Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft
File: ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft (raw, json)
Hash identifier: pEbVtfGgYe73XihnyPbEV4qSbUEOFA2eqdYUaMVRyyk=
Subject key identifier: D8:5E:FD:84:70:4B:65:11:36:38:B5:DB:01:81:A5:CA:C1:D4:B0:29
Authority key identifier: 7E:DB:F8:3A:FF:43:45:12:C5:03:71:2F:22:29:16:02:F5:5B:FF:48
Certificate issuer: /CN=7edbf83aff434512c503712f22291602f55bff48
Certificate serial: 01A1DCB8C4335B9D76EFCD2E66C87A2FFBE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft
Manifest number: 1A8A
Signing time: Sun 15 Nov 2026 01:00:58 +0000
Manifest this update: Sun 15 Nov 2026 01:00:58 +0000
Manifest next update: Mon 16 Nov 2026 01:00:58 +0000
Files and hashes: 1: ftv4Ov9DRRLFA3EvIikWAvVb_0g.crl (hash: 44B6u84KmdyeCJqSP/w58Q/jlmN6alkUQXw4zD7nfnk=)
2: z4ZmrsMi4rffTSSj7sG9KUI2RbI.roa (hash: Mu3/esgK0X5k7pGlanJsUxVxpFzxsfzlGM/QwNB28fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b8:c4:33:5b:9d:76:ef:cd:2e:66:c8:7a:2f:fb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7edbf83aff434512c503712f22291602f55bff48
Validity
Not Before: Nov 15 01:00:58 2026 GMT
Not After : Nov 16 01:00:58 2026 GMT
Subject: CN=d85efd84704b65113638b5db0181a5cac1d4b029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:e1:fe:e4:db:78:3a:13:29:ee:07:10:bc:
4d:fc:97:1a:19:81:46:85:3a:46:d2:94:f2:b9:35:
50:17:12:79:07:77:48:2d:48:41:d7:d3:ed:92:f8:
bc:58:3f:77:7f:76:b2:11:5a:c0:f3:31:0b:94:19:
56:82:6d:74:84:b4:3a:7e:b1:66:39:e4:5a:28:2f:
8d:47:36:dd:3c:d1:c7:0d:c6:3e:8a:66:30:ca:7b:
72:10:77:57:9f:7a:d5:83:40:57:32:44:c4:f3:07:
6d:11:0f:95:9a:c8:eb:71:9b:d2:07:5d:1f:0b:4c:
4c:d1:48:73:44:d6:ba:c3:27:0e:0a:59:9c:35:53:
9b:41:62:56:0d:ee:99:e0:e6:a9:8a:d0:b9:b1:9d:
a4:ea:f1:ce:6f:a3:ad:12:89:64:85:a2:5f:3f:bb:
5a:69:c2:65:72:15:8f:ab:df:e5:d4:f7:d5:d2:40:
6d:b2:a1:d3:9a:88:8a:04:79:e5:c9:f6:9f:5c:49:
7b:0b:e3:b5:3c:92:0d:79:9d:7e:b3:f8:0b:d5:a1:
f5:cd:ab:1c:2b:e2:7f:80:ff:2f:64:0e:64:b7:0f:
c9:e8:ae:8e:ac:8d:0d:a8:d0:bf:c7:73:4f:70:c1:
7c:36:7d:9b:35:e8:73:89:d0:e9:a7:e3:4e:fc:69:
d5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5E:FD:84:70:4B:65:11:36:38:B5:DB:01:81:A5:CA:C1:D4:B0:29
X509v3 Authority Key Identifier:
keyid:7E:DB:F8:3A:FF:43:45:12:C5:03:71:2F:22:29:16:02:F5:5B:FF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c4:c7:be:f3:d0:5a:43:ea:c8:7f:ec:d2:85:f8:24:f1:e1:
df:21:e4:76:e1:ab:c5:78:a1:32:bd:c2:88:eb:01:3e:79:09:
3a:7c:01:85:3e:ba:84:b3:7f:9c:c5:33:8f:09:55:e7:bd:49:
ee:9c:75:1e:5e:85:4e:fb:3b:a1:81:3c:16:7f:46:3f:ee:fd:
68:5c:be:2e:e6:0c:a4:7e:b9:33:d3:81:b6:1d:49:67:9c:ff:
a9:f3:4f:05:70:6f:eb:08:95:92:cc:0f:02:57:d5:c6:f0:54:
73:e6:17:f0:52:83:48:95:60:4c:82:0f:0d:3f:37:50:d5:78:
f8:0d:bb:ae:b9:25:51:28:b5:ba:e0:cd:91:f2:f6:c9:3e:06:
2e:b4:a0:5e:19:ad:b6:86:32:21:18:6d:44:f3:ac:4e:fc:a9:
23:10:7c:4f:c6:c1:e2:65:62:6e:b2:e9:83:22:a1:96:9f:d5:
ed:e0:ae:4d:06:cb:77:c4:7f:c8:2d:ee:99:c9:dc:d6:9f:15:
2c:29:dc:55:0b:c2:2f:9e:d6:61:71:42:38:e9:53:93:8d:14:
ce:45:c6:d1:7d:61:86:94:18:10:27:37:90:30:78:ec:b5:71:
bd:6c:36:f5:e8:38:fc:c2:a6:a1:23:34:5d:4f:ef:12:ad:63:
71:25:2c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:28:47 2026 by rpki-client