Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
File: FTtGcCg5p5W6uo2NFezcymN-M2w.mft (raw, json)
Hash identifier: edq9+4IOThnv/nrDaBdJ0fMW2MgHP1ShQkjKjVaQatg=
Subject key identifier: AF:C9:2B:86:E1:04:0C:97:65:22:AB:A3:C6:73:71:B5:1B:79:74:41
Authority key identifier: 15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
Certificate issuer: /CN=153b46702839a795baba8d8d15ecdcca637e336c
Certificate serial: 019D3865AD987B919C617DB334263D1E8588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:20 +0000
Manifest this update: Sun 29 Mar 2026 07:01:20 +0000
Manifest next update: Mon 30 Mar 2026 07:01:20 +0000
Files and hashes: 1: 60Yzg5ovYbhNZtsG87V10o4lft0.roa (hash: pwf3Cr849YIF4wTPFp3jPWoUW71SDRP921dWjmbB0ls=)
2: FTtGcCg5p5W6uo2NFezcymN-M2w.crl (hash: Q1UdbTFdw7AiIr/2BJhkN0Hd0A1XkUMdKs58ZO2G9cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ad:98:7b:91:9c:61:7d:b3:34:26:3d:1e:85:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153b46702839a795baba8d8d15ecdcca637e336c
Validity
Not Before: Mar 29 07:01:20 2026 GMT
Not After : Mar 30 07:01:20 2026 GMT
Subject: CN=afc92b86e1040c976522aba3c67371b51b797441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:66:5a:39:33:9d:90:4c:2a:ee:25:63:de:
fc:0c:ef:7f:de:24:c1:60:2b:1c:74:a4:0d:d2:2a:
d2:ea:22:a4:3d:7c:0b:f4:4b:ff:0a:44:81:fb:d2:
12:d1:d7:2b:4e:a7:71:72:d1:05:8c:e6:ee:44:dc:
ac:10:51:39:d1:59:33:01:3c:93:6a:de:86:ea:64:
90:49:04:0f:2b:5c:7f:66:00:3e:73:04:2b:4d:61:
15:d9:65:bd:04:9d:71:58:b3:db:4d:20:af:77:86:
c8:a2:e3:66:0e:02:7d:65:70:ae:37:98:4f:4f:85:
cb:ef:15:e1:26:ed:49:06:70:38:2f:84:82:0f:38:
3b:9c:9c:3a:ea:52:3a:87:eb:d9:39:82:f9:7c:c5:
4b:52:ac:05:4b:33:d7:40:20:93:40:a6:c6:c0:41:
25:e4:02:c2:ae:5f:b1:3b:7c:a7:11:78:a0:31:70:
52:fb:82:68:1e:9e:81:a2:d9:d6:6c:44:ff:bf:50:
57:b7:eb:41:43:ea:99:8c:3c:a1:90:bc:89:75:6e:
a4:fa:42:c9:9a:7f:a7:a0:21:99:f0:87:1f:97:1f:
e5:bb:aa:e9:ae:62:12:37:bd:df:ca:f6:92:39:f7:
14:98:19:de:6a:b4:f3:61:e8:2c:ff:36:0e:98:9d:
3b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C9:2B:86:E1:04:0C:97:65:22:AB:A3:C6:73:71:B5:1B:79:74:41
X509v3 Authority Key Identifier:
keyid:15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7a:0e:2e:25:41:5a:27:d6:88:17:34:65:0c:ac:96:3d:a9:
73:43:43:b9:ca:39:b2:5c:14:43:20:ae:41:f1:33:05:56:c3:
b0:7b:1d:cd:68:05:08:2a:5e:83:1c:fa:a1:82:e4:7c:fb:7e:
92:65:7e:d1:12:9e:77:44:3f:70:87:cc:57:5c:0e:6a:fa:68:
4b:ac:b2:66:6d:57:51:9f:e5:40:88:e1:6d:73:2b:1a:67:ec:
1e:90:32:0e:2b:c8:01:28:0b:51:e3:f2:17:73:6f:c0:42:d4:
b1:cd:f5:6d:16:5a:68:e5:1f:44:be:b3:00:63:03:16:5a:91:
8d:63:cb:36:25:52:b1:5d:6b:51:fe:b8:13:04:9c:e1:62:e8:
0c:85:a7:26:4d:aa:7a:3b:46:ff:d3:95:11:88:b7:ca:28:63:
31:2d:a0:d5:07:99:7c:67:70:4a:39:bb:84:07:05:c4:4c:d5:
9f:ae:01:b3:a5:05:8d:d7:77:c9:d5:25:69:dd:30:5c:c3:27:
8c:1f:4b:ed:88:2e:73:20:78:a1:14:64:b9:70:3b:6f:b8:72:
5b:1b:9b:ed:72:34:5a:8a:06:84:9d:ef:64:2f:61:66:1b:89:
72:eb:6b:eb:1a:2c:aa:13:69:fb:7a:3e:88:db:5b:d1:f6:24:
6b:72:6c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:20 2026 by rpki-client