Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
File: ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft (raw, json)
Hash identifier: sN5gXFOJQ7ddrT5uCUWU62U588+Up9zsF1KFjmXhWFM=
Subject key identifier: 84:3E:AB:78:DF:33:D6:E9:8C:0E:71:0B:55:03:1C:6E:BE:3B:9F:01
Authority key identifier: 7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52
Certificate issuer: /CN=7ed77eafdb387afd17574272c9374c8180370f52
Certificate serial: 019D37F79B27FDB8D95D43F723BFD5829E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 05:01:07 +0000
Manifest this update: Sun 29 Mar 2026 05:01:07 +0000
Manifest next update: Mon 30 Mar 2026 05:01:07 +0000
Files and hashes: 1: ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl (hash: 5ZPtgAOfsr06DWdVfImVmE+Wr27wowzhn7V74/EXt9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:9b:27:fd:b8:d9:5d:43:f7:23:bf:d5:82:9e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed77eafdb387afd17574272c9374c8180370f52
Validity
Not Before: Mar 29 05:01:07 2026 GMT
Not After : Mar 30 05:01:07 2026 GMT
Subject: CN=843eab78df33d6e98c0e710b55031c6ebe3b9f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:40:99:ba:58:ce:a4:d5:6c:b5:5a:ca:7c:5d:
96:0f:e6:a0:16:be:fd:4d:17:76:e7:96:93:1e:17:
99:d5:84:ed:cb:41:11:5e:6a:37:6f:5d:55:e4:c2:
0e:45:f7:dc:d6:b8:65:6c:08:19:5c:a2:a3:37:72:
ac:e7:9d:de:cd:6d:64:83:fc:39:b3:f2:35:f8:d3:
b2:a9:95:c0:71:ac:d9:29:85:ff:08:a4:d9:90:2f:
fb:c1:80:64:20:64:40:3f:9f:39:33:14:b4:a8:4a:
f9:53:fe:39:fe:37:67:36:2d:53:c6:e6:e9:a0:11:
b1:41:dc:f0:df:5f:56:c2:1f:0b:fb:ba:36:ee:9d:
f2:17:d7:56:9c:30:2d:6d:78:c4:70:d0:ca:34:73:
5a:06:f4:43:b6:b4:90:ea:15:47:83:dc:97:7d:53:
7e:86:a3:9e:0d:5b:1a:23:5b:c3:3b:12:d6:27:f4:
93:9b:8d:e4:4d:d9:3f:24:cf:5d:a8:24:ea:0d:6a:
40:8a:a0:c0:b8:bc:6e:26:11:93:eb:2c:0f:c3:d9:
35:4e:2b:7f:49:33:ac:ec:f1:a9:bc:e5:54:56:cf:
35:10:0c:fd:db:14:a2:30:37:ae:44:47:c1:0e:b2:
34:49:27:c3:64:6e:13:fd:44:9f:a4:80:7c:1b:c0:
6e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3E:AB:78:DF:33:D6:E9:8C:0E:71:0B:55:03:1C:6E:BE:3B:9F:01
X509v3 Authority Key Identifier:
keyid:7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:05:d2:a7:64:30:e5:f3:19:b7:23:40:48:e1:c8:ff:43:f1:
70:c7:95:1a:5e:b9:af:10:e9:a9:cd:4f:e2:cb:9c:ec:31:63:
76:33:af:d5:e3:1d:da:9b:74:68:79:f3:f9:c2:13:8f:85:9d:
3c:72:76:54:12:cb:d3:b0:ee:5c:ec:bc:24:51:d4:fb:1a:32:
b3:39:bd:cc:4c:6d:72:ad:86:f0:eb:37:13:8e:21:0d:d1:4a:
25:2d:72:a9:86:c1:42:44:69:6b:90:a5:c2:51:f2:24:b5:e1:
97:74:25:eb:50:6f:87:57:24:fa:79:47:c7:d5:cc:8b:42:67:
3c:cf:84:ae:55:8b:d6:71:fe:15:2a:75:92:f1:ef:43:c4:56:
fd:69:94:3a:1b:7b:67:ea:30:cd:0e:b0:f6:7b:66:45:b1:de:
77:d0:91:19:cb:83:16:4e:37:af:bd:09:74:92:60:2e:ae:06:
37:ab:e6:ac:41:69:13:3b:c8:61:c5:f7:fc:2b:29:80:19:f9:
f2:d1:1b:8f:dd:41:a4:4f:80:12:73:67:28:be:cb:03:70:ab:
cd:ad:d0:e5:3d:03:95:6a:89:c9:27:bd:80:c8:93:92:09:7d:
a2:ca:c5:f8:ce:ec:9e:45:80:ab:cd:ac:ba:aa:86:93:61:43:
33:65:db:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0395sn/bjZXUP3I7/Vgp4EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZDc3ZWFmZGIzODdhZmQxNzU3NDI3MmM5Mzc0YzgxODAz
NzBmNTIwHhcNMjYwMzI5MDUwMTA3WhcNMjYwMzMwMDUwMTA3WjAzMTEwLwYDVQQD
Eyg4NDNlYWI3OGRmMzNkNmU5OGMwZTcxMGI1NTAzMWM2ZWJlM2I5ZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUCZuljOpNVstVrKfF2WD+agFr79
TRd255aTHheZ1YTty0ERXmo3b11V5MIORffc1rhlbAgZXKKjN3Ks553ezW1kg/w5
s/I1+NOyqZXAcazZKYX/CKTZkC/7wYBkIGRAP585MxS0qEr5U/45/jdnNi1Txubp
oBGxQdzw319Wwh8L+7o27p3yF9dWnDAtbXjEcNDKNHNaBvRDtrSQ6hVHg9yXfVN+
hqOeDVsaI1vDOxLWJ/STm43kTdk/JM9dqCTqDWpAiqDAuLxuJhGT6ywPw9k1Tit/
STOs7PGpvOVUVs81EAz92xSiMDeuREfBDrI0SSfDZG4T/USfpIB8G8BuzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQ+q3jfM9bpjA5xC1UDHG6+O58BMB8GA1UdIwQY
MBaAFH7Xfq/bOHr9F1dCcsk3TIGANw9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnRkLXI5czRldjBYVjBKeXlUZE1nWUEzRDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYmM5ZTItNTBmNi00NjVhLTllY2Qt
YmM0MDE3Yzk0NTliLzEvZnRkLXI5czRldjBYVjBKeXlUZE1nWUEzRDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYmM5ZTItNTBmNi00NjVhLTllY2QtYmM0MDE3Yzk0NTli
LzEvZnRkLXI5czRldjBYVjBKeXlUZE1nWUEzRDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwXSp2Qw
5fMZtyNASOHI/0PxcMeVGl65rxDpqc1P4suc7DFjdjOv1eMd2pt0aHnz+cITj4Wd
PHJ2VBLL07DuXOy8JFHU+xoyszm9zExtcq2G8Os3E44hDdFKJS1yqYbBQkRpa5Cl
wlHyJLXhl3Ql61Bvh1ck+nlHx9XMi0JnPM+ErlWL1nH+FSp1kvHvQ8RW/WmUOht7
Z+owzQ6w9ntmRbHed9CRGcuDFk43r70JdJJgLq4GN6vmrEFpEzvIYcX3/CspgBn5
8tEbj91BpE+AEnNnKL7LA3Crza3Q5T0DlWqJySe9gMiTkgl9osrF+M7snkWAq82s
uqqGk2FDM2XbZw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:16 2026 by rpki-client