Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json)
Hash identifier: EIO0lmUUgD4D+Q20Gjb28wGJX+4h4AcTs+McouvGEC4=
Subject key identifier: D3:77:4B:0B:60:6E:B7:1F:D6:0D:0A:22:C3:B3:5B:63:54:92:5A:8C
Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252
Certificate serial: 019E3229AEB4A0A235C4A52A2AD2B1D5AF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
Manifest number: 02D2
Signing time: Sat 16 May 2026 19:00:52 +0000
Manifest this update: Sat 16 May 2026 19:00:52 +0000
Manifest next update: Sun 17 May 2026 19:00:52 +0000
Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: PLHfJzXAVJ4ff24na2bLCEtkNlPWJ8GidHNNfv5GKno=)
2: LaKgTWrQkobeVQ1YjLHD79ykJ5M.roa (hash: aWACl4kesdkEy6/Xa5+RkoBL499zzk7WgONY6WBsSTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:29:ae:b4:a0:a2:35:c4:a5:2a:2a:d2:b1:d5:af:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d409032818a628cd2b28383802d77e7494a252
Validity
Not Before: May 16 19:00:52 2026 GMT
Not After : May 17 19:00:52 2026 GMT
Subject: CN=d3774b0b606eb71fd60d0a22c3b35b6354925a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:5c:a4:7d:e9:6d:18:37:a1:21:c9:66:ab:
30:97:55:5d:27:bd:58:eb:25:dc:bd:34:bb:b0:90:
a4:d2:9f:b1:24:8a:ee:e3:db:df:0c:1b:46:f1:28:
d5:17:63:02:68:10:12:6f:57:f7:6f:28:2c:c7:cd:
9f:22:d8:58:0d:45:2c:2b:bd:9a:b6:4c:64:76:a3:
d6:2f:c8:75:c5:f0:d4:84:6d:0e:e4:66:63:d3:f7:
d0:f1:96:65:ea:d1:a5:07:ca:b4:f2:d8:a6:67:25:
43:1e:75:6a:44:2a:fa:ad:3b:f6:b2:fa:88:ee:99:
79:f6:99:e0:6d:ae:63:e9:5c:da:ea:50:92:49:c4:
59:38:d7:c2:3b:8d:e3:12:b6:44:72:34:9f:82:34:
dd:a7:a7:23:17:5a:73:43:96:93:c1:fc:32:7f:9c:
c3:44:a1:39:56:be:8e:6d:3a:b3:9f:d2:27:b8:0f:
6a:7b:b5:1f:d6:b7:62:bd:09:08:e6:25:b1:b2:2e:
9d:bd:6c:11:bc:3e:26:1d:48:69:66:b5:62:cf:08:
60:f1:1d:6d:c6:a4:d2:36:3a:ec:9f:4b:87:4f:0a:
67:79:96:3e:2d:84:b2:9a:b1:fe:e1:be:07:fc:3c:
e0:cc:21:7c:96:1d:8c:31:b9:b3:3d:e1:1d:87:4e:
9a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:77:4B:0B:60:6E:B7:1F:D6:0D:0A:22:C3:B3:5B:63:54:92:5A:8C
X509v3 Authority Key Identifier:
keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cc:8b:ca:eb:71:3a:33:be:f6:13:fd:58:b3:20:d5:13:7e:
a7:63:50:82:11:36:24:f2:8d:1c:1f:70:87:bf:80:23:5e:49:
4e:f1:f4:34:a6:20:6a:df:16:ef:d4:0d:3a:7e:c4:6a:24:bc:
72:79:01:d8:15:57:5a:50:99:b5:fa:cd:e6:7f:63:32:ea:ad:
90:79:93:91:bd:c4:16:91:fd:4d:50:e4:c3:04:d8:c0:d0:ba:
0f:46:70:12:de:d5:c2:29:33:76:e9:0d:6c:0a:cc:1a:1e:49:
6d:ac:58:86:29:45:8f:fc:8e:b3:e6:4c:66:5c:95:25:a8:83:
39:45:6a:68:66:89:2d:2d:f8:d5:3d:32:fb:27:3d:39:2c:24:
a7:09:c2:f2:f1:60:80:25:0d:05:11:a1:b0:1d:7d:e7:5e:9a:
8d:11:33:b5:bb:aa:8f:85:c3:4b:26:48:6a:bd:eb:4e:fb:15:
08:4e:7e:4a:f4:4a:6e:fa:0c:90:ce:17:ca:73:56:9a:a0:27:
81:ac:dc:db:1d:e3:22:97:15:e3:06:f9:bd:95:55:07:7a:bd:
44:e4:35:95:3a:77:21:f0:0a:c3:2c:b2:be:01:22:e3:bd:03:
b1:21:35:e7:91:2d:30:59:b0:13:1a:c9:5f:80:17:5e:8b:c9:
5a:5f:37:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yKa60oKI1xKUqKtKx1a+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZDQwOTAzMjgxOGE2MjhjZDJiMjgzODM4MDJkNzdlNzQ5
NGEyNTIwHhcNMjYwNTE2MTkwMDUyWhcNMjYwNTE3MTkwMDUyWjAzMTEwLwYDVQQD
EyhkMzc3NGIwYjYwNmViNzFmZDYwZDBhMjJjM2IzNWI2MzU0OTI1YThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjZcpH3pbRg3oSHJZqswl1VdJ71Y
6yXcvTS7sJCk0p+xJIru49vfDBtG8SjVF2MCaBASb1f3bygsx82fIthYDUUsK72a
tkxkdqPWL8h1xfDUhG0O5GZj0/fQ8ZZl6tGlB8q08timZyVDHnVqRCr6rTv2svqI
7pl59pngba5j6Vza6lCSScRZONfCO43jErZEcjSfgjTdp6cjF1pzQ5aTwfwyf5zD
RKE5Vr6ObTqzn9InuA9qe7Uf1rdivQkI5iWxsi6dvWwRvD4mHUhpZrVizwhg8R1t
xqTSNjrsn0uHTwpneZY+LYSymrH+4b4H/DzgzCF8lh2MMbmzPeEdh06aBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNN3Swtgbrcf1g0KIsOzW2NUklqMMB8GA1UdIwQY
MBaAFBbUCQMoGKYozSsoODgC1350lKJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMt
MGFlYjlkMzc3ODdlLzEvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMtMGFlYjlkMzc3ODdl
LzEvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcyLyutx
OjO+9hP9WLMg1RN+p2NQghE2JPKNHB9wh7+AI15JTvH0NKYgat8W79QNOn7EaiS8
cnkB2BVXWlCZtfrN5n9jMuqtkHmTkb3EFpH9TVDkwwTYwNC6D0ZwEt7VwikzdukN
bArMGh5JbaxYhilFj/yOs+ZMZlyVJaiDOUVqaGaJLS341T0y+yc9OSwkpwnC8vFg
gCUNBRGhsB19516ajREztbuqj4XDSyZIar3rTvsVCE5+SvRKbvoMkM4XynNWmqAn
gazc2x3jIpcV4wb5vZVVB3q9ROQ1lTp3IfAKwyyyvgEi470DsSE155EtMFmwExrJ
X4AXXovJWl83/A==
-----END CERTIFICATE-----
Generated at Sat May 16 21:13:35 2026 by rpki-client