Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
File: FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json)
Hash identifier: uYFYynUCu6RhKSOWmQ8ifXOWnJayM6/zkNEDyRtoLqk=
Subject key identifier: EC:13:F0:FB:E0:5E:8C:AE:B6:49:64:F3:6A:D4:2C:C8:4D:89:5D:B6
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial: 019D27DFBFA8EADDB313D45A168A094F967C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
Manifest number: 0982
Signing time: Thu 26 Mar 2026 02:01:08 +0000
Manifest this update: Thu 26 Mar 2026 02:01:08 +0000
Manifest next update: Fri 27 Mar 2026 02:01:08 +0000
Files and hashes: 1: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: 79GWEGQAgdXN8NLWQZq74vPrlAn1mjEhXCOcwPoKYhM=)
2: dmlQS2Sd9qDd919b9z3NpsKBzf4.roa (hash: cTIEAwkFVrrLFFu6MkzuxguAlzRRpHYYKaiTprN0Urw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:bf:a8:ea:dd:b3:13:d4:5a:16:8a:09:4f:96:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153f24183d6c95185919349e6e92533736437b94
Validity
Not Before: Mar 26 02:01:08 2026 GMT
Not After : Mar 27 02:01:08 2026 GMT
Subject: CN=ec13f0fbe05e8caeb64964f36ad42cc84d895db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:28:c1:8c:0a:79:33:c5:c2:76:69:04:d1:
81:f4:bc:e0:df:30:8f:bb:50:e3:b1:d6:a2:f5:59:
fd:b3:a0:74:61:18:af:92:8d:85:aa:e6:3f:0a:90:
26:ea:b9:1d:3a:ac:0e:9d:47:c0:f5:89:1b:e6:d9:
61:aa:60:1e:a2:c5:cb:f3:10:68:44:33:6b:8e:77:
72:b3:bf:63:3a:b4:af:4a:3b:94:3c:7f:27:30:33:
11:c4:a0:bd:9b:cc:ff:df:ef:b1:fa:11:10:96:20:
05:0c:c0:b7:8f:73:0c:1b:a4:da:e0:58:44:68:0a:
af:35:af:0a:53:29:b5:9b:36:f2:a8:7c:d2:9d:76:
cc:23:35:a7:a9:b3:1c:57:e3:75:15:56:be:10:e9:
4f:b2:d8:1e:5c:18:59:e1:4c:6b:32:4d:5c:c3:c6:
6d:65:ac:d2:5d:87:e4:c3:93:b2:88:1e:43:5e:aa:
d4:2f:dc:21:7d:9c:e3:ce:f7:17:f0:6d:35:1d:ef:
30:21:a8:5d:49:60:3f:2e:a7:44:61:b8:c2:23:eb:
a7:44:80:51:97:30:23:ba:0d:e2:5f:e9:20:d6:f3:
af:10:51:d0:ea:70:6c:cf:ff:6f:76:f4:a7:34:02:
33:c2:d5:16:95:33:af:68:91:04:c8:f3:42:59:4b:
6c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:13:F0:FB:E0:5E:8C:AE:B6:49:64:F3:6A:D4:2C:C8:4D:89:5D:B6
X509v3 Authority Key Identifier:
keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:fa:9d:04:58:68:7f:e1:4e:39:1c:ef:0d:e1:d7:4f:da:8e:
02:e6:36:fc:6b:5e:e2:e6:bf:74:3e:b4:38:08:86:e7:35:3b:
a7:67:2e:f0:72:86:a0:81:f7:11:db:b9:78:51:92:39:ff:35:
72:6b:a4:5e:d9:b0:47:a3:be:01:c1:76:7a:91:cf:b7:f7:31:
8a:a8:3a:ab:68:48:f1:c5:2f:26:2f:c0:6b:ca:74:49:94:e0:
97:23:e3:4f:91:ce:5e:8c:b9:1a:9f:b2:8d:15:24:9a:d5:9e:
6b:9e:56:e1:cf:3d:8b:c7:69:6c:ab:96:24:22:38:ba:f2:32:
e4:27:d4:1b:4f:72:07:5f:bf:97:7c:0f:ba:17:30:94:1d:ed:
02:e0:f9:f3:1b:e3:85:cd:9e:75:b0:53:32:4a:12:f1:16:3f:
be:20:08:ec:ef:16:e8:5e:1b:83:3c:e8:00:f7:ad:39:7d:04:
7f:b4:a1:fe:c9:e8:7c:57:6d:8b:fb:d3:6d:4b:36:39:ec:af:
8d:d2:97:bd:0a:28:d3:bf:33:7a:3d:8b:67:2d:37:1a:2d:50:
7f:e0:d9:50:47:ec:3c:91:f2:97:44:63:ca:04:62:e2:c8:1f:
23:0f:05:38:01:94:98:4e:78:09:2f:ce:8a:ce:d8:29:31:de:
02:ec:d1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:54:23 2026 by rpki-client