Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
File: FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft (raw, json)
Hash identifier: GrfWlp3TbdtJpYtFVY0H+Y+YPJVueuCJXj+odq4cihw=
Subject key identifier: 97:D7:E3:20:45:E2:27:15:6B:3A:47:8B:5D:80:62:61:29:4F:08:4A
Authority key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
Certificate issuer: /CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Certificate serial: 01A17627662F3E35783D652A946D3778DAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
Manifest number: 0DE2
Signing time: Mon 26 Oct 2026 03:00:55 +0000
Manifest this update: Mon 26 Oct 2026 03:00:55 +0000
Manifest next update: Tue 27 Oct 2026 03:00:55 +0000
Files and hashes: 1: FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl (hash: kLNzcO2XDRzRyCydf3U0PcInxZxhxL5jKp0qHleD4wE=)
2: nZ2dtzLbRNK4kvMX3dm8jkXAeCw.roa (hash: o/RSJuyZGLHYsPriUa/ugWwYnH5mecTKfBjhXcICjvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:66:2f:3e:35:78:3d:65:2a:94:6d:37:78:da:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Validity
Not Before: Oct 26 03:00:55 2026 GMT
Not After : Oct 27 03:00:55 2026 GMT
Subject: CN=97d7e32045e227156b3a478b5d806261294f084a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:c7:0b:4a:99:1f:28:5a:1e:e1:db:20:96:
62:94:03:7f:9a:14:2b:78:8c:b4:ef:4b:2e:ce:ee:
d8:b2:21:28:9b:70:54:27:cf:58:ad:b1:5d:d9:36:
89:65:72:5d:92:b0:16:6a:36:06:6d:17:b4:72:2d:
54:ea:98:ac:29:11:5a:0a:2c:36:2e:df:38:47:52:
3f:67:55:8e:8c:16:20:e3:2d:cd:7c:58:cf:7e:cb:
e5:97:92:f7:ea:69:86:6a:f8:ec:35:1d:80:51:6a:
e4:f1:de:2c:97:e4:5f:42:64:bc:4c:2c:03:6f:99:
ee:66:fb:35:93:b0:1e:bc:b1:0e:4a:55:27:e0:5b:
2b:34:99:17:ba:7a:cf:ea:9f:78:ae:3e:cf:05:34:
68:a0:9f:6c:8b:4b:22:3f:7e:84:7b:13:f4:28:09:
93:a5:1b:88:c3:ab:81:c7:78:dd:93:45:ff:08:25:
37:30:18:b9:bd:74:57:47:88:03:08:12:da:50:38:
6c:fe:0e:5e:d6:6c:de:d9:f1:40:45:f2:00:dc:d4:
0d:af:7a:98:1f:11:d1:22:40:70:b5:07:91:59:fe:
46:09:3d:45:8d:1f:9d:09:d3:a7:5e:b0:c3:a1:d7:
5c:e2:6d:bb:5e:5a:0b:5e:15:8f:2f:ac:15:9c:b5:
be:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D7:E3:20:45:E2:27:15:6B:3A:47:8B:5D:80:62:61:29:4F:08:4A
X509v3 Authority Key Identifier:
keyid:16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c1:1f:0e:40:dc:81:53:9d:34:a9:37:44:c9:a4:8e:39:da:
9a:dd:de:80:d5:1e:6f:c4:ad:a1:d1:1c:30:d3:7e:4e:55:8d:
62:f8:f9:0d:f6:e6:51:c0:0f:82:49:d3:86:b9:bb:87:7a:80:
e9:d9:06:aa:5b:c0:c0:1c:1d:58:ea:d3:2b:ef:59:73:94:67:
c1:40:b4:ec:c7:77:67:3b:84:7d:a4:be:95:91:ed:14:7a:15:
4e:23:1d:8d:2f:5f:02:52:84:d3:29:95:38:66:76:d0:df:be:
89:37:bd:45:f2:25:1f:78:e1:b6:dc:ed:5c:f5:08:20:63:50:
74:7d:93:57:3f:f2:14:d2:11:c9:54:8b:31:05:bf:c0:22:5e:
e4:ee:2f:0b:35:13:ce:8b:39:7c:0f:f0:26:43:0c:dc:7f:c6:
fa:ec:af:b5:c2:2a:64:a3:15:c7:f5:cd:e5:5f:36:f6:c0:aa:
d1:78:1f:9a:9b:3e:e8:a3:97:8b:7f:28:3b:88:ba:a3:74:f7:
53:92:0b:4a:4b:ec:38:ae:d7:45:c6:7f:66:4c:db:f0:eb:09:
ff:e3:50:b8:e7:34:5e:8a:47:5c:e5:8c:b9:2d:ee:58:16:ee:
82:11:21:2e:b7:bc:18:93:f6:e7:46:5d:7e:3b:c8:1f:fc:0f:
0a:9a:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:30:37 2026 by rpki-client