:
d4:6c:0b:cd:36:80:3d:95:04:fc:85:e1:6f:79:12:97:3b:6d:
1e:44:4e:c4:4c:24:23:f5:c5:ae:0a:13:43:1a:19:c2:d3:e7:
fa:ba:2d:d1:d8:f2:fb:89:94:3f:63:e4:62:46:70:39:ff:b8:
50:7f:07:97:0b:f9:79:fd:4f:e1:d8:1d:d4:de:67:14:b1:6b:
b4:f6:05:a0:53:c7:a0:fa:cb:09:de:e6:3e:80:c0:ef:c6:3f:
77:bb:fe:ce:18:d9:d0:02:bb:77:93:5d:e7:67:70:99:4e:ca:
04:9c:a1:04:9a:3c:f1:01:e2:72:6c:9c:91:8b:96:36:5b:ad:
e6:07:01:ed:0b:42:63:e2:cd:29:d7:e2:5a:16:59:46:86:6c:
6e:f6:77:36:4a:9a:56:a5:d0:fa:63:57:ed:5e:a9:ab:b2:16:
84:ab:4e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:58 2026 by rpki-client