Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
File: FTXSThc2fkBbeA9xEEnl940QHxY.mft (raw, json)
Hash identifier: 6d1ysWZKaPrRQunysmFLAbeiPabwu5rMOM22i0JfPdQ=
Subject key identifier: 14:C1:A9:E6:62:06:16:6E:ED:E3:D6:28:AD:77:5E:2D:D2:A3:7A:15
Authority key identifier: 15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
Certificate issuer: /CN=1535d24e17367e405b780f711049e5f78d101f16
Certificate serial: 019D382E3EC03F52A3F6761D01D2F6EAA74F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
Manifest number: 146B
Signing time: Sun 29 Mar 2026 06:00:47 +0000
Manifest this update: Sun 29 Mar 2026 06:00:47 +0000
Manifest next update: Mon 30 Mar 2026 06:00:47 +0000
Files and hashes: 1: FTXSThc2fkBbeA9xEEnl940QHxY.crl (hash: 3NF93E3mgoaWx7eRbfkglVoTodLdB9HV2LEasNTlQ0A=)
2: XdCzrXLhnjwJ8yBYNm69QxUeO5A.roa (hash: Q7iCQLw3LeLyUg+qshhdU21++GYyz/g1gumZUpCqGtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3e:c0:3f:52:a3:f6:76:1d:01:d2:f6:ea:a7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1535d24e17367e405b780f711049e5f78d101f16
Validity
Not Before: Mar 29 06:00:47 2026 GMT
Not After : Mar 30 06:00:47 2026 GMT
Subject: CN=14c1a9e66206166eede3d628ad775e2dd2a37a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:f7:b5:d1:1f:49:bd:06:b7:79:f5:6d:09:
a3:95:8d:53:f0:b8:f0:ce:54:91:dd:7c:d7:0d:64:
23:8c:e7:e5:03:43:1f:e8:7e:10:da:ba:da:16:61:
6b:65:e3:99:18:3b:c6:7a:81:bb:4d:0d:ae:5e:7f:
1f:78:42:ca:cd:7b:e1:b2:35:e3:cf:23:b5:6b:76:
51:63:86:3c:b6:a8:1d:11:f8:53:1d:ea:3c:42:19:
3d:d6:ae:c2:af:83:45:44:9e:91:6e:f6:3e:8e:b2:
5d:aa:f4:d7:81:be:54:35:a6:db:a5:6e:d2:26:c2:
e0:6a:72:16:95:b5:1f:ef:b9:17:70:ba:54:7b:be:
59:d2:0a:47:84:d4:32:04:e8:11:ec:01:6a:7a:02:
ec:c5:c6:34:3b:e7:42:18:98:49:6f:2e:a5:16:03:
e5:28:a4:6b:41:31:24:e9:15:9e:83:cd:4b:b6:12:
ad:98:63:fc:ed:69:76:2b:03:95:b3:37:b6:25:8d:
10:67:e1:3d:66:25:13:c7:0b:76:df:8a:41:9b:24:
44:16:43:17:39:0c:be:89:41:d9:e4:d9:02:b8:f6:
b4:e8:2e:bb:5c:d0:07:83:c6:9c:22:fb:8b:98:75:
1b:02:8b:b5:15:6f:7b:2b:1d:42:19:72:90:9f:51:
35:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C1:A9:E6:62:06:16:6E:ED:E3:D6:28:AD:77:5E:2D:D2:A3:7A:15
X509v3 Authority Key Identifier:
keyid:15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a4:4c:ed:e4:d5:db:34:7a:a6:8a:89:85:d4:64:01:c9:bb:
1c:96:c9:62:d7:53:5f:96:c5:6d:44:45:67:5e:cb:ec:cf:d0:
1a:71:b7:5b:86:40:6b:e9:f6:e5:9b:1b:20:45:ca:ba:22:d5:
44:e9:9b:bf:10:f6:a8:9c:38:d2:3c:2b:8a:98:13:9a:50:09:
83:83:01:bc:07:5f:e0:92:9e:47:51:7e:97:4d:29:af:db:4b:
fb:c0:98:86:7b:ce:d0:48:d7:bc:68:8c:5d:3d:7a:85:f9:1a:
55:b1:88:21:9c:8b:ba:6a:2c:a8:94:a3:80:13:db:9f:1d:30:
81:94:b9:be:b8:c1:c5:2a:71:2a:42:1e:c5:15:13:fa:72:32:
92:2d:70:67:1b:e4:af:36:41:2e:78:5c:a5:c3:5f:e9:39:43:
f2:62:8b:d7:64:4d:43:fe:ef:45:b2:ab:0b:75:4f:1e:9f:9f:
8f:0b:86:a8:f1:4a:b8:9a:3c:15:f7:0d:89:80:27:e3:a3:cc:
9d:b3:39:23:d7:cb:39:9b:74:2b:10:46:8f:f3:24:4a:63:c9:
eb:7c:fb:ba:be:05:b3:07:11:35:ba:99:f2:f4:2b:d0:e7:2d:
6b:da:f4:3d:51:57:22:e0:47:43:21:85:06:65:99:e3:cf:85:
d6:f1:81:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:43 2026 by rpki-client