Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
File: FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json)
Hash identifier: Zk9Yz28gJTnfx5c3Mb+O1ZneNMU3zXiUIIhHSho1mw4=
Subject key identifier: 4E:F6:8A:B5:DC:12:BD:73:EF:17:FD:A9:37:B6:87:1C:1D:CA:8D:87
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial: 01A17A716D9045230D2F73D464B4951A78B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
Manifest number: 0BBF
Signing time: Mon 26 Oct 2026 23:00:16 +0000
Manifest this update: Mon 26 Oct 2026 23:00:16 +0000
Manifest next update: Tue 27 Oct 2026 23:00:16 +0000
Files and hashes: 1: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: 87QqQhOZVGl3m3uuYbzDhb33v4tXF5z+j2ubWNk1PS8=)
2: dmlQS2Sd9qDd919b9z3NpsKBzf4.roa (hash: cTIEAwkFVrrLFFu6MkzuxguAlzRRpHYYKaiTprN0Urw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:6d:90:45:23:0d:2f:73:d4:64:b4:95:1a:78:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153f24183d6c95185919349e6e92533736437b94
Validity
Not Before: Oct 26 23:00:16 2026 GMT
Not After : Oct 27 23:00:16 2026 GMT
Subject: CN=4ef68ab5dc12bd73ef17fda937b6871c1dca8d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:e6:9c:2a:66:66:33:8f:60:ee:b0:27:2c:
36:bd:61:37:10:ac:9a:8a:f3:12:09:54:32:db:e2:
15:cb:92:53:86:15:d7:e7:a0:c7:cd:44:fe:f9:22:
f3:8e:cf:51:16:f2:18:05:98:ca:13:cc:b6:e9:a0:
ae:b8:3c:40:3d:a2:bb:65:46:c7:a8:31:f2:f0:18:
49:c2:04:0e:2d:4d:48:c5:7b:16:53:f1:25:1f:45:
d4:46:f2:1c:a2:ff:12:ff:5e:52:c6:1b:f9:96:c5:
09:c8:c0:67:84:41:9a:bd:aa:e7:c7:ed:49:2a:9c:
d1:15:ad:5a:b0:45:82:44:14:7c:5d:c4:00:c5:41:
92:b2:7f:46:03:17:06:c1:6c:78:03:43:ae:34:d8:
6d:ef:e0:fc:d3:f3:f9:7b:37:53:1f:0b:c8:a2:53:
11:b6:e4:8b:5a:77:44:9d:55:9b:e4:8d:18:e6:33:
72:de:3f:1e:db:3a:d9:e3:dd:79:f6:84:5a:91:fb:
8b:e1:98:91:dc:1b:85:0b:a8:ce:e0:f7:70:35:8b:
10:31:d1:57:d0:c1:30:d5:f8:39:44:79:aa:32:73:
b6:17:00:81:c3:e0:0b:50:2e:70:1e:71:14:f0:ad:
e8:44:81:c8:4c:d7:9f:f7:c4:33:cf:d8:32:76:52:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F6:8A:B5:DC:12:BD:73:EF:17:FD:A9:37:B6:87:1C:1D:CA:8D:87
X509v3 Authority Key Identifier:
keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:8c:1c:3b:f9:3e:02:32:ea:4b:f1:ae:b4:68:04:94:00:34:
06:db:eb:c6:1c:84:a7:c3:d5:af:20:0d:38:e3:ee:d9:5c:f6:
83:0b:2d:ea:90:1e:2c:b5:0c:bd:22:c9:a9:52:b4:66:6e:71:
94:dc:f1:21:65:e8:7d:c3:34:9b:75:95:bc:bc:8e:69:20:e7:
55:ee:03:c4:f0:9c:e0:bf:ce:b7:03:85:59:44:58:80:b0:56:
e2:a4:31:33:2e:6a:57:e3:f2:64:69:53:41:15:0b:69:83:c7:
e5:4f:15:a6:48:01:55:6e:8c:86:3d:d4:e3:08:2a:00:4b:70:
87:bf:f7:50:da:a5:16:33:e9:85:e3:e5:09:96:24:18:0d:72:
35:a7:83:44:43:68:ba:8a:93:6a:5e:13:f6:98:83:d8:a1:37:
f2:df:1d:9c:1e:a8:54:d7:e0:14:1d:eb:ee:0c:74:6e:47:5d:
4b:6b:64:c4:b4:7c:18:c5:ca:b4:41:cd:81:44:dc:1d:bb:ba:
a5:eb:64:1b:a3:79:16:13:9f:a4:32:87:cf:c6:96:ee:82:81:
89:2c:89:d2:cc:8a:b6:3f:a9:8d:4d:81:19:16:83:35:16:fa:
ef:bb:c2:ca:f4:83:e7:59:07:2e:51:98:d8:c1:72:99:3a:aa:
4c:39:ab:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:13:41 2026 by rpki-client