
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
File: FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft (raw, json)
Hash identifier: /HkVEKVD22LwddoATiLhPEK3YOUfTCDDEg3dLLzrvDM=
Subject key identifier: 73:6B:33:A7:6E:87:47:30:9E:DE:7B:F8:74:52:7F:AC:D2:11:D5:B0
Authority key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
Certificate issuer: /CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Certificate serial: 019E1EA3B8F2CB4329E6B8865076795E598E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
Manifest number: 0C27
Signing time: Wed 13 May 2026 00:01:46 +0000
Manifest this update: Wed 13 May 2026 00:01:46 +0000
Manifest next update: Thu 14 May 2026 00:01:46 +0000
Files and hashes: 1: FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl (hash: E036DqFsy23/R9VwOn8Oo/MvKWg9xbe3UhAhUEosUOw=)
2: nZ2dtzLbRNK4kvMX3dm8jkXAeCw.roa (hash: o/RSJuyZGLHYsPriUa/ugWwYnH5mecTKfBjhXcICjvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:b8:f2:cb:43:29:e6:b8:86:50:76:79:5e:59:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Validity
Not Before: May 13 00:01:46 2026 GMT
Not After : May 14 00:01:46 2026 GMT
Subject: CN=736b33a76e8747309ede7bf874527facd211d5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:fc:f6:98:01:42:fa:cc:87:63:a5:2c:a6:
ff:1b:69:31:e3:ad:ab:9b:6a:fb:b1:62:56:58:84:
77:89:c0:45:85:4e:69:7a:9f:df:41:17:3f:47:66:
e8:33:63:6b:67:3f:f2:e3:34:af:d8:af:24:b4:47:
a7:67:a6:3a:fa:5f:38:12:97:7f:f0:94:98:9e:3e:
4f:05:86:48:d3:54:4c:13:44:28:54:7f:5a:18:8f:
eb:5c:64:42:b2:bd:d5:8b:77:bf:ac:78:f0:18:45:
b5:bb:6e:ae:20:90:cb:65:ed:ae:c3:8e:d7:69:87:
47:5c:c8:5d:04:e3:c2:21:5d:f2:86:3e:a3:6c:56:
16:9b:58:16:02:f3:2e:00:ef:e7:46:f8:75:b1:5a:
bb:bb:dd:c8:63:af:9c:4b:3d:f8:60:94:62:8c:26:
0b:a6:6f:48:0d:01:13:d0:cc:28:62:f6:3d:40:f5:
cc:18:47:25:41:9a:53:fc:b9:33:6f:39:59:cc:0d:
ea:2e:b2:b8:a8:64:25:1f:e8:83:c3:86:a2:56:4d:
0b:dd:a6:d3:a2:bf:c8:06:a6:49:b6:8d:73:8b:bb:
8c:e3:62:75:d4:73:54:81:fb:2f:b6:5e:2b:0f:cc:
99:11:c6:80:22:d1:15:05:d8:b1:62:a0:e2:2d:15:
56:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6B:33:A7:6E:87:47:30:9E:DE:7B:F8:74:52:7F:AC:D2:11:D5:B0
X509v3 Authority Key Identifier:
keyid:16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6a:34:9f:4c:89:07:70:32:1f:cb:3f:4c:02:3f:a4:6d:fc:
94:83:e6:f5:e4:45:02:fc:3b:0c:6b:ec:9b:6e:d8:5b:86:e7:
95:23:15:f2:f6:31:fe:93:aa:a1:e6:80:4e:4b:12:e4:4f:1b:
7f:ca:2a:70:03:b0:be:48:41:f9:c6:61:29:94:f5:43:46:71:
84:64:6f:a3:f4:6f:ec:e8:c4:a3:05:6f:f4:8c:bb:99:75:8b:
6b:33:1e:4b:11:51:3b:bb:6c:c7:01:59:b9:6c:b5:2e:b3:32:
5b:26:6b:62:3b:0a:3f:5a:72:d3:d1:ab:4a:58:1e:03:a2:44:
97:f6:56:b5:39:05:1f:ac:a7:c4:f9:f9:93:c7:db:25:8f:4d:
6e:85:a7:9d:94:aa:19:b7:79:c8:6e:09:c1:9b:5b:37:46:69:
18:a9:58:55:bf:27:7e:f9:14:96:f9:d5:77:13:db:a7:ae:76:
8e:c7:35:d3:db:f2:c8:be:4b:17:b1:18:dc:c8:41:cd:e8:a5:
02:1f:94:98:d3:d5:60:05:e6:42:82:69:43:6f:25:8d:96:9a:
e6:18:15:69:2a:00:78:7d:91:3b:33:d3:2c:2c:a5:2f:28:08:
29:a4:24:ef:b4:7b:50:8b:c7:2c:5b:43:62:02:f8:3d:7c:34:
38:41:53:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:11 2026 by rpki-client