Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
File: FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft (raw, json)
Hash identifier: LtzqQJIgbx1p/oCT0UqAKF2hlRYJR6uJxrkBFqbUSqU=
Subject key identifier: F9:90:31:7D:9B:C6:08:96:6B:78:F7:5F:CB:0E:0E:EF:26:1B:18:F5
Authority key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
Certificate issuer: /CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Certificate serial: 01A0EEFA000FA2E4D8CA464F7C73CACA3CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
Manifest number: 0D9C
Signing time: Tue 29 Sep 2026 21:02:36 +0000
Manifest this update: Tue 29 Sep 2026 21:02:36 +0000
Manifest next update: Wed 30 Sep 2026 21:02:36 +0000
Files and hashes: 1: FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl (hash: /c/1W8Q7Lxcy/MOy9UCGFMIlU32yTA1Z1HWAaETJ31o=)
2: nZ2dtzLbRNK4kvMX3dm8jkXAeCw.roa (hash: o/RSJuyZGLHYsPriUa/ugWwYnH5mecTKfBjhXcICjvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:fa:00:0f:a2:e4:d8:ca:46:4f:7c:73:ca:ca:3c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Validity
Not Before: Sep 29 21:02:36 2026 GMT
Not After : Sep 30 21:02:36 2026 GMT
Subject: CN=f990317d9bc608966b78f75fcb0e0eef261b18f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:70:bb:09:d8:1f:bb:48:00:54:d4:e3:c9:
f5:90:1d:61:96:6b:17:93:c9:28:98:9d:55:31:fa:
ee:25:dc:3e:a1:7c:2e:f4:46:e5:c6:7b:c4:a0:91:
c0:dc:b0:9c:66:86:b3:ea:22:6f:90:c6:28:4d:c3:
52:eb:fd:50:18:6e:10:88:af:66:49:d0:79:23:e3:
89:b6:ac:96:ae:40:0f:4e:3d:10:ec:d1:e9:b9:46:
de:86:b9:9c:11:e1:bd:f6:b9:10:06:fd:3a:89:a8:
f6:da:0e:85:c1:be:3a:ba:51:04:0f:50:34:a5:0d:
83:26:d4:d9:70:4a:d9:b9:47:14:3b:92:60:26:49:
e7:13:d1:f6:86:43:ed:0c:a6:9b:78:77:a5:15:81:
e2:c6:bd:17:f1:00:49:b5:77:e1:55:65:2c:22:60:
1c:77:88:52:1d:49:07:23:a3:49:65:1d:b0:34:51:
ce:39:f8:68:23:ba:54:e7:e0:c3:36:02:20:ce:48:
58:7b:8a:61:f1:fa:1e:7e:a2:22:12:6a:84:4b:db:
ca:61:25:e5:93:7b:39:f9:db:13:d7:09:81:63:04:
22:91:3c:70:be:8a:ff:af:9e:ff:26:f4:ff:85:2c:
bb:31:6b:18:37:f9:b1:f5:4f:5d:3f:90:de:9a:55:
5a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:90:31:7D:9B:C6:08:96:6B:78:F7:5F:CB:0E:0E:EF:26:1B:18:F5
X509v3 Authority Key Identifier:
keyid:16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:44:65:df:e2:7b:37:26:4e:e4:bc:a6:d9:a6:aa:f6:5f:59:
4d:24:3d:25:34:66:ba:c1:05:26:39:89:95:45:ae:92:d1:7f:
48:74:73:59:67:64:69:a8:79:6a:23:4c:49:f5:06:a1:87:47:
26:88:69:81:9d:40:9c:3b:4d:7b:ec:fc:42:39:ee:ef:12:d1:
bb:a9:7a:ad:ae:92:75:e7:82:02:1b:02:2d:ee:84:0c:07:74:
97:6f:07:95:ec:12:b6:e6:d1:e7:9e:2a:a8:68:74:c4:07:c1:
1a:cd:81:56:eb:41:3a:b6:52:3f:8a:29:ec:32:19:2c:c0:c8:
32:55:a2:c5:a9:da:53:21:3f:70:1a:10:95:38:83:1f:88:01:
a8:f4:b3:14:8d:ae:b2:3c:ae:9c:49:75:25:dc:b5:a0:16:f9:
8a:ab:1a:95:ea:cd:0d:79:f6:6c:ec:4a:5e:8a:71:fe:0c:93:
b9:1e:08:7a:09:59:ce:9d:3c:6e:16:c9:00:54:0c:ea:98:95:
52:49:da:93:6c:eb:77:ce:b2:01:06:ef:a5:50:e1:21:8c:a4:
a3:1f:35:47:e3:0d:9e:ce:c0:0e:92:a7:df:0e:f4:b8:f5:54:
f2:7b:57:b8:d2:10:f2:5c:07:6f:13:05:6c:ec:6c:09:d9:8d:
27:a9:79:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:03:22 2026 by rpki-client