Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
File: Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft (raw, json)
Hash identifier: BmDLCatFxDbxqMIWnjdYH839qDAZbifNhsqgMDLV8Zg=
Subject key identifier: D5:4F:1D:B9:78:70:9C:41:49:56:81:80:DE:D5:72:31:6D:D9:2A:C0
Authority key identifier: 16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
Certificate issuer: /CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Certificate serial: 019D2704AB5D863FCBF5699DF85CA11A89F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:01:50 +0000
Manifest this update: Wed 25 Mar 2026 22:01:50 +0000
Manifest next update: Thu 26 Mar 2026 22:01:50 +0000
Files and hashes: 1: Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl (hash: C5bFKG8NRLatLE8XzM+XREeY28/rA5yTzNypaDyDJfc=)
2: K-tMS1zQwnOTjMpzMQDfaaGRH2k.roa (hash: 8qTTGKDucm6vL5LQ0xopWBdoOTXFYRxvenpvnD5qv3w=)
3: SO-ZlxF5JSLdcgh6IpSE_Coqf6I.roa (hash: KN1ym2itJeF18CA8fxX+sWeNK2g5ypUseoxu2uRSaZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:ab:5d:86:3f:cb:f5:69:9d:f8:5c:a1:1a:89:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Validity
Not Before: Mar 25 22:01:50 2026 GMT
Not After : Mar 26 22:01:50 2026 GMT
Subject: CN=d54f1db978709c4149568180ded572316dd92ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:41:ea:39:e9:6a:fb:6b:f4:26:5d:10:28:a7:
e9:eb:33:09:ef:9e:12:af:0e:74:de:32:a5:a1:0d:
6a:95:bd:eb:46:5e:c8:d5:2a:46:a6:01:54:8a:17:
53:32:35:79:f5:fe:0b:d2:c2:1e:ff:bf:65:cc:27:
87:8f:1c:c4:37:bf:5b:0e:bf:34:c4:b7:4d:3d:82:
c2:5c:fe:ec:01:77:84:29:d4:5a:0f:af:2d:7c:28:
dd:62:94:3e:04:c5:d8:de:10:90:fd:85:0c:8e:fd:
d7:5c:f3:7e:28:1d:e9:08:60:35:04:79:b3:d0:e4:
c8:be:5c:98:8a:32:21:4b:4b:12:ae:26:49:40:c5:
5e:ce:59:9e:92:e3:d9:c6:bc:91:1d:8d:14:b0:5c:
d1:f5:93:9e:ba:ee:2d:ef:fd:79:46:b0:f9:36:0d:
35:80:dd:55:ca:c0:8e:33:9d:52:eb:f2:e8:b4:da:
72:3c:5b:2b:ac:d5:91:8e:b0:49:a8:5f:89:e9:9b:
51:95:d1:d3:96:f0:4d:1e:8d:97:e9:7c:65:07:d6:
e3:51:5b:7e:91:20:bf:53:3c:b2:1a:cb:2f:94:12:
ca:44:0e:05:76:70:14:95:7c:92:77:83:ae:64:1a:
25:bb:de:8f:bc:83:18:c5:8e:70:0c:bf:12:0c:38:
1e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4F:1D:B9:78:70:9C:41:49:56:81:80:DE:D5:72:31:6D:D9:2A:C0
X509v3 Authority Key Identifier:
keyid:16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a2:e4:10:3c:23:d2:21:15:20:c8:d6:db:69:b7:10:a2:aa:
fb:ea:60:7c:a8:97:a2:18:51:7d:4e:92:a4:d1:39:c0:5a:4c:
93:c8:68:82:ea:bb:e0:91:fd:7e:e8:24:0d:05:07:50:29:a6:
a0:02:94:23:fd:de:da:06:83:f4:76:65:df:7c:8a:ff:22:1c:
ec:3b:83:82:40:2a:73:0e:3c:e2:79:e3:49:20:56:d0:06:cb:
71:36:72:23:48:9d:b0:29:9b:cd:fc:c8:f1:b0:11:42:35:4f:
57:a6:0d:60:49:cf:e2:64:f5:60:a8:dc:cb:f3:42:1d:77:fd:
d3:81:5b:57:87:38:67:a9:93:df:ca:90:99:af:84:7b:3f:ff:
db:01:ca:e4:2f:9f:92:cb:73:73:69:17:a3:b0:2f:50:36:2d:
54:e6:6b:29:97:c2:b2:17:19:73:4d:c7:52:04:7f:01:84:da:
eb:44:4e:f2:f9:dc:f9:a2:08:75:a7:99:77:9a:0e:bd:ca:03:
ef:da:e4:43:76:9f:9f:ee:7f:6d:ff:fa:20:ad:01:9c:ae:25:
58:ba:4d:17:de:f4:d9:fc:3b:96:11:f3:19:5b:2a:dd:9b:5c:
44:75:64:fa:24:08:67:9e:60:e1:4c:c5:38:bd:6b:49:2e:77:
08:46:cc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:58:36 2026 by rpki-client