Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
File: ftCMDM2oAs8gznq97qICFOBeR68.mft (raw, json)
Hash identifier: k1GycrYv5DV3LzldZ9xzR3qvHbiXOV7KVe/ZtEBx4BM=
Subject key identifier: BE:EE:54:F3:26:12:9E:D3:41:FA:02:64:7A:BF:AF:30:FC:14:53:65
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Certificate issuer: /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial: 019D382E94400F52F37C345CD7CBF9388F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:01:09 +0000
Manifest this update: Sun 29 Mar 2026 06:01:09 +0000
Manifest next update: Mon 30 Mar 2026 06:01:09 +0000
Files and hashes: 1: KrMG047MsDkcwkxBcUD2n7II2ek.roa (hash: 6Sar3x354qtl7kCtCHhcg2W3/WLEoHt036CjyIz1o2g=)
2: ftCMDM2oAs8gznq97qICFOBeR68.crl (hash: nC0Y5vWMncLz3I1or0anpmahyBM5dtmMrl9w0WtC9uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:94:40:0f:52:f3:7c:34:5c:d7:cb:f9:38:8f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Validity
Not Before: Mar 29 06:01:09 2026 GMT
Not After : Mar 30 06:01:09 2026 GMT
Subject: CN=beee54f326129ed341fa02647abfaf30fc145365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:c8:d9:28:4d:11:fd:f7:68:3c:22:3a:20:
01:43:e4:9e:c4:52:34:e9:44:00:94:e6:d7:c3:b9:
82:d0:7b:56:ad:7e:88:99:79:61:2e:c3:ae:a1:bf:
78:98:4f:98:cc:a3:99:21:e4:6d:56:a7:20:dc:c5:
43:d4:24:63:2b:ec:75:2f:3a:4a:79:27:89:00:eb:
12:be:ac:b9:0c:7d:e6:eb:ea:51:2a:04:cd:8b:46:
b2:65:89:20:6d:11:79:87:73:95:b9:a1:32:d5:f4:
54:9b:43:03:f4:a4:f2:ce:2b:8e:c4:ad:0c:e4:23:
ab:ca:f9:ec:d6:b2:59:61:da:60:27:72:6e:42:5a:
fb:4e:59:29:68:f6:78:cc:97:53:ea:65:46:aa:af:
b8:62:fc:2e:f7:5e:5b:c0:40:5e:3c:0a:44:c9:cb:
0c:a0:fc:89:d8:84:98:80:bb:73:e6:b4:e8:9c:e3:
28:93:2f:a8:a3:a6:5f:b0:17:d2:c5:cc:65:37:d2:
06:3c:e4:27:ae:ad:e1:8b:a8:45:8d:c4:3f:6b:94:
27:80:50:88:03:88:9f:4b:e5:fe:14:7a:45:80:d5:
84:dd:c2:f2:e4:a8:d6:e0:19:16:cf:5e:28:4a:6a:
0e:72:71:73:71:5b:90:20:d6:8a:19:1a:57:19:7b:
57:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EE:54:F3:26:12:9E:D3:41:FA:02:64:7A:BF:AF:30:FC:14:53:65
X509v3 Authority Key Identifier:
keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e5:13:97:a9:21:14:ee:7d:03:47:f9:d6:72:d3:b5:f1:5c:
33:f8:a1:42:2c:b4:3b:0e:09:c7:5c:12:fd:4a:13:b5:5f:9c:
95:4b:b5:aa:11:e7:f8:5e:2d:fb:6e:55:f1:3f:21:de:c9:33:
22:2e:d8:95:d4:2d:56:98:84:7e:c6:b3:4c:15:00:f6:ab:ee:
a4:2a:79:4c:1f:36:5e:d7:3a:4b:fc:68:ce:37:a5:3f:4a:0c:
fa:33:cf:b9:f1:c1:26:4a:be:c8:26:4e:b3:ac:2a:b0:2e:3e:
35:9d:55:60:dc:19:b7:45:0a:eb:22:61:d2:30:33:12:cb:3b:
16:be:1f:3d:d6:fb:5c:39:e9:cd:aa:d4:57:fc:be:6d:61:73:
5a:96:7b:a0:6c:14:bb:ec:30:c1:3a:46:f0:5b:7b:42:50:00:
9b:db:70:65:0f:d7:03:64:34:d1:89:ca:c2:08:97:c8:2e:ed:
63:0c:55:3d:2c:97:38:1c:5e:97:54:e2:24:3d:8b:6e:87:dc:
f0:da:c4:27:23:d4:b1:14:c9:a2:be:31:26:a7:2b:57:99:4f:
b8:39:9e:78:61:25:48:47:9d:6c:6a:33:f4:74:12:e8:2d:32:
fd:d6:9c:86:9f:d0:57:a9:09:48:a3:83:78:c4:4b:7f:78:e0:
01:40:aa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:45 2026 by rpki-client