Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: 3t1Cj6LSk3rnRLcYmL7NqWD7Me/IV88TqyBhb87eNEc=
Subject key identifier: 24:DA:64:F1:38:E0:8C:FD:DA:8F:6B:0C:FE:23:A6:E8:76:53:77:FC
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 019D382E70C8B42033AEA262E9CF20E0A465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 1868
Signing time: Sun 29 Mar 2026 06:01:00 +0000
Manifest this update: Sun 29 Mar 2026 06:01:00 +0000
Manifest next update: Mon 30 Mar 2026 06:01:00 +0000
Files and hashes: 1: LJweqdiAuex5ffHJZ-p0UeT6XrY.asa (hash: qexPojaaUKUXJCAIdb2LuHOm0GKtKH2oA0dqsygCpWc=)
2: O7voTXfNHlJYLDFfFhD0IyP6RWQ.roa (hash: LffxuYhlhgmo9uurPfnZvk9c5Vb5QUT4U1yEBcpzUI0=)
3: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: H3s0esYdTWjA8TFiW/SQNsszqpZMjeCbJi6/j1/4Xcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:70:c8:b4:20:33:ae:a2:62:e9:cf:20:e0:a4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: Mar 29 06:01:00 2026 GMT
Not After : Mar 30 06:01:00 2026 GMT
Subject: CN=24da64f138e08cfdda8f6b0cfe23a6e8765377fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:94:85:b1:f3:c8:bd:04:22:ec:7c:94:0d:9e:
cb:7c:88:d8:db:8f:45:7e:c6:04:03:85:43:e5:40:
1d:23:e1:0d:e5:34:31:0d:e6:14:27:ab:de:4d:7f:
f4:6c:11:a0:85:0c:d9:14:ce:93:e8:c9:c8:4a:8e:
aa:b9:90:4e:cb:44:ae:8a:9d:4e:a6:c8:a5:96:2b:
91:c5:a3:1a:ae:e9:d4:b1:50:16:94:bf:18:e4:7d:
85:4f:39:dd:d6:a3:85:31:74:0b:c2:b8:83:93:fc:
4f:51:43:b9:28:84:a1:0b:78:44:e8:d1:36:32:57:
b1:03:39:8a:ba:40:51:8a:8e:3d:8c:c5:48:fa:9a:
a3:ad:d5:25:7c:97:18:df:71:86:d0:20:c1:54:cb:
9b:49:4c:cc:92:9c:ae:4c:a6:02:6b:03:cb:25:e4:
b7:99:9c:4b:97:96:30:08:e2:6f:a8:97:39:ff:7b:
e6:9e:9d:cf:55:fb:29:31:e8:09:66:ac:e6:a9:ec:
b8:dd:aa:b4:20:4d:c2:2f:c4:0e:ba:04:12:ee:ba:
eb:5c:13:f0:47:7d:d5:1c:98:99:60:7c:3e:35:91:
35:e0:0d:90:0f:78:60:2c:b4:df:e7:55:8c:b3:69:
cd:b9:ec:76:90:53:22:58:43:30:82:85:4e:06:86:
b4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DA:64:F1:38:E0:8C:FD:DA:8F:6B:0C:FE:23:A6:E8:76:53:77:FC
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:32:77:f3:8b:cf:2e:cc:52:aa:8c:b9:6b:d1:bc:7e:97:20:
28:f6:bf:0f:da:01:d5:b5:64:2b:ff:0a:65:e3:67:19:1b:51:
ed:cf:be:20:d1:ed:66:48:93:97:7b:a8:ac:4a:20:11:16:5c:
58:72:11:69:88:a6:14:7f:bc:70:b7:ee:76:b3:6d:a8:16:35:
a4:ad:ac:57:60:57:0a:ef:d3:98:de:fa:90:3d:8a:ba:77:5d:
c0:6d:53:0f:aa:2f:df:f4:75:44:7f:4e:42:79:67:d4:49:6e:
e4:a0:34:2e:7c:ac:08:08:06:e8:92:7a:19:28:b8:1c:a8:35:
23:06:67:4e:fb:95:ec:6a:fc:04:03:a7:c8:30:8d:34:e0:9c:
89:05:66:07:1c:b6:11:ca:47:85:cb:fa:78:f0:f1:48:28:64:
0d:c8:f8:bc:fd:6b:da:80:91:35:e1:6a:86:e0:26:5d:87:15:
a3:d6:ce:d1:19:ee:07:6a:2b:2b:d3:ec:e0:b5:04:86:6b:1b:
e2:76:db:f2:1f:6b:55:6d:9b:1c:be:0d:88:35:b2:4a:78:a7:
37:07:f7:8f:c0:d9:ee:e4:52:ad:7a:cc:8f:34:c4:90:7c:af:
91:4e:82:da:70:7d:51:4e:2c:e1:4e:6e:b8:d9:f1:13:ca:94:
61:1b:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:48 2026 by rpki-client