Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
File: FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json)
Hash identifier: /6bRy9fT+UjBuca3r+4CwY0ridwcNMAFguuwDIYo4J4=
Subject key identifier: 7C:39:86:9C:F5:89:EA:D4:00:89:B1:21:E3:FE:95:DF:53:6A:90:D9
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial: 019E9C9835A923054F9846E13DEA3E2F4DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
Manifest number: 0A43
Signing time: Sat 06 Jun 2026 11:01:21 +0000
Manifest this update: Sat 06 Jun 2026 11:01:21 +0000
Manifest next update: Sun 07 Jun 2026 11:01:21 +0000
Files and hashes: 1: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: j467FEJWp+FIlcMvE+YBXvqlreRZQWAVq1bfmU64pw4=)
2: dmlQS2Sd9qDd919b9z3NpsKBzf4.roa (hash: cTIEAwkFVrrLFFu6MkzuxguAlzRRpHYYKaiTprN0Urw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:98:35:a9:23:05:4f:98:46:e1:3d:ea:3e:2f:4d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153f24183d6c95185919349e6e92533736437b94
Validity
Not Before: Jun 6 11:01:21 2026 GMT
Not After : Jun 7 11:01:21 2026 GMT
Subject: CN=7c39869cf589ead40089b121e3fe95df536a90d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:88:80:9f:92:68:6c:3b:95:90:18:6e:b3:1f:
09:a5:4c:98:08:00:8d:83:92:7d:05:de:04:25:a1:
ee:e1:e3:cb:f7:06:9e:54:d8:eb:ae:d5:a7:c8:1d:
ac:bb:e9:9e:c2:42:98:a2:2c:53:c9:7e:b7:09:42:
e2:40:34:cd:c8:76:d7:b4:f2:8f:21:05:68:14:2c:
20:62:a8:42:43:03:df:89:b4:39:89:df:9c:1d:9b:
e9:9a:1e:b5:fd:a1:6a:7e:68:4f:e6:64:21:08:3d:
ce:95:a4:97:27:ed:4f:6f:04:3d:8f:70:bd:6a:31:
f3:0e:d8:a0:f6:4e:16:5e:a8:00:b0:3a:38:55:b1:
6c:84:42:15:d8:b3:0f:e5:8c:a1:65:e6:af:89:f2:
1a:65:c4:fa:47:b2:f8:66:d1:9b:d5:c7:48:35:e3:
13:aa:c4:e0:78:4b:4d:7c:12:40:86:43:08:01:5c:
cd:e9:95:c3:dd:6c:f1:6b:dc:0b:1f:9a:44:78:76:
44:a2:c0:ee:06:46:12:b9:5b:d0:31:c3:8c:23:2c:
1c:89:07:eb:6c:4c:05:4e:b5:05:cb:56:79:c0:65:
9e:07:4f:74:3f:0b:7d:31:d2:94:ce:63:48:df:e8:
f1:70:30:e5:94:72:f9:49:d3:a2:a6:ca:b9:99:e7:
46:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:39:86:9C:F5:89:EA:D4:00:89:B1:21:E3:FE:95:DF:53:6A:90:D9
X509v3 Authority Key Identifier:
keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:40:10:f8:c1:82:f7:85:f3:38:78:e1:8a:ac:bc:1d:5e:9f:
93:ba:3e:80:21:af:1e:3f:8c:45:19:5b:94:df:64:89:8c:cd:
51:0b:99:4a:46:f2:f7:61:20:53:14:29:42:1b:ef:e2:3c:93:
36:57:7b:26:80:52:dc:20:07:1b:3e:70:03:f3:e6:e7:c9:29:
1d:75:0e:ae:62:78:9f:81:2e:67:ec:33:6c:75:63:9d:83:c5:
ed:70:91:2e:b2:4e:06:45:9b:bd:33:6f:00:4e:2d:ea:f5:0e:
47:7c:ac:7f:3b:73:c0:97:f5:fb:37:15:f5:c6:1c:c6:d2:ed:
63:30:d8:fb:87:cc:fe:8d:d1:0c:91:92:5c:b0:61:47:25:57:
d2:1c:8f:f0:6d:bc:75:01:28:50:13:13:97:73:67:ae:8d:cc:
c9:ff:7b:fa:1f:70:d1:eb:34:f7:d6:31:64:50:40:ad:74:7b:
2b:64:22:c0:53:21:60:30:67:47:28:52:54:5e:e8:f4:09:af:
14:2b:3d:95:02:38:e9:63:2c:15:02:1e:10:de:c0:d4:99:b1:
f6:72:58:22:bb:e2:b5:fe:d2:71:39:b5:99:3b:57:37:29:39:
33:3f:9c:9f:7e:d3:4e:6b:7c:41:0d:94:72:cd:0d:f1:56:08:
17:75:20:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:51:06 2026 by rpki-client