Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
File: FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json)
Hash identifier: /I3/ZcgK8YNoBX74g65KfvuiuXTW/+CYa1+4gCj+0jU=
Subject key identifier: A6:63:CC:BE:72:78:30:4C:23:36:7C:41:1B:B1:95:6D:7C:CB:29:6F
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial: 019D37522C489A1E32CEC7DF4D113FB3BDAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
Manifest number: 098A
Signing time: Sun 29 Mar 2026 02:00:25 +0000
Manifest this update: Sun 29 Mar 2026 02:00:25 +0000
Manifest next update: Mon 30 Mar 2026 02:00:25 +0000
Files and hashes: 1: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: MejSL+O+jCBf28FpWGdh2v/7bPngWhHtFnmFeJOBQC4=)
2: dmlQS2Sd9qDd919b9z3NpsKBzf4.roa (hash: cTIEAwkFVrrLFFu6MkzuxguAlzRRpHYYKaiTprN0Urw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:2c:48:9a:1e:32:ce:c7:df:4d:11:3f:b3:bd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153f24183d6c95185919349e6e92533736437b94
Validity
Not Before: Mar 29 02:00:25 2026 GMT
Not After : Mar 30 02:00:25 2026 GMT
Subject: CN=a663ccbe7278304c23367c411bb1956d7ccb296f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:be:d8:f5:5d:56:e0:9d:3c:6d:77:f3:b9:7c:
9b:e7:51:a6:cd:1c:fc:26:b4:89:f3:25:5e:9e:63:
98:9d:a8:a4:f8:5a:e7:01:7b:32:6a:4c:d9:2d:83:
3c:02:89:eb:24:95:f6:17:ee:bc:99:b7:dd:bc:be:
8e:46:82:0b:e0:a2:a7:4c:a6:dd:6e:63:1b:82:fd:
53:18:cd:a0:63:cb:29:ad:7f:4e:e3:79:3d:a9:8e:
d8:01:b9:8a:f4:16:4c:33:f4:85:00:54:dc:e4:a4:
8e:ce:e9:21:2e:bd:dc:f3:73:67:7f:95:29:2d:f6:
02:a2:2f:1c:89:b0:5c:80:65:25:92:1c:3b:d7:9a:
c4:4a:97:9d:4f:09:d9:75:55:31:20:1e:5b:a0:e9:
78:da:53:a2:f0:44:1f:aa:ec:25:a1:97:eb:d8:12:
d7:d4:8b:01:22:e8:20:df:96:74:b1:ff:2b:27:e9:
0b:32:52:4b:9e:17:52:e5:25:eb:0e:47:f3:a9:26:
61:8c:dd:fa:75:24:b7:ac:56:98:b0:fe:e1:34:0e:
c0:bd:c5:3d:31:98:00:55:e4:14:cb:55:2a:29:97:
9d:b9:a0:5e:8c:35:bf:d0:4a:dc:c8:45:37:1e:fd:
f3:f2:a6:9f:63:af:d5:47:52:eb:90:18:fe:41:26:
78:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:63:CC:BE:72:78:30:4C:23:36:7C:41:1B:B1:95:6D:7C:CB:29:6F
X509v3 Authority Key Identifier:
keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7f:cf:7a:b7:61:3c:ad:df:cc:ff:7d:92:87:23:4c:40:b4:
eb:40:a4:aa:34:58:3e:4b:6b:4b:b6:5f:ee:f4:1d:87:ed:cb:
b4:e6:bb:91:6d:e7:8a:ed:e7:e4:3b:2b:b4:b7:e5:ae:26:00:
04:16:5f:48:b7:19:e5:20:3d:98:fa:b4:86:51:9b:a1:c3:c2:
5d:6a:4f:28:ba:d1:06:a6:83:8d:88:f7:fc:27:d1:56:15:61:
d5:2b:0d:8a:ee:03:2c:fa:96:5f:48:f8:02:47:06:88:a3:1a:
cb:99:33:4c:4e:a7:99:f2:c1:6e:b4:b7:e9:be:4b:2b:7a:ef:
13:9f:7d:6f:a7:8a:19:89:47:63:93:97:d1:3d:5d:0b:9f:f7:
f7:0b:b8:c3:7c:24:75:6b:ab:c6:a7:30:91:c5:bd:11:39:3b:
3c:1b:db:8a:42:29:98:15:fc:94:0c:34:f8:02:95:b6:6d:c7:
d5:4a:b3:8f:13:c0:ab:f0:fb:05:6f:41:46:a2:89:e3:d4:0b:
8b:cb:49:12:f7:f4:04:fe:a3:91:f3:62:04:af:5a:af:de:7a:
58:65:77:e3:ec:8e:10:1c:6c:00:0d:9b:32:42:1c:51:10:32:
cf:73:8e:9e:1b:48:f1:6a:4c:e7:21:cb:f1:5e:f8:02:c2:86:
b7:9c:2c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:11 2026 by rpki-client