Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: D/BSf3zft+2iXmpQa7cw2XiTDOjZBFc/IG4vJQ/x95A=
Subject key identifier: 89:30:36:45:C7:07:E9:77:57:B8:0A:D5:EF:F1:05:81:5A:52:D6:EC
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 019E1DFDFD2A2AF692E5DDE4DE742ABA0BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 0C68
Signing time: Tue 12 May 2026 21:00:45 +0000
Manifest this update: Tue 12 May 2026 21:00:45 +0000
Manifest next update: Wed 13 May 2026 21:00:45 +0000
Files and hashes: 1: 1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa (hash: SI1GZ68MQvNyp6z6E4tf9l9Kh6Fw9zjsRZN+PWTuZfk=)
2: 9jOl6Kcb1BJgHqe3R69MAMfscLs.roa (hash: mbvLuEee7YAsoidgyrb6OTXZspY1pEAVqK8jJs/3DzY=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: fboxCXe86y8OFMfQxEkDjqdA2abfLSfaZOqXwWet188=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:fd:2a:2a:f6:92:e5:dd:e4:de:74:2a:ba:0b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: May 12 21:00:45 2026 GMT
Not After : May 13 21:00:45 2026 GMT
Subject: CN=89303645c707e97757b80ad5eff105815a52d6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:43:48:81:35:f0:c1:b1:27:22:bc:c7:87:
6d:ce:e9:c0:5b:7d:10:28:be:9e:4d:b5:66:02:4f:
5f:2c:8f:dc:df:30:97:96:47:e5:98:55:b2:20:e4:
a5:b5:2d:76:c3:94:90:9c:f0:55:07:5b:bc:7b:6e:
f8:41:14:b4:fd:85:b3:9f:bd:84:a1:91:20:8e:d2:
fa:29:af:d9:a2:53:be:c2:cc:0d:6e:17:bf:15:2c:
1c:86:8d:94:81:f2:8e:15:9f:88:ee:79:7d:47:28:
a2:d0:bb:a4:b0:ad:1f:45:ac:5c:f4:6e:70:f9:dc:
3f:f9:d1:00:48:85:9d:69:b1:cd:ca:35:d4:41:93:
d3:46:04:1e:8e:6b:16:66:c5:46:08:14:fa:a1:40:
f1:bf:f7:10:44:31:5c:79:1e:ec:9f:59:0b:c1:ee:
47:5e:66:fd:7e:dc:45:2f:f1:38:3d:bf:2b:37:6d:
a2:d5:3d:d8:b1:67:15:4d:9a:85:28:33:13:23:f4:
b0:fa:24:e3:f3:65:f2:9d:83:bf:58:bb:ad:07:8f:
8f:e3:d5:72:a7:2d:ad:70:bf:b8:a4:42:b5:8d:0b:
98:ec:9c:1b:31:50:7a:bb:f2:c5:69:f5:b9:80:ba:
f2:93:5e:ce:14:03:72:4f:8f:f1:75:55:21:fc:b0:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:30:36:45:C7:07:E9:77:57:B8:0A:D5:EF:F1:05:81:5A:52:D6:EC
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:91:c8:28:f7:a2:d0:02:7a:b7:3e:8b:ef:f2:f8:8d:25:de:
9d:bd:c5:51:6e:de:be:62:3b:f2:ac:86:cf:2f:f3:d3:be:ce:
17:9e:23:76:64:e2:52:c6:da:c9:c4:05:4b:a6:11:fe:6f:af:
ad:f6:83:01:a8:90:04:20:a3:41:a9:a1:2e:ba:d8:9a:0c:d6:
52:08:22:61:86:09:74:93:27:38:de:e0:23:18:ed:54:93:2a:
fb:03:4d:b4:41:3c:78:46:3c:71:22:72:60:8d:97:43:cf:e9:
0a:26:90:a1:ac:60:dd:80:86:a2:12:92:be:8a:64:7d:45:3d:
43:7a:05:2c:a6:85:54:a6:11:5a:5f:99:4f:ab:36:29:09:16:
2d:41:75:dc:05:8e:c9:ba:22:18:ac:c8:a8:5e:87:f7:f0:75:
c8:43:f6:f7:15:b5:ff:b4:af:72:9e:ec:23:91:4f:e6:5f:6e:
b2:88:e1:4b:4b:7b:f2:14:5b:6c:cd:f6:62:3b:5f:0c:1e:bb:
55:f9:f7:79:fc:8d:93:1a:1e:e3:ea:f1:0e:6b:db:79:3a:58:
f3:5e:c6:8a:5c:bd:9e:c4:5c:db:38:ca:2e:3c:68:ee:30:14:
df:04:f2:74:af:8d:cd:2c:e4:be:f7:46:db:43:89:43:f0:1d:
9d:9a:48:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:55 2026 by rpki-client