Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File: FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier: Oi5Zk3X0AVDc0yXFo+fcbR+cHFTEFnzZu9NUk+p7iQc=
Subject key identifier: 0B:DD:E9:18:36:D7:8D:A3:0A:D4:EE:5F:4A:40:AA:19:B4:BC:36:EF
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer: /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial: 01A026205CCFFC0E8E3E49B7416290C67F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number: 0B33
Signing time: Fri 21 Aug 2026 21:00:50 +0000
Manifest this update: Fri 21 Aug 2026 21:00:50 +0000
Manifest next update: Sat 22 Aug 2026 21:00:50 +0000
Files and hashes: 1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: 6eiIcpoAx34VJ/ZplzliQHgaZ+Z10NoaAFld+RuxULc=)
2: MBwPXOKM_iWsdzlsSXqDs7ZTH3I.roa (hash: 6X+PmBDPGX3JlUhHkCIG/oJUZITMm91IUs89tz0dREE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:20:5c:cf:fc:0e:8e:3e:49:b7:41:62:90:c6:7f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
Validity
Not Before: Aug 21 21:00:50 2026 GMT
Not After : Aug 22 21:00:50 2026 GMT
Subject: CN=0bdde91836d78da30ad4ee5f4a40aa19b4bc36ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:f0:2f:c7:fe:59:50:49:1f:af:84:ed:aa:
d8:70:66:bc:06:4e:23:e1:30:d9:ba:56:5b:a5:c7:
1c:4d:87:65:05:f9:0f:ca:b7:b7:d1:25:5a:fd:f6:
7e:51:f1:32:c3:47:28:16:c1:23:97:a7:16:43:57:
92:bc:70:c1:33:14:a2:32:f0:a5:59:f2:87:61:85:
b5:5c:da:fc:18:f9:3d:ea:9d:12:3d:77:5e:29:b8:
fa:e4:a0:d2:8a:de:9f:30:60:96:6b:19:5c:79:2d:
86:aa:97:dd:b9:f5:76:4d:a5:7f:7e:2e:f1:04:1f:
f9:e3:4c:60:d8:dc:42:39:66:72:1a:7e:68:9d:21:
87:f9:79:7b:39:83:51:17:25:de:92:d3:a1:06:ca:
bc:d3:87:c9:46:c8:cd:39:f2:02:be:13:0e:32:56:
94:ca:de:47:f7:47:a5:f8:25:fe:ba:8d:c3:07:ca:
fc:53:f3:e0:0d:30:2d:2e:4b:c8:f5:f6:d7:66:6c:
52:08:b7:bb:6d:01:24:7b:17:30:f3:87:5f:1f:cb:
f1:61:cd:94:c8:5f:e3:25:7b:ba:d6:e7:b7:47:12:
06:33:63:f9:68:57:ed:2a:ec:8e:29:b4:20:18:39:
e0:f2:af:9c:68:97:dc:cc:29:62:e4:c2:7b:c7:df:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DD:E9:18:36:D7:8D:A3:0A:D4:EE:5F:4A:40:AA:19:B4:BC:36:EF
X509v3 Authority Key Identifier:
keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:81:0d:46:47:0c:a2:d2:c6:0f:75:9b:07:6c:c0:32:9e:d1:
1b:14:51:65:36:42:df:29:ef:e1:75:19:87:5a:bd:90:7b:4e:
e7:83:9a:6a:35:b3:90:69:4b:fa:32:80:a4:29:e1:3f:cf:f6:
0f:c6:97:81:dd:a4:a8:61:f2:a7:6b:d4:0b:18:d7:2c:3a:f1:
04:ea:e3:04:48:5f:34:a5:27:96:c4:cf:13:e5:c5:b0:c6:3b:
2d:be:2a:27:ee:8e:cf:ea:fa:cb:bb:93:a0:63:15:77:58:24:
e3:c1:bc:12:f4:40:44:41:6a:01:94:7e:31:f1:8e:8e:e6:27:
b9:60:09:b9:39:4a:8c:07:5e:88:60:2b:fd:87:b4:91:ff:2a:
67:a0:d2:fe:c6:64:d4:65:70:26:72:b3:6c:ae:69:73:e5:1f:
b0:e5:62:3b:15:57:95:1c:f8:0c:03:b4:3d:2f:cb:26:40:d1:
ec:62:e2:cf:6c:f1:db:d3:0a:8a:d6:6d:b5:4b:d7:a2:b5:92:
e0:4f:d5:a8:f5:26:60:5f:ec:ed:8f:04:38:26:82:55:8c:11:
36:0c:54:3b:e0:ad:ed:61:69:cb:e9:9d:e0:53:31:d8:91:7e:
1d:ac:b8:53:2b:53:a9:92:c3:ec:20:c3:0b:62:fc:86:20:e7:
ef:8c:71:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:16 2026 by rpki-client