Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json)
Hash identifier: lqhPH4LkcrnSdVz353O/BeY7ywCz6NBgh2wi64a5CW0=
Subject key identifier: FC:40:F1:38:C8:2E:3C:55:11:99:DB:24:F6:4D:7E:31:0E:F9:BF:7D
Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252
Certificate serial: 019D3909B5732CFDAD378AFCFBAA77FB4924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
Manifest number: 0251
Signing time: Sun 29 Mar 2026 10:00:30 +0000
Manifest this update: Sun 29 Mar 2026 10:00:30 +0000
Manifest next update: Mon 30 Mar 2026 10:00:30 +0000
Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: P1IYvvNwiu2cxvOwyjJLAILXUuANbxSh6+IVennaCZk=)
2: LaKgTWrQkobeVQ1YjLHD79ykJ5M.roa (hash: aWACl4kesdkEy6/Xa5+RkoBL499zzk7WgONY6WBsSTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b5:73:2c:fd:ad:37:8a:fc:fb:aa:77:fb:49:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d409032818a628cd2b28383802d77e7494a252
Validity
Not Before: Mar 29 10:00:30 2026 GMT
Not After : Mar 30 10:00:30 2026 GMT
Subject: CN=fc40f138c82e3c551199db24f64d7e310ef9bf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:69:1c:5d:95:7e:af:10:88:5a:7a:3a:3a:ca:
34:04:40:68:c1:23:62:69:23:cf:be:a8:bf:e9:58:
11:2c:f2:42:dc:e1:5f:52:b6:e5:81:7e:80:f3:b4:
12:fa:d5:8a:fc:04:57:78:37:2a:58:60:f1:32:74:
83:0d:2f:41:e5:15:5b:40:7a:30:37:9c:41:d7:e3:
c8:ed:f3:d7:fe:3f:2e:20:b6:6a:74:43:6b:40:23:
9f:70:8b:a3:d4:cb:40:1e:29:92:72:74:83:6f:4f:
76:83:11:96:6f:e6:ad:72:b0:72:82:67:0c:7a:ad:
1f:b4:ef:e1:4b:fc:b7:55:d8:ba:a5:1a:be:6e:11:
9d:04:da:ba:74:74:12:80:18:09:80:f7:38:58:a4:
54:8b:e2:38:83:27:2f:88:4b:df:83:a3:fb:67:bb:
97:78:13:f8:13:b2:72:02:f7:e5:f8:8f:60:8a:21:
5b:e1:65:8f:1f:7f:82:94:4c:26:0f:a9:8c:35:d2:
2a:7a:43:7a:29:e4:84:cb:43:3b:e3:30:e0:da:f1:
6e:ed:b2:29:f2:f1:ef:0b:3d:70:5a:39:f2:d0:db:
31:a8:5b:20:c5:3f:67:c3:11:d4:4c:d0:12:4c:03:
08:a2:e1:6a:90:5c:f9:1f:11:c9:c9:1a:54:b2:4a:
c3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:40:F1:38:C8:2E:3C:55:11:99:DB:24:F6:4D:7E:31:0E:F9:BF:7D
X509v3 Authority Key Identifier:
keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:50:f1:9a:14:89:aa:11:58:bd:74:ae:51:13:4c:8a:90:26:
0d:c4:66:b9:47:ee:16:f0:85:e6:73:d0:0d:d4:21:2f:d9:7b:
08:b5:a1:65:af:2c:4e:93:2f:ea:7a:8e:10:40:c5:87:9f:88:
66:5b:6c:7f:ae:8a:7c:0f:38:ce:a1:0d:50:74:7b:5f:79:30:
d1:97:e9:26:5d:68:b3:04:ac:7a:fa:58:4d:e4:5e:ea:64:07:
66:e8:80:53:79:0e:73:00:6d:7a:62:6c:d8:e5:12:dd:a3:80:
ed:87:ae:ee:b8:70:94:53:b6:f2:7d:b7:ba:f4:d5:e5:60:b6:
b7:91:cf:0f:ef:cf:52:09:1b:55:c0:23:be:13:84:e3:b2:b9:
1c:c1:9e:fa:f6:e6:62:90:1c:89:07:2f:9d:c6:46:be:ab:ce:
3d:90:12:2d:36:3f:a6:b7:88:83:34:da:d6:21:fc:55:aa:b7:
8a:75:54:d5:30:d7:4c:1d:63:07:6f:45:4c:04:0b:51:fe:bb:
88:01:6e:27:7e:c7:05:73:71:9d:36:c2:90:ef:63:c8:d7:ab:
8f:1c:3b:5b:bb:33:9d:37:21:f2:dc:f9:a4:72:36:96:15:22:
a7:fd:b3:67:f8:ec:3b:5e:a0:93:0f:3d:0f:39:02:ee:17:16:
7b:2e:41:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:44 2026 by rpki-client