Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
File: FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft (raw, json)
Hash identifier: xRymYIAX/vk5qExxwV/u3GCuEzvR1o8J89Z+qD0GIfI=
Subject key identifier: 37:11:C9:5E:0C:E8:35:81:51:72:D3:F7:6B:67:05:25:2D:C6:B6:E1
Authority key identifier: 15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
Certificate issuer: /CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Certificate serial: 019D284E11BFEA402578006BC5062EBB3727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
Manifest number: 14F9
Signing time: Thu 26 Mar 2026 04:01:38 +0000
Manifest this update: Thu 26 Mar 2026 04:01:38 +0000
Manifest next update: Fri 27 Mar 2026 04:01:38 +0000
Files and hashes: 1: FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl (hash: C28VJcUq3eN4fwX52b5T8Jva2MGsjrbQfr6XI5XPWbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:11:bf:ea:40:25:78:00:6b:c5:06:2e:bb:37:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Validity
Not Before: Mar 26 04:01:38 2026 GMT
Not After : Mar 27 04:01:38 2026 GMT
Subject: CN=3711c95e0ce835815172d3f76b6705252dc6b6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:aa:1f:19:12:0c:a2:d9:26:9a:63:54:e7:c9:
90:69:a0:01:c7:ab:6c:ef:b4:23:67:25:73:3e:11:
88:d8:10:66:cb:2f:dc:cd:ce:71:3d:80:bd:4e:6f:
25:5e:fe:4b:c4:a6:79:d3:df:34:58:7c:fe:69:67:
e6:4c:d4:66:1a:86:af:d4:47:73:24:c9:ba:1c:b3:
57:28:50:ea:44:52:34:54:d0:78:ab:52:09:be:40:
89:0f:39:03:12:64:20:44:1c:8e:86:d0:01:50:39:
a3:dd:91:96:b0:99:07:b9:80:39:e6:31:37:ce:f2:
98:fd:10:18:50:4b:8c:a8:82:b2:40:a6:f3:5f:87:
49:01:c6:a8:5a:30:ed:1d:09:01:30:1a:02:1b:f3:
8e:05:f1:e1:cb:10:88:7c:bd:8d:be:c3:7e:83:41:
13:a7:73:55:c6:17:74:90:55:0c:2a:9c:23:b1:4b:
64:4c:a6:d8:91:69:13:13:42:57:24:5e:45:2c:0d:
2f:aa:9a:d3:6b:b2:1c:77:6f:23:76:90:26:23:ea:
33:34:16:25:66:be:ee:2c:16:c4:34:d8:e4:29:08:
a6:95:ed:b9:6a:a9:ad:c3:0b:0b:88:34:10:88:c0:
5b:50:b8:cc:2e:16:48:09:3a:9f:f2:08:ba:76:a3:
51:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:11:C9:5E:0C:E8:35:81:51:72:D3:F7:6B:67:05:25:2D:C6:B6:E1
X509v3 Authority Key Identifier:
keyid:15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ae:43:87:b4:98:05:a6:4c:15:c8:79:87:50:ba:57:aa:16:
eb:98:4f:28:d7:a9:c2:f8:b5:a6:4f:f7:68:ac:50:78:82:1e:
37:91:2e:b7:e9:1e:e8:26:de:08:b4:e2:8f:01:b7:c8:ff:07:
4e:4b:62:3f:8f:6c:9a:b8:cc:ef:71:b1:8b:5b:18:fa:9c:b7:
9b:85:8c:ea:72:a6:dd:46:f3:85:94:66:01:c8:69:54:5d:c6:
11:61:6b:18:50:e0:23:b7:89:6d:bb:dd:94:82:2a:5b:df:d3:
32:97:d0:ad:36:2e:30:10:d3:f7:3d:ae:a8:b5:62:cf:b7:31:
d1:71:ea:16:c9:ec:a2:6f:c0:00:45:af:5c:26:99:cc:4c:ea:
39:99:77:2e:3f:2f:15:69:6a:65:38:06:b4:99:d5:f7:71:a2:
af:c4:44:74:6f:4e:18:43:b8:3b:5d:1f:77:5a:80:a5:3c:33:
b1:e0:d7:d1:3b:67:3d:e9:45:40:40:07:d9:6b:8e:ad:5a:7a:
9e:7e:d7:96:ef:c4:fe:a8:2d:e0:de:b9:9f:ec:4c:14:f2:2b:
83:88:46:53:ab:f0:3b:d8:16:bb:79:cc:bc:0f:d3:b3:bf:0e:
6b:b3:c8:08:95:94:0d:55:8c:76:1e:07:93:3e:a2:8a:2b:1f:
da:7b:c6:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oThG/6kAleABrxQYuuzcnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzgzMWMxNjYzNTE2MWM0ZGJkMThlYzVhNzJiOTljNGVl
NTE5ZTMwHhcNMjYwMzI2MDQwMTM4WhcNMjYwMzI3MDQwMTM4WjAzMTEwLwYDVQQD
EygzNzExYzk1ZTBjZTgzNTgxNTE3MmQzZjc2YjY3MDUyNTJkYzZiNmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16ofGRIMotkmmmNU58mQaaABx6ts
77QjZyVzPhGI2BBmyy/czc5xPYC9Tm8lXv5LxKZ50980WHz+aWfmTNRmGoav1Edz
JMm6HLNXKFDqRFI0VNB4q1IJvkCJDzkDEmQgRByOhtABUDmj3ZGWsJkHuYA55jE3
zvKY/RAYUEuMqIKyQKbzX4dJAcaoWjDtHQkBMBoCG/OOBfHhyxCIfL2NvsN+g0ET
p3NVxhd0kFUMKpwjsUtkTKbYkWkTE0JXJF5FLA0vqprTa7Icd28jdpAmI+ozNBYl
Zr7uLBbENNjkKQimle25aqmtwwsLiDQQiMBbULjMLhZICTqf8gi6dqNRvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcRyV4M6DWBUXLT92tnBSUtxrbhMB8GA1UdIwQY
MBaAFBU4McFmNRYcTb0Y7FpyuZxO5RnjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85NTQ1NTctMmE1Zi00ODI2LWFiMTYt
Y2Q1MTdiMTY5Zjg5LzEvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85NTQ1NTctMmE1Zi00ODI2LWFiMTYtY2Q1MTdiMTY5Zjg5
LzEvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASa5Dh7SY
BaZMFch5h1C6V6oW65hPKNepwvi1pk/3aKxQeIIeN5Eut+ke6CbeCLTijwG3yP8H
TktiP49smrjM73Gxi1sY+py3m4WM6nKm3UbzhZRmAchpVF3GEWFrGFDgI7eJbbvd
lIIqW9/TMpfQrTYuMBDT9z2uqLViz7cx0XHqFsnsom/AAEWvXCaZzEzqOZl3Lj8v
FWlqZTgGtJnV93Gir8REdG9OGEO4O10fd1qApTwzseDX0TtnPelFQEAH2WuOrVp6
nn7Xlu/E/qgt4N65n+xMFPIrg4hGU6vwO9gWu3nMvA/Ts78Oa7PICJWUDVWMdh4H
kz6iiisf2nvGPQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:45 2026 by rpki-client