Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
File: FTyehIfJi0U_l08gMX7OPXD01d0.mft (raw, json)
Hash identifier: w7QtgvHFKoD+slW1OVcaDmlmjtisjyPzFVlxCNu4KX8=
Subject key identifier: B3:C8:41:10:08:A0:2C:4C:1F:8E:BF:B4:64:8E:45:2A:9B:46:1E:23
Authority key identifier: 15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
Certificate issuer: /CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Certificate serial: 019D3909ECAFC35C3A5F6789185701C85DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
Manifest number: 0DCB
Signing time: Sun 29 Mar 2026 10:00:44 +0000
Manifest this update: Sun 29 Mar 2026 10:00:44 +0000
Manifest next update: Mon 30 Mar 2026 10:00:44 +0000
Files and hashes: 1: 9jINeFumL336-QR3Wj0mntR5_cM.roa (hash: wVCs9VOH0OKrniCbWjEGE6eJoair0ggue+MyLd2THDQ=)
2: FTyehIfJi0U_l08gMX7OPXD01d0.crl (hash: aHc+DvgciyD0V4Om9vekI7ytuNVqKk2At2fzVszr9Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ec:af:c3:5c:3a:5f:67:89:18:57:01:c8:5d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Validity
Not Before: Mar 29 10:00:44 2026 GMT
Not After : Mar 30 10:00:44 2026 GMT
Subject: CN=b3c8411008a02c4c1f8ebfb4648e452a9b461e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e5:28:22:72:d5:0f:da:dd:81:5a:e8:59:b1:
4a:40:2c:ec:c1:89:79:be:64:4c:eb:3f:52:a2:73:
a1:a0:47:a8:3e:9f:3a:74:a9:b5:db:d6:de:37:cf:
c8:cc:46:3c:4d:a0:7e:49:dc:54:40:dc:d1:23:c2:
5a:23:98:43:f2:c2:3a:91:69:52:22:7e:59:1a:d7:
a7:ac:6b:db:fa:7d:c7:77:93:9c:f5:96:af:de:5d:
c4:59:c6:fe:b7:05:0a:15:ee:07:81:08:be:10:a4:
77:af:f1:b6:24:73:61:57:80:6f:3d:6b:35:5e:03:
71:15:eb:0b:db:69:90:6b:08:33:0b:b1:ef:ba:06:
f8:ad:4b:33:da:ab:4b:1c:0d:55:94:72:c7:7b:e1:
7b:d2:b3:02:a1:5b:a9:e0:aa:dd:cb:4f:10:6f:51:
59:3f:ba:c7:eb:15:ee:ec:b8:3f:e8:1f:98:1d:a2:
11:a4:fd:08:57:d9:b4:ef:6f:34:e3:a6:13:4d:cf:
a0:cf:8e:83:72:4f:b8:ae:10:57:93:9f:75:6b:d1:
d2:51:f0:88:10:98:19:f0:0d:9f:95:9d:ce:8c:84:
ba:58:5b:dc:d1:db:91:2c:7f:b6:a6:c9:3d:8f:6c:
62:32:49:77:4d:0e:60:0f:b8:33:4e:cd:34:c2:11:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C8:41:10:08:A0:2C:4C:1F:8E:BF:B4:64:8E:45:2A:9B:46:1E:23
X509v3 Authority Key Identifier:
keyid:15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:59:7b:4e:77:f5:44:48:1d:3a:b0:7c:b7:47:c4:86:5f:cc:
28:86:37:7e:3c:d8:f6:f2:27:32:be:4c:5a:e1:72:e0:dc:f1:
d9:46:36:4b:f5:00:96:78:b6:cf:57:66:03:4d:9b:d7:bb:09:
27:e6:63:18:a5:0c:99:ca:03:6e:b7:5b:50:af:5c:70:24:9e:
37:80:c0:8f:94:ef:b1:c9:71:99:e0:bb:de:0a:53:3c:3b:2c:
76:e9:6f:1f:74:33:00:58:f4:ce:01:53:fd:0c:15:3a:c7:f9:
45:07:5d:5b:00:83:5f:35:18:90:01:a7:7e:f0:be:58:9d:ca:
c8:17:cb:ef:56:63:e1:ab:73:bd:53:a5:26:1d:55:61:fe:d4:
39:e8:29:75:e0:58:4f:a4:9b:26:2c:66:61:a6:e3:2b:7c:78:
07:74:90:69:9f:e9:c7:e8:67:ac:90:a3:e9:f8:77:81:f6:f1:
28:15:b3:5e:3b:50:01:36:33:27:b8:3f:df:e0:6a:1b:d6:74:
b9:93:b4:76:50:d2:ca:8f:ef:7b:49:a0:70:ec:b6:1f:1c:68:
12:82:07:fd:13:d2:ac:6f:cc:1b:8a:e7:2f:77:4c:13:2e:d7:
5d:cb:6b:25:e0:40:ed:55:da:2d:ce:89:75:b0:be:ba:6b:9a:
9f:ac:78:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:33:39 2026 by rpki-client