Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
File: FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json)
Hash identifier: ffZzULu/z6Gk4vZCuMp/nfta0MOx9lrJ074NWpcBwsQ=
Subject key identifier: 43:B9:73:2B:27:D9:04:FE:21:CE:C1:47:EF:3C:52:32:44:D3:D1:2F
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial: 01A1DE39D96E2B01CE8E0FAD810FF1A8B910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
Manifest number: 0BF3
Signing time: Sun 15 Nov 2026 08:01:35 +0000
Manifest this update: Sun 15 Nov 2026 08:01:35 +0000
Manifest next update: Mon 16 Nov 2026 08:01:35 +0000
Files and hashes: 1: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: M8f1Obnd2WaFDa22gHE1DR6AqQhZYfQkuI05u1ohKZ0=)
2: Yi_rAwC_OsZoU1r6Bjpi8jpkknY.roa (hash: EpKDeL1gYQOjPzo30y9hGttLKm52dWKCuXxmNqbHjNw=)
3: dmlQS2Sd9qDd919b9z3NpsKBzf4.roa (hash: cTIEAwkFVrrLFFu6MkzuxguAlzRRpHYYKaiTprN0Urw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:d9:6e:2b:01:ce:8e:0f:ad:81:0f:f1:a8:b9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153f24183d6c95185919349e6e92533736437b94
Validity
Not Before: Nov 15 08:01:35 2026 GMT
Not After : Nov 16 08:01:35 2026 GMT
Subject: CN=43b9732b27d904fe21cec147ef3c523244d3d12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:f0:28:27:b8:37:5d:98:20:64:1a:f6:a8:
aa:ce:cb:8c:c4:df:ac:6b:9d:e9:99:72:00:08:33:
5f:73:18:26:37:0e:37:4f:80:84:bb:62:71:25:86:
43:46:a5:2f:7e:be:7e:6d:20:a8:9c:0e:8d:0a:dd:
33:2d:28:90:0b:fe:da:0b:11:f8:84:f7:49:2c:59:
ff:f6:6a:b1:10:54:b6:a4:eb:18:58:b2:93:18:0f:
53:23:67:5f:98:70:d6:55:9f:da:04:e4:f2:ee:e6:
e1:74:7e:3a:33:2b:b0:04:a7:e8:5a:c9:83:5f:f4:
75:1e:9b:e0:76:e7:6d:6a:c5:af:f0:fb:84:ae:10:
7a:77:f4:71:10:bd:b7:58:dd:f0:b4:26:19:bb:1c:
62:c6:9a:e5:c4:48:08:dc:8c:17:5b:3f:a2:b1:0b:
8c:4a:11:68:3f:3d:c8:12:1e:c0:38:1b:a9:ff:76:
c9:35:4f:fb:59:64:f5:2b:68:8d:ef:0e:a5:c8:96:
98:8c:8a:f3:2f:03:b6:83:93:e7:f7:18:03:ca:be:
a4:2e:30:c2:e4:30:19:52:7f:4f:29:33:97:eb:48:
cc:fe:8b:9b:92:9a:79:f6:45:ef:18:1b:a6:d4:18:
8d:4b:a3:f3:0f:f4:b5:41:bc:9c:55:a2:91:7e:01:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B9:73:2B:27:D9:04:FE:21:CE:C1:47:EF:3C:52:32:44:D3:D1:2F
X509v3 Authority Key Identifier:
keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:18:37:62:15:cd:c5:3b:c2:29:f0:d5:b2:a2:db:76:0d:5e:
d9:9b:29:28:57:02:7f:5f:89:a5:49:1e:ad:e0:6e:c1:d7:81:
f1:26:3d:d7:29:4e:83:52:28:e9:29:85:2a:31:2e:bd:59:0f:
83:b2:10:4b:a6:83:05:ee:cc:3c:46:4b:c4:c1:a8:84:4c:06:
33:2d:bd:90:3a:7a:b7:99:e3:e2:06:d0:c5:96:53:13:f3:4a:
8a:ce:78:44:8a:db:de:51:90:3f:68:57:5d:71:67:f6:72:06:
2b:51:8a:e9:3f:26:30:a9:9d:dd:95:f2:30:51:96:5c:bd:96:
29:8f:26:1f:33:26:7d:03:94:b4:ec:26:91:e3:b6:93:8d:28:
d5:80:0e:4d:15:b2:15:19:e4:c9:98:33:8f:8b:47:e8:41:a3:
87:b0:74:8b:0b:bd:ec:82:ad:20:08:53:af:7f:63:db:1a:77:
30:fb:53:9d:f9:98:91:3b:a4:ed:5e:e8:98:f8:99:4d:9d:fe:
25:65:68:61:69:a5:47:a5:37:7d:2d:6b:69:d1:4e:87:a4:61:
7b:11:25:e4:c3:f3:3a:a3:c2:8d:03:0a:a2:3f:a5:d7:63:88:
8d:5d:ae:50:6c:12:95:da:f8:42:65:b7:c1:f2:72:3a:a9:06:
a3:93:37:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:21:19 2026 by rpki-client