
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a26d40-07c9-4cab-a5ee-b4ab91ae5ca0/1/fTcEb_IE0GGUyQtaKQBsfEhtXTE.mft
File: fTcEb_IE0GGUyQtaKQBsfEhtXTE.mft (raw, json)
Hash identifier: UM3RGExy8d6nqFQjVxJlDfkKnm+Kt8T7m1cfytGnUMw=
Subject key identifier: 4F:3F:CC:A0:55:97:51:DB:FA:BA:66:2E:F2:AD:45:26:6F:3A:F2:A5
Authority key identifier: 7D:37:04:6F:F2:04:D0:61:94:C9:0B:5A:29:00:6C:7C:48:6D:5D:31
Certificate issuer: /CN=7d37046ff204d06194c90b5a29006c7c486d5d31
Certificate serial: 019D3977EE339946063415CF9D06DF4EC3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTcEb_IE0GGUyQtaKQBsfEhtXTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a26d40-07c9-4cab-a5ee-b4ab91ae5ca0/1/fTcEb_IE0GGUyQtaKQBsfEhtXTE.mft
Manifest number: 91
Signing time: Sun 29 Mar 2026 12:00:54 +0000
Manifest this update: Sun 29 Mar 2026 12:00:54 +0000
Manifest next update: Mon 30 Mar 2026 12:00:54 +0000
Files and hashes: 1: fTcEb_IE0GGUyQtaKQBsfEhtXTE.crl (hash: /wYgM9T6iApCJ0KqVwyyfe6mwRhXWKxm4IvMsGE9fgQ=)
2: l7q0rvdXf4jTNzpQ__F3c9oRrwU.roa (hash: mM9uyYpOAz1i3k2m7kXG8Yhf32ZLcUYbFolhJXOJ+Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/a26d40-07c9-4cab-a5ee-b4ab91ae5ca0/1/fTcEb_IE0GGUyQtaKQBsfEhtXTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/a26d40-07c9-4cab-a5ee-b4ab91ae5ca0/1/fTcEb_IE0GGUyQtaKQBsfEhtXTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTcEb_IE0GGUyQtaKQBsfEhtXTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:ee:33:99:46:06:34:15:cf:9d:06:df:4e:c3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d37046ff204d06194c90b5a29006c7c486d5d31
Validity
Not Before: Mar 29 12:00:54 2026 GMT
Not After : Mar 30 12:00:54 2026 GMT
Subject: CN=4f3fcca0559751dbfaba662ef2ad45266f3af2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:cd:80:89:bd:77:bf:37:c2:d3:3f:de:f3:
51:75:a6:1d:f5:ae:1b:33:07:52:13:43:09:05:4e:
db:8c:e8:9c:31:3d:a0:41:a6:b2:aa:8e:08:54:4f:
21:09:b2:0d:37:fe:ee:fe:06:fa:39:91:33:83:95:
88:d9:76:3e:95:6d:c9:69:f9:47:2c:47:3c:7c:3f:
42:9a:64:9d:ee:6f:a1:27:b1:e9:db:6c:71:2f:e0:
2f:5c:90:3d:27:34:bf:37:89:46:ee:e6:f8:ab:7e:
bf:85:37:26:50:ae:c6:3f:94:fd:30:56:a9:33:cb:
32:a1:53:e7:78:4a:31:5b:23:b9:b2:da:71:cc:78:
ac:c9:74:2b:61:2c:72:0c:76:c2:15:01:ba:4c:88:
e3:e5:e2:08:13:21:aa:e6:11:42:b9:0d:a7:8d:31:
c6:a5:aa:c6:d0:1f:98:29:56:4e:0b:f5:5c:c3:22:
da:37:d9:7f:3a:d9:1e:75:f4:f8:56:48:51:8a:70:
11:4e:93:68:ce:bf:4d:ff:46:e6:e0:c1:eb:39:7c:
a1:1e:aa:a5:df:f9:97:34:d1:b1:08:16:21:20:78:
68:d2:4d:35:8f:33:3d:41:42:04:4b:c2:fa:27:d1:
a3:6b:70:05:4f:4a:c7:0c:79:74:6d:e8:2b:0e:56:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3F:CC:A0:55:97:51:DB:FA:BA:66:2E:F2:AD:45:26:6F:3A:F2:A5
X509v3 Authority Key Identifier:
keyid:7D:37:04:6F:F2:04:D0:61:94:C9:0B:5A:29:00:6C:7C:48:6D:5D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTcEb_IE0GGUyQtaKQBsfEhtXTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a26d40-07c9-4cab-a5ee-b4ab91ae5ca0/1/fTcEb_IE0GGUyQtaKQBsfEhtXTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a26d40-07c9-4cab-a5ee-b4ab91ae5ca0/1/fTcEb_IE0GGUyQtaKQBsfEhtXTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:4c:0e:8f:e7:c2:cf:81:ea:b5:d8:f6:f0:ab:de:1e:ad:b6:
ad:ac:35:b7:00:19:c3:ec:9e:dc:7d:c1:29:6f:84:5d:7e:15:
4e:e9:f2:94:a1:73:06:36:ef:40:2e:ad:8a:45:fd:06:c1:20:
62:8a:9d:80:7f:1c:6c:cd:4a:97:4c:57:b1:22:1c:3f:96:96:
96:a7:89:8c:19:83:0d:c3:ad:b1:e1:52:30:7c:ea:ff:e3:bf:
13:c2:06:4a:c0:50:6b:f9:11:05:ce:f2:6c:d7:4b:a0:63:ab:
df:97:1e:2f:5d:20:44:9f:7c:66:99:23:2a:86:be:a7:11:dc:
b0:8d:7e:b4:99:df:12:d6:0c:c6:33:d2:36:d9:64:1e:68:ac:
03:09:ce:e9:d0:ef:5c:1f:d7:af:6d:df:a0:c8:ed:19:a0:d1:
3b:50:0b:c1:1b:2e:75:66:6e:29:45:6a:66:f2:e9:a9:f9:c6:
5c:2a:fb:2f:c3:b1:e3:20:11:00:b0:78:ab:89:55:bf:b7:99:
72:a5:5d:f2:8d:85:f3:b8:3e:a0:ba:5c:d6:53:64:97:8f:62:
e3:94:5c:c1:fa:e0:6a:a6:25:f6:89:2e:98:1a:d8:01:02:ed:
bc:c0:40:64:20:02:19:9b:fb:bd:36:96:da:d0:f1:7f:59:e0:
25:0d:ce:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:34 2026 by rpki-client