Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/FtZXk-tLaeXqrTiwzMkWQlDK3Ag.mft
File: FtZXk-tLaeXqrTiwzMkWQlDK3Ag.mft (raw, json)
Hash identifier: 89ZX5YpwluYOoy2i2gCy+stzDs2hcHhNkzT+jDWqxGg=
Subject key identifier: 62:4A:0E:01:1E:C9:A2:2B:5C:61:4B:2B:8D:1F:23:7A:AE:7A:1C:15
Authority key identifier: 16:D6:57:93:EB:4B:69:E5:EA:AD:38:B0:CC:C9:16:42:50:CA:DC:08
Certificate issuer: /CN=16d65793eb4b69e5eaad38b0ccc9164250cadc08
Certificate serial: 01A14BABC4DF90FF430B5FB4E948A7C6D4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtZXk-tLaeXqrTiwzMkWQlDK3Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/FtZXk-tLaeXqrTiwzMkWQlDK3Ag.mft
Manifest number: 0125
Signing time: Sat 17 Oct 2026 21:01:50 +0000
Manifest this update: Sat 17 Oct 2026 21:01:50 +0000
Manifest next update: Sun 18 Oct 2026 21:01:50 +0000
Files and hashes: 1: FtZXk-tLaeXqrTiwzMkWQlDK3Ag.crl (hash: CwVobWCvdolHE5WjrJ0rjPwqoDR8lxmGbZ1z7BkWYrI=)
2: soD7oiq9Js0kRuxEGUTf1AdmB7Y.roa (hash: l5HeCAdoXvLzH7V1QLQqi9TBH1H5j9nGYhhyPq11KHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/FtZXk-tLaeXqrTiwzMkWQlDK3Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/FtZXk-tLaeXqrTiwzMkWQlDK3Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtZXk-tLaeXqrTiwzMkWQlDK3Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:ab:c4:df:90:ff:43:0b:5f:b4:e9:48:a7:c6:d4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d65793eb4b69e5eaad38b0ccc9164250cadc08
Validity
Not Before: Oct 17 21:01:50 2026 GMT
Not After : Oct 18 21:01:50 2026 GMT
Subject: CN=624a0e011ec9a22b5c614b2b8d1f237aae7a1c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:6f:cd:67:06:b4:3c:87:db:8d:52:a6:a9:
40:1c:1f:1a:c7:c1:ab:f8:07:28:b0:c3:f0:fc:17:
fb:f4:7b:d4:81:82:28:3a:8d:f4:1a:6c:22:a1:4a:
6f:6e:90:81:05:2d:5a:ca:6a:70:4e:3f:15:cc:87:
11:7b:47:bc:a1:c3:ed:a2:00:88:ca:2f:d2:c1:a9:
88:a4:76:18:1b:7d:cc:b6:45:4b:a3:09:24:a6:d2:
67:6a:ad:9b:29:0c:25:d9:5e:35:92:03:10:47:c6:
e1:7a:11:8e:66:03:66:e4:d2:cc:79:b8:7d:45:42:
39:c0:66:5b:8b:67:5f:95:88:a0:83:8b:5b:3e:6b:
e5:31:50:f2:dc:8b:40:8f:d9:89:08:59:7f:72:e7:
5e:77:24:ce:02:8a:e7:c2:61:e5:51:21:cf:85:ea:
51:24:ac:5c:71:05:9a:38:d8:a5:27:72:21:84:46:
6c:70:96:6b:84:ad:d8:2e:84:5f:19:03:df:14:f7:
4a:fe:60:b1:38:5f:95:f6:c6:98:8e:86:a1:58:22:
37:e2:78:45:a0:71:57:e4:80:0d:d6:c4:78:4d:bc:
e3:2f:3f:c0:fc:14:3f:03:f1:c9:9c:46:09:6b:74:
e8:7c:a9:3b:7d:7b:9d:23:59:eb:87:90:e4:2c:93:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4A:0E:01:1E:C9:A2:2B:5C:61:4B:2B:8D:1F:23:7A:AE:7A:1C:15
X509v3 Authority Key Identifier:
keyid:16:D6:57:93:EB:4B:69:E5:EA:AD:38:B0:CC:C9:16:42:50:CA:DC:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtZXk-tLaeXqrTiwzMkWQlDK3Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/FtZXk-tLaeXqrTiwzMkWQlDK3Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/FtZXk-tLaeXqrTiwzMkWQlDK3Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f6:96:86:7a:09:16:a4:ce:a0:e6:c6:a4:b6:f3:90:a7:72:
bc:e1:38:2a:20:1e:67:06:0e:17:23:a7:ca:22:81:0f:5b:d3:
d0:62:c8:22:75:d7:81:ce:4a:73:13:91:9e:2a:a5:27:d6:8f:
61:7a:52:28:6e:ba:cd:f8:49:f3:63:51:bc:6b:a1:dd:5f:80:
d9:90:0d:8d:7e:98:61:15:63:bf:56:d7:62:25:a0:02:12:7b:
3f:6c:72:84:1d:b4:0f:9c:ab:06:ae:dd:d0:5a:b6:7e:d6:2c:
00:42:81:40:87:c6:f2:a7:ee:84:38:63:2d:06:46:ca:2c:2b:
24:dc:76:64:3a:51:c5:28:f6:59:8f:be:30:6e:48:4a:a5:08:
5e:ff:a2:30:d8:a8:64:88:aa:5a:4d:3d:bf:d9:01:c8:10:9c:
61:f5:56:3a:80:74:a3:cf:d1:ac:ad:68:55:7e:b4:df:7a:e5:
8a:22:23:54:ac:85:15:ef:87:d0:b7:76:cb:c2:60:73:c1:66:
47:c0:10:94:29:21:80:fe:c6:b2:77:c3:db:e7:b8:95:2c:d7:
c8:b4:17:1e:1d:49:e9:23:f9:a7:b7:67:28:9a:d1:6a:c3:ff:
50:0c:8a:16:68:71:87:df:59:14:88:1c:c0:bd:b8:68:26:41:
01:ec:90:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:48:29 2026 by rpki-client