Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: pAeaBy8oYeZtpcwMQzUxTHS9BweosBgxjxcN3s/Z2Cw=
Subject key identifier: C8:1A:13:B0:0C:90:EE:35:97:24:51:CC:5E:F3:2C:F6:3C:BF:DA:AC
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 019E299486A47EB619D1E539C0E429659667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 18E5
Signing time: Fri 15 May 2026 03:00:59 +0000
Manifest this update: Fri 15 May 2026 03:00:59 +0000
Manifest next update: Sat 16 May 2026 03:00:59 +0000
Files and hashes: 1: LJweqdiAuex5ffHJZ-p0UeT6XrY.asa (hash: qexPojaaUKUXJCAIdb2LuHOm0GKtKH2oA0dqsygCpWc=)
2: O7voTXfNHlJYLDFfFhD0IyP6RWQ.roa (hash: LffxuYhlhgmo9uurPfnZvk9c5Vb5QUT4U1yEBcpzUI0=)
3: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: meCUBOMVmtMF+2ug15nb3l+NcJadNXIfg0q05suU49A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:86:a4:7e:b6:19:d1:e5:39:c0:e4:29:65:96:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: May 15 03:00:59 2026 GMT
Not After : May 16 03:00:59 2026 GMT
Subject: CN=c81a13b00c90ee35972451cc5ef32cf63cbfdaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:c7:e8:21:d4:a4:ae:e6:48:e7:af:01:c9:
b0:b0:5d:35:dd:55:a8:a0:22:52:03:d7:a1:08:25:
ff:82:2e:bb:df:97:b8:63:96:13:79:17:54:3a:c7:
98:58:44:45:f1:22:1f:64:ff:61:05:3f:fc:2f:7b:
b5:07:d4:07:03:40:8e:00:dc:1b:f7:bd:37:fa:55:
d3:5b:9a:ff:6e:c1:6c:74:32:48:e1:60:3e:cd:77:
59:aa:b2:d5:82:eb:c7:5e:e0:ce:93:ef:c6:02:fd:
dd:88:08:db:9e:f7:c9:23:39:84:f2:97:42:0a:84:
ef:c4:21:a2:a3:94:7e:d5:f0:1d:0d:78:38:e2:14:
18:85:3a:3c:74:26:1f:bf:7f:15:74:e6:f5:af:d1:
87:08:31:ad:34:3c:5c:94:64:63:31:f2:50:60:df:
e5:0a:d9:e1:b6:82:1b:cf:dc:d0:32:e8:54:6f:70:
a2:82:be:f2:4e:fe:c3:f9:32:0a:c9:53:75:c2:a4:
97:11:13:ea:11:c5:4f:db:18:71:da:87:ed:ea:f9:
0b:1b:da:e6:27:54:04:69:0a:16:fc:0b:56:1f:c3:
db:74:f9:10:e7:aa:a2:de:cb:c7:ba:1f:97:0d:06:
e4:ca:03:71:a7:13:7e:94:ce:b7:d9:28:72:93:67:
83:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1A:13:B0:0C:90:EE:35:97:24:51:CC:5E:F3:2C:F6:3C:BF:DA:AC
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:79:3d:f9:db:da:fc:8b:3c:73:e3:5e:cb:74:fb:70:e4:f0:
32:db:b0:bd:f1:3d:fa:1c:4f:48:cb:9a:26:84:37:32:0f:19:
42:b6:d2:fa:05:12:38:39:a0:f9:e8:93:e3:92:8f:2a:d6:c2:
1e:c0:38:1d:44:09:4a:f5:8a:66:ab:f2:8b:56:af:b7:dc:8c:
a1:d2:11:ed:66:b3:b3:31:3f:84:52:a5:4e:21:ec:01:7e:22:
2b:bf:fc:1b:e4:6c:8b:5a:5d:d2:a7:53:f5:ce:90:13:16:21:
3e:97:4b:8e:e4:2d:ed:9d:fc:06:cc:b4:32:54:96:24:90:30:
48:e2:b4:95:9b:b7:7d:cb:94:1f:11:76:57:f6:98:6b:12:32:
e9:82:cd:da:8f:d1:6c:a9:94:d1:26:23:34:14:11:71:e6:fd:
df:7d:17:7f:e0:6a:74:bd:ad:b2:55:43:ca:a8:1a:6c:ae:d6:
4f:54:c8:98:b5:20:71:30:10:9b:90:7b:6f:8d:c4:26:7c:88:
af:68:d0:c3:d3:34:4f:c3:d6:c6:a7:77:49:f5:6e:9f:d3:5f:
b9:55:45:a9:1d:83:26:8f:05:b2:b8:4c:28:2a:0e:f9:d1:fe:
df:3a:52:2c:b7:5c:06:a1:45:c3:80:22:52:62:ef:0f:b8:0c:
e2:41:4c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:02:30 2026 by rpki-client