Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
File: FT0HLM7wC_Rk1mDb0F2todoz0sg.mft (raw, json)
Hash identifier: qC2niYSRmhYWJ3Z4NNhvWDkBQ2jY6/tZoZCOzmy22OM=
Subject key identifier: 58:7C:07:A9:D0:D0:E6:19:6D:B8:8F:7E:B9:E6:5C:96:56:92:5A:D6
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Certificate issuer: /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial: 019D265F1856A210B0C3649A940705075A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
Manifest number: 0AAD
Signing time: Wed 25 Mar 2026 19:00:59 +0000
Manifest this update: Wed 25 Mar 2026 19:00:59 +0000
Manifest next update: Thu 26 Mar 2026 19:00:59 +0000
Files and hashes: 1: FT0HLM7wC_Rk1mDb0F2todoz0sg.crl (hash: bCMcVuMmfP5ShFA3tn/IT5orAuxDuFwzGiaGLvC6OVE=)
2: SGpevAZGETQFuN0tYIFbuVO-oHU.roa (hash: p6/1XP6vhlSrsHHLDARcNdGWShp5rNMH31ibs+saZHQ=)
3: h00EwWS0nwQcNex-PoN4bBKe784.roa (hash: KPJZ49G0RdOibbutyTd80kdxdj+ZbMSn0AFJ4T8Y7D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:18:56:a2:10:b0:c3:64:9a:94:07:05:07:5a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Validity
Not Before: Mar 25 19:00:59 2026 GMT
Not After : Mar 26 19:00:59 2026 GMT
Subject: CN=587c07a9d0d0e6196db88f7eb9e65c9656925ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:71:98:db:5c:6c:83:b0:f3:4e:9e:ce:bc:
57:51:50:9d:dc:8e:c4:b7:c5:47:70:7a:ef:e9:8a:
1e:46:e3:6e:84:2c:20:e2:53:fe:28:20:4b:1d:e8:
30:24:f9:f7:45:00:94:5f:f9:27:46:01:55:85:96:
d3:ab:95:43:f1:a0:b0:d4:c7:28:c5:20:cf:fd:e2:
31:f1:71:c6:f8:c8:db:4a:40:c5:4e:3d:d8:11:8e:
68:6a:ed:7c:0e:89:48:57:68:35:f0:ff:01:05:46:
3a:25:31:2b:48:e9:75:cb:0c:e6:f0:a6:57:ba:7a:
a6:25:99:b9:b6:f2:0f:7d:07:d3:66:aa:72:15:95:
ce:f1:44:30:24:8c:61:a9:63:42:96:18:be:1e:48:
6b:ca:ea:24:48:56:7f:1e:ec:54:9a:0f:49:a8:84:
5a:47:a4:62:a1:a4:e5:ff:dc:6c:29:73:14:13:ad:
ed:b7:be:54:aa:33:3b:d4:0c:9f:c9:2d:cb:68:67:
bd:16:09:e3:3c:f2:75:dd:87:92:6c:42:c1:65:a1:
b2:05:a0:ae:b7:f2:a5:fb:d9:71:17:35:0a:7b:d6:
73:00:2b:13:bf:49:5d:6b:84:36:19:27:96:93:be:
81:1e:8e:5b:80:f3:5e:7c:6e:b4:db:77:9b:0a:42:
24:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7C:07:A9:D0:D0:E6:19:6D:B8:8F:7E:B9:E6:5C:96:56:92:5A:D6
X509v3 Authority Key Identifier:
keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:de:a0:01:6e:fe:56:af:5b:a0:bc:80:09:b4:8b:b5:43:8b:
32:50:2b:41:36:0c:be:81:e0:8f:81:ca:04:bd:b6:61:4f:4d:
66:e7:e1:21:84:ac:f2:1c:7c:11:3a:5b:33:3c:eb:60:04:d0:
74:3d:e0:1b:6e:4f:2b:fa:41:72:e1:60:67:b8:50:09:7a:bb:
0c:ce:2f:16:79:c3:93:46:6b:79:66:33:a1:af:96:ad:09:39:
43:ae:f8:4e:8d:ee:87:94:5b:bb:d8:1b:6f:29:1f:a5:fc:d6:
4c:36:3f:d1:45:36:93:2e:9d:4a:46:67:35:77:5b:b5:2d:5e:
e2:09:0c:bd:bf:c5:ec:ef:d0:64:df:22:93:57:8d:0e:f9:ad:
de:1a:85:6a:79:12:53:5b:19:b1:4b:7a:08:4e:0d:41:0f:dc:
dd:59:5d:93:c3:d3:4c:67:e4:2f:d8:4e:72:19:ff:3c:58:47:
b5:10:54:b0:19:ac:29:d2:43:71:e0:82:95:f5:8d:ec:b2:f2:
68:72:d3:57:5c:c1:d3:53:de:80:22:92:40:5c:d2:4c:cd:72:
57:ac:7a:ef:41:fc:51:cf:90:b4:20:69:ea:ad:de:f4:63:c6:
bc:4d:b6:98:55:ac:c9:b5:20:8a:b5:74:91:71:e8:66:f4:b4:
d8:23:7a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:57 2026 by rpki-client