Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json)
Hash identifier: V/SBS8m9q3uXhwIplnM/QhJCflfKRIVAHpiwiMbKKOY=
Subject key identifier: 78:45:A0:2F:8C:12:B5:FA:7C:F6:3D:E7:7A:C6:29:D1:9C:69:3B:D4
Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252
Certificate serial: 019F19E7B6C48843E3452C61FCD8CFCC0310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
Manifest number: 034A
Signing time: Tue 30 Jun 2026 19:00:43 +0000
Manifest this update: Tue 30 Jun 2026 19:00:43 +0000
Manifest next update: Wed 01 Jul 2026 19:00:43 +0000
Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: 2TzBnmp+vuLQrYy+bh+uZiOym+Ox4+9xa6o+7NndH08=)
2: LaKgTWrQkobeVQ1YjLHD79ykJ5M.roa (hash: aWACl4kesdkEy6/Xa5+RkoBL499zzk7WgONY6WBsSTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:e7:b6:c4:88:43:e3:45:2c:61:fc:d8:cf:cc:03:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d409032818a628cd2b28383802d77e7494a252
Validity
Not Before: Jun 30 19:00:43 2026 GMT
Not After : Jul 1 19:00:43 2026 GMT
Subject: CN=7845a02f8c12b5fa7cf63de77ac629d19c693bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:d9:9d:0c:2d:97:d6:29:a0:db:9d:64:74:
41:81:6f:3f:7c:a3:c3:34:1d:0e:b7:93:a0:cb:35:
b0:24:09:ad:ea:00:b1:8e:d1:6a:36:32:c1:d1:50:
ce:f5:f6:68:49:bd:aa:8d:09:2b:ed:ac:d7:cf:dd:
e8:d8:bd:29:8c:e8:47:8e:36:0c:d2:d7:dc:de:44:
2c:b6:1c:a9:4b:fa:65:4c:b5:e0:b1:1f:34:3c:0b:
83:1e:92:eb:1c:a2:ed:72:48:fd:94:1d:ac:d1:7f:
a3:ef:f7:52:c5:61:c3:d1:cc:38:31:3d:d8:10:da:
de:f1:2f:49:a8:85:a7:58:77:74:29:55:56:9a:46:
27:a3:9a:a0:c4:95:4c:43:64:10:05:d7:09:2d:45:
73:dd:e1:fd:09:ce:5b:7c:24:f2:a2:6d:3b:bd:29:
49:1e:86:82:e9:4c:77:96:65:d0:37:79:fd:9e:05:
36:0b:98:00:bd:c7:eb:33:d1:e3:19:b5:db:d0:c6:
ad:5a:eb:11:31:3f:6d:4a:05:a8:d4:21:ef:46:62:
cf:84:05:5f:d9:03:01:52:fa:45:24:e7:12:6f:8a:
49:07:72:30:e8:d5:ca:5a:62:d9:ac:69:be:a1:e9:
ae:e0:d6:c0:15:80:c7:14:af:85:d5:a4:18:6f:68:
bd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:45:A0:2F:8C:12:B5:FA:7C:F6:3D:E7:7A:C6:29:D1:9C:69:3B:D4
X509v3 Authority Key Identifier:
keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ab:da:2d:40:2f:e4:83:9d:ef:2e:bf:54:89:9d:ef:90:53:
62:fb:c7:2f:05:0b:4e:09:74:12:8f:0f:21:94:a7:3c:e8:c5:
a0:fe:9e:18:28:ef:62:72:b2:c1:a5:c4:90:7b:68:c8:99:6f:
46:b1:c5:bb:a6:8d:9f:ef:f8:6c:7f:a5:1d:ae:02:4e:0f:94:
f0:7b:de:60:5b:b8:59:59:ca:6f:54:09:19:05:31:bb:ed:40:
45:a9:47:dd:3a:62:d3:8e:f2:7b:09:80:2a:d1:b6:10:36:06:
06:22:86:cd:30:f3:46:2c:04:92:a0:4b:d8:77:41:8f:eb:22:
8e:b3:1c:c7:92:7a:56:60:be:3c:6a:68:a3:d7:c1:5c:71:f1:
70:65:f7:0f:be:17:3b:f6:d5:1d:d6:58:d3:25:f3:58:29:36:
d5:3e:1f:d1:85:39:a5:b7:e6:54:e5:14:b4:b9:87:5a:e2:30:
06:62:f1:74:79:84:11:8b:01:6c:f4:6f:96:3a:74:c8:ee:27:
6d:f4:dc:2d:a4:cb:28:bc:e9:94:e5:e4:fa:f0:45:0d:fb:7d:
f7:f6:c7:6b:26:31:a1:1b:bf:28:21:d0:06:87:b4:03:e2:14:
42:ac:c8:5b:58:ad:34:22:6e:81:2d:d9:68:a9:76:03:3b:78:
06:7d:fe:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:35 2026 by rpki-client