Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json)
Hash identifier: FcZP/VZsmvOsaeXEHp97Ob3PG0wEPNNxEUmUYU4Qhs0=
Subject key identifier: E1:DE:0D:C8:75:73:48:99:7A:4C:F5:9D:20:DC:E4:26:34:CD:28:20
Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252
Certificate serial: 01A123537B5BF547F01B47869A7074B6049E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
Manifest number: 0458
Signing time: Sat 10 Oct 2026 01:00:35 +0000
Manifest this update: Sat 10 Oct 2026 01:00:35 +0000
Manifest next update: Sun 11 Oct 2026 01:00:35 +0000
Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: GGdCu2dcUqfXCcVYTr8Lq+NDftzWUJCwoP0Fznv+IMc=)
2: LaKgTWrQkobeVQ1YjLHD79ykJ5M.roa (hash: aWACl4kesdkEy6/Xa5+RkoBL499zzk7WgONY6WBsSTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:53:7b:5b:f5:47:f0:1b:47:86:9a:70:74:b6:04:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d409032818a628cd2b28383802d77e7494a252
Validity
Not Before: Oct 10 01:00:35 2026 GMT
Not After : Oct 11 01:00:35 2026 GMT
Subject: CN=e1de0dc8757348997a4cf59d20dce42634cd2820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8a:26:47:64:77:cd:76:20:56:bf:da:71:9d:
c9:ce:3b:96:ef:f8:2d:db:4a:61:8a:09:59:d0:00:
29:29:39:73:64:d1:05:e4:02:16:7b:b3:bb:7d:e8:
9a:b3:35:e1:3e:f0:dd:fc:59:96:1a:56:39:02:e6:
c8:57:a7:55:83:a7:75:86:d8:d6:d0:30:36:fc:0f:
a1:87:66:6a:ea:0c:a1:10:82:2b:68:7a:d9:ed:eb:
fd:ef:8e:70:70:06:03:cb:d2:6e:25:00:56:d3:54:
1a:35:eb:71:8d:28:f4:fa:c4:fe:6f:60:d9:ca:52:
14:4f:71:49:45:f2:bb:73:ca:b7:b4:e7:d4:99:64:
fe:5a:ed:83:c5:d9:d1:7b:90:42:9f:e0:66:74:57:
85:d7:45:05:c3:55:7b:bc:dc:6c:86:38:d1:3f:22:
b7:c7:04:cf:8d:ec:c5:ab:c9:72:7d:be:7b:30:f8:
09:d2:56:0c:84:8b:d5:4a:34:49:b6:ae:e4:5f:f7:
82:d2:f4:90:f5:ae:b4:e5:14:9b:c3:ba:48:cd:ff:
39:82:70:77:79:e4:84:1c:03:63:35:f7:12:d0:7c:
ba:c9:d8:d0:a2:47:2a:f9:f2:d4:fa:73:67:73:ec:
6f:01:da:7a:63:14:6d:5d:c1:fe:ad:ed:37:61:59:
61:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DE:0D:C8:75:73:48:99:7A:4C:F5:9D:20:DC:E4:26:34:CD:28:20
X509v3 Authority Key Identifier:
keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3c:73:fc:87:54:67:f6:31:05:0f:79:47:d2:1c:d9:e8:e7:
67:b1:fa:60:36:ab:4a:6f:31:79:ff:e2:57:9e:74:17:74:da:
3b:75:ba:63:d2:1b:c8:29:6a:dd:cd:2c:c3:5e:3e:20:ce:cf:
6a:89:f6:72:49:72:c0:57:68:f1:33:8a:67:07:91:40:ff:71:
a3:4b:03:e8:b1:b5:16:52:17:cd:19:62:15:47:07:8d:b8:00:
6d:94:c3:e8:6f:33:1d:ce:7a:92:85:3b:dd:d5:c0:7e:9a:61:
76:f5:38:2e:e1:c7:1f:64:23:67:b7:1c:b2:e1:b5:ba:51:89:
cc:56:f3:7f:09:20:6c:cc:ad:95:dc:51:82:20:91:c3:7a:f0:
90:53:dd:2d:8c:7b:3d:33:09:99:a1:16:18:0f:83:62:53:ef:
c6:1d:6b:d0:c0:06:6d:84:13:d5:ef:b8:ec:93:da:66:8a:3e:
5a:ff:fb:aa:f0:a8:af:34:d7:99:21:8e:95:8d:a7:e5:6f:ca:
93:bf:69:5f:1d:d4:9f:41:eb:c8:b7:7f:bc:ff:89:a2:25:00:
dc:32:f3:7c:ff:de:a5:f4:e5:a6:a2:ce:31:eb:6d:25:85:1f:
cc:9c:31:dd:4e:29:98:52:01:0c:ed:43:a6:36:00:35:40:1c:
68:65:4e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:13:02 2026 by rpki-client