Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
File: FTtGcCg5p5W6uo2NFezcymN-M2w.mft (raw, json)
Hash identifier: CvITlTBMURNT6El6mkILF5gkmCdyIJ1nZqbe7s4KxzQ=
Subject key identifier: 25:A8:87:51:65:0D:91:F6:D4:83:B3:0A:3A:AC:BE:D2:F4:4A:D3:63
Authority key identifier: 15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
Certificate issuer: /CN=153b46702839a795baba8d8d15ecdcca637e336c
Certificate serial: 019D2AE0107FFC4B1BBCC7EABBAE2F1A8470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 16:00:20 +0000
Manifest this update: Thu 26 Mar 2026 16:00:20 +0000
Manifest next update: Fri 27 Mar 2026 16:00:20 +0000
Files and hashes: 1: 60Yzg5ovYbhNZtsG87V10o4lft0.roa (hash: pwf3Cr849YIF4wTPFp3jPWoUW71SDRP921dWjmbB0ls=)
2: FTtGcCg5p5W6uo2NFezcymN-M2w.crl (hash: hUfyR+wm4gYwOR7n9h0RRP6rTwBHF9iRUFTjKDNavHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:10:7f:fc:4b:1b:bc:c7:ea:bb:ae:2f:1a:84:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153b46702839a795baba8d8d15ecdcca637e336c
Validity
Not Before: Mar 26 16:00:20 2026 GMT
Not After : Mar 27 16:00:20 2026 GMT
Subject: CN=25a88751650d91f6d483b30a3aacbed2f44ad363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:8b:2b:04:94:d2:da:b6:98:84:19:eb:4a:
11:db:50:11:a0:5d:bf:79:34:9b:b4:db:1f:d8:f6:
79:61:37:37:99:9f:7b:d5:99:46:2a:09:d7:29:4a:
0c:33:73:c0:cf:f1:e9:08:a6:c6:b6:fd:a0:a6:5e:
d6:f5:05:9c:c1:f9:1f:92:65:f6:12:b0:71:77:c8:
54:e8:15:e7:64:40:7f:20:8d:28:7d:c7:8b:2b:f1:
6c:69:4b:55:4c:cb:dd:73:7d:72:66:bf:e6:71:09:
9c:d3:61:d0:1f:e6:2d:d3:7e:fa:ca:ae:1d:fd:b3:
54:bc:d2:8d:fd:f4:89:18:a8:41:fa:87:17:c0:42:
6e:b8:68:39:a7:03:03:6d:8b:e0:dc:ee:f2:cd:44:
99:1c:6f:90:80:4a:ce:5c:bb:23:0d:10:22:8e:83:
94:89:37:a5:da:fd:28:00:61:09:10:76:0c:cb:22:
ba:80:37:db:47:c1:1c:b8:df:38:a7:21:ff:f9:72:
5f:1e:39:c2:97:c7:78:99:03:30:3e:e3:38:3a:a0:
48:5e:20:90:47:1e:cb:8c:9e:d1:fa:5d:18:eb:87:
2c:3c:93:70:14:d2:16:95:96:79:4e:0b:e4:31:76:
72:fe:61:77:d6:7c:5a:43:54:8d:a4:79:a1:31:0d:
56:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A8:87:51:65:0D:91:F6:D4:83:B3:0A:3A:AC:BE:D2:F4:4A:D3:63
X509v3 Authority Key Identifier:
keyid:15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:78:26:de:f1:fa:58:70:75:cd:a0:41:ec:91:4b:cb:e3:b9:
6a:70:00:79:ab:4e:31:cb:fd:cd:75:5a:24:74:e1:ef:ac:83:
17:26:62:f9:8b:e7:87:88:e0:07:ca:50:7d:fc:6b:dc:bb:9e:
97:09:5c:52:26:92:36:b0:bc:02:d3:a2:e6:3a:43:cb:39:23:
02:28:50:d9:39:1e:af:5f:c3:1f:2a:5e:e1:6d:08:7b:93:91:
a1:3d:0a:07:23:36:1c:98:f8:6d:65:7b:fa:c4:c6:ce:8a:4e:
a2:68:38:52:e0:c5:f9:c8:91:bd:b4:ce:1f:59:3b:52:ae:ae:
8c:67:c8:53:77:09:21:56:90:6e:cc:8a:35:cb:9a:f0:e3:79:
28:a2:8f:88:cf:07:08:b5:74:3b:e7:80:cb:4d:42:76:51:ed:
99:da:da:b6:a8:9e:1f:1a:fc:3a:a9:d2:66:25:0e:c7:da:37:
c7:bb:85:26:6a:b0:e3:45:2c:a0:8f:d7:a8:ce:82:db:5b:94:
56:aa:67:1e:6c:f3:e0:f6:65:e5:6d:fb:48:d8:f3:f1:69:00:
82:b7:2f:80:44:1e:71:f3:70:f0:4f:6c:7c:04:0c:55:30:b1:
57:50:65:44:24:dc:3d:4f:3c:e5:57:c6:17:5e:77:c9:6b:f5:
e3:c3:47:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:02:58 2026 by rpki-client