Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft
File: ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft (raw, json)
Hash identifier: BcIF4Z5XRyau+//7MEX2WRCUvDuXMNd1dPlkTWyc3HI=
Subject key identifier: 2F:69:F7:AC:F3:31:2F:1A:C3:A0:41:1A:9E:23:D9:BC:34:46:48:96
Authority key identifier: 7E:DB:F8:3A:FF:43:45:12:C5:03:71:2F:22:29:16:02:F5:5B:FF:48
Certificate issuer: /CN=7edbf83aff434512c503712f22291602f55bff48
Certificate serial: 019EB76A5B150A52DA9874D6B44DB519D69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft
Manifest number: 18E9
Signing time: Thu 11 Jun 2026 16:01:01 +0000
Manifest this update: Thu 11 Jun 2026 16:01:01 +0000
Manifest next update: Fri 12 Jun 2026 16:01:01 +0000
Files and hashes: 1: ftv4Ov9DRRLFA3EvIikWAvVb_0g.crl (hash: FTO0egOFltnytXkssrGAvVxe8xFDPToOHdwtFGqtM00=)
2: z4ZmrsMi4rffTSSj7sG9KUI2RbI.roa (hash: Mu3/esgK0X5k7pGlanJsUxVxpFzxsfzlGM/QwNB28fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:5b:15:0a:52:da:98:74:d6:b4:4d:b5:19:d6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7edbf83aff434512c503712f22291602f55bff48
Validity
Not Before: Jun 11 16:01:01 2026 GMT
Not After : Jun 12 16:01:01 2026 GMT
Subject: CN=2f69f7acf3312f1ac3a0411a9e23d9bc34464896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:01:6e:14:7b:c5:82:1c:da:09:b5:94:a1:
0b:c4:4a:5d:3f:cc:df:05:c4:9f:fd:54:7b:d4:f5:
70:ff:86:66:b6:f2:5a:39:02:c6:ac:d9:bb:db:ce:
44:d9:28:26:70:08:29:3d:42:44:cd:cc:bc:ca:6f:
d0:d4:39:a8:50:58:15:e4:76:aa:cb:78:bb:13:5b:
2f:b0:6c:89:e5:8e:7c:ab:b1:e8:75:69:01:f9:15:
2c:f8:e5:87:54:59:33:5d:20:41:62:e7:13:e6:a0:
81:85:71:26:fc:99:2a:37:83:e2:75:b5:55:8e:7f:
2a:17:bb:65:2b:fd:28:b8:ec:51:62:5b:eb:34:f5:
77:ca:3f:e8:d0:6a:a6:56:82:b3:c7:cd:ee:bd:c7:
6a:98:fb:bf:d4:25:00:8f:24:e9:0a:cb:d8:66:55:
01:94:9d:15:5d:f4:6e:f3:ee:e1:7b:a4:7f:6c:75:
27:20:5e:48:03:d1:4b:a3:ec:9c:a2:d3:b6:df:fc:
83:ac:27:0b:90:c4:98:6e:e1:55:55:fc:02:2f:44:
2a:40:3e:f7:0f:7b:4c:79:7d:cf:6d:2d:07:f2:94:
32:e5:a1:20:dd:7a:5c:98:49:cb:48:be:e9:5d:b1:
e3:af:6e:9a:0f:34:19:3d:2b:89:3c:43:46:76:bc:
b1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:69:F7:AC:F3:31:2F:1A:C3:A0:41:1A:9E:23:D9:BC:34:46:48:96
X509v3 Authority Key Identifier:
keyid:7E:DB:F8:3A:FF:43:45:12:C5:03:71:2F:22:29:16:02:F5:5B:FF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bb:12:11:1a:f9:69:98:7a:11:14:39:c2:c3:1c:8c:a0:48:
91:91:0e:7f:df:8c:1b:2f:13:04:ca:42:f6:e8:1d:c1:d9:da:
a5:68:ea:10:80:b6:46:5c:67:44:10:e5:5f:0a:6b:ab:9a:a4:
d0:02:fb:ef:39:8d:b7:62:25:3c:b6:8c:9f:9a:1c:e4:ef:25:
bc:07:c4:a0:91:d5:ec:ba:60:72:fb:66:48:36:d3:be:eb:e4:
5c:e5:37:08:b2:46:5d:41:a9:e3:02:31:c1:e8:82:9f:56:d3:
cc:e1:58:0c:14:78:a6:eb:18:d7:ca:fd:dc:30:32:6f:f1:c8:
ff:14:3c:eb:e8:b4:62:7f:3e:5a:c8:d0:48:d8:a1:57:2f:38:
c4:82:22:ab:82:41:6c:75:ba:73:b1:2b:d4:cf:03:15:7d:95:
e3:d7:fb:fb:e4:58:46:c7:93:a4:fa:d0:40:77:13:3a:98:ab:
fd:ab:a4:6a:15:74:1e:29:be:ca:37:84:43:26:f2:a7:95:81:
c4:66:a9:9c:05:86:76:dd:a7:94:c3:a3:59:77:4f:84:86:34:
27:94:dd:18:16:dd:e4:a8:39:a7:5b:8d:52:fd:98:f2:6e:43:
d1:73:0f:5c:7c:5a:24:9d:bc:96:4c:89:3c:2b:6d:53:30:87:
53:02:e3:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63alsVClLamHTWtE21GdaeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZGJmODNhZmY0MzQ1MTJjNTAzNzEyZjIyMjkxNjAyZjU1
YmZmNDgwHhcNMjYwNjExMTYwMTAxWhcNMjYwNjEyMTYwMTAxWjAzMTEwLwYDVQQD
EygyZjY5ZjdhY2YzMzEyZjFhYzNhMDQxMWE5ZTIzZDliYzM0NDY0ODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7MBbhR7xYIc2gm1lKELxEpdP8zf
BcSf/VR71PVw/4ZmtvJaOQLGrNm7285E2SgmcAgpPUJEzcy8ym/Q1DmoUFgV5Haq
y3i7E1svsGyJ5Y58q7HodWkB+RUs+OWHVFkzXSBBYucT5qCBhXEm/JkqN4PidbVV
jn8qF7tlK/0ouOxRYlvrNPV3yj/o0GqmVoKzx83uvcdqmPu/1CUAjyTpCsvYZlUB
lJ0VXfRu8+7he6R/bHUnIF5IA9FLo+ycotO23/yDrCcLkMSYbuFVVfwCL0QqQD73
D3tMeX3PbS0H8pQy5aEg3XpcmEnLSL7pXbHjr26aDzQZPSuJPENGdryxuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9p96zzMS8aw6BBGp4j2bw0RkiWMB8GA1UdIwQY
MBaAFH7b+Dr/Q0USxQNxLyIpFgL1W/9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnR2NE92OURSUkxGQTNFdklpa1dBdlZiXzBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zNjE1YjEtNzNhOS00YzNlLWFhZDEt
MDMzNWQxYTc0OGZjLzEvZnR2NE92OURSUkxGQTNFdklpa1dBdlZiXzBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8zNjE1YjEtNzNhOS00YzNlLWFhZDEtMDMzNWQxYTc0OGZj
LzEvZnR2NE92OURSUkxGQTNFdklpa1dBdlZiXzBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrsSERr5
aZh6ERQ5wsMcjKBIkZEOf9+MGy8TBMpC9ugdwdnapWjqEIC2RlxnRBDlXwprq5qk
0AL77zmNt2IlPLaMn5oc5O8lvAfEoJHV7LpgcvtmSDbTvuvkXOU3CLJGXUGp4wIx
weiCn1bTzOFYDBR4pusY18r93DAyb/HI/xQ86+i0Yn8+WsjQSNihVy84xIIiq4JB
bHW6c7Er1M8DFX2V49f7++RYRseTpPrQQHcTOpir/aukahV0Him+yjeEQybyp5WB
xGapnAWGdt2nlMOjWXdPhIY0J5TdGBbd5Kg5p1uNUv2Y8m5D0XMPXHxaJJ28lkyJ
PCttUzCHUwLjEQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:49 2026 by rpki-client