Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
File: FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json)
Hash identifier: IkuqXgIle0/bhHlxZ3QzVE6vlD2go1VndqJLSBetoVQ=
Subject key identifier: B0:4D:E5:3A:0B:BF:B4:79:24:29:40:27:05:F0:75:49:26:C2:DC:A9
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial: 01A0DA2864F0AF2CB6DA60EDFD521F377A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
Manifest number: 0B6C
Signing time: Fri 25 Sep 2026 20:01:15 +0000
Manifest this update: Fri 25 Sep 2026 20:01:15 +0000
Manifest next update: Sat 26 Sep 2026 20:01:15 +0000
Files and hashes: 1: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: LDw1uuA6/LBgr2fk9ZkO2dFMrgViuHiFqyNSEdwyUfw=)
2: dmlQS2Sd9qDd919b9z3NpsKBzf4.roa (hash: cTIEAwkFVrrLFFu6MkzuxguAlzRRpHYYKaiTprN0Urw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:64:f0:af:2c:b6:da:60:ed:fd:52:1f:37:7a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153f24183d6c95185919349e6e92533736437b94
Validity
Not Before: Sep 25 20:01:15 2026 GMT
Not After : Sep 26 20:01:15 2026 GMT
Subject: CN=b04de53a0bbfb4792429402705f0754926c2dca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:69:d3:10:96:db:78:2e:89:85:23:b9:89:1d:
bf:aa:1a:8a:3f:9e:86:80:41:b7:cf:2c:c5:65:77:
ef:26:fa:c9:a2:fa:37:6f:89:a8:48:2e:f2:e2:65:
09:2c:60:5f:cd:04:9b:da:b6:a1:cd:98:ce:9a:2b:
9f:d3:0c:be:18:f4:a8:74:8e:df:5d:bb:ec:6c:7d:
fc:02:66:98:38:dd:ef:83:be:74:bb:aa:d3:87:5c:
a3:e7:0f:1a:2a:f7:d1:01:e2:25:c3:81:52:15:c1:
c3:9b:14:ac:b5:02:77:9b:b4:ec:6e:6a:f6:ad:1c:
d9:c7:93:8d:3b:ee:db:52:92:b0:f1:13:bf:ca:1a:
4a:6d:c3:40:19:be:b8:80:b5:72:6b:19:7a:a5:4d:
6d:00:3f:76:da:b8:37:f7:b3:e9:24:66:fe:3b:48:
99:69:fe:ff:0b:3a:e8:d7:dc:6e:47:ec:d4:63:8f:
7b:79:e6:2e:f4:39:35:3f:72:fd:8a:35:e1:e0:e2:
05:35:10:2e:14:20:39:2f:ae:7f:bd:a3:d6:8f:38:
3c:cb:e2:a7:6b:51:22:eb:76:b8:6d:e2:73:df:81:
04:ac:e8:7a:7a:43:d8:0f:50:05:23:de:a1:23:f2:
3f:04:45:5f:12:96:9e:b3:ad:ea:59:43:07:a4:53:
39:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4D:E5:3A:0B:BF:B4:79:24:29:40:27:05:F0:75:49:26:C2:DC:A9
X509v3 Authority Key Identifier:
keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d2:82:31:be:34:9c:73:c0:b9:fb:a1:c8:d2:c4:46:0d:2c:
d6:4b:07:36:65:ef:cf:26:8b:a2:45:96:75:fd:7d:63:5a:4a:
2d:e9:f5:63:bd:8b:c3:24:01:d4:24:bc:d1:7f:f2:ea:69:87:
e1:64:11:ff:3d:f2:7e:57:92:ec:bb:3c:69:b0:8b:3d:ce:ca:
0e:0a:bc:fb:01:3d:34:ad:64:59:74:21:09:7d:97:5a:8a:5f:
ea:29:8a:c3:de:5b:8c:f1:3d:47:4f:cf:77:f1:9e:59:06:f9:
46:8e:df:bd:fd:15:87:34:31:50:1b:77:eb:e5:1e:98:60:42:
f6:9c:68:d9:16:76:4a:92:ff:27:3e:e5:ba:cb:6f:7d:a1:6f:
42:0a:87:c3:79:eb:69:91:c8:7d:f5:67:57:d2:64:47:75:98:
b6:a2:b3:2d:c1:71:f0:5a:37:59:59:32:5a:48:d8:75:16:ab:
1a:a0:8c:0a:eb:34:c0:47:f4:ed:18:5c:b1:61:e0:64:6d:73:
6a:62:eb:9a:8a:a6:c7:96:63:5c:3b:c5:37:87:d7:60:e1:cf:
0b:91:b1:44:3f:53:02:0e:6b:73:30:1e:f6:40:fc:dc:d7:17:
a8:55:22:98:11:35:70:44:fa:f5:4f:f1:6a:93:31:1c:47:f5:
df:2f:dd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:58 2026 by rpki-client