Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
File: FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft (raw, json)
Hash identifier: L1CKV2j5iiSJWA/XDD2SNgidHKpNH4Q86apUutSRHuk=
Subject key identifier: F9:03:58:A1:E1:50:B9:62:10:96:85:5B:93:B9:DD:55:8F:A7:DF:D4
Authority key identifier: 15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
Certificate issuer: /CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Certificate serial: 019D37C0F1A27921E65026CD6817D1E219C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
Manifest number: 1501
Signing time: Sun 29 Mar 2026 04:01:24 +0000
Manifest this update: Sun 29 Mar 2026 04:01:24 +0000
Manifest next update: Mon 30 Mar 2026 04:01:24 +0000
Files and hashes: 1: FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl (hash: ayaOpyiOEngXSY7gcIVaMg/bC9Ww6beKK517buxygA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f1:a2:79:21:e6:50:26:cd:68:17:d1:e2:19:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Validity
Not Before: Mar 29 04:01:24 2026 GMT
Not After : Mar 30 04:01:24 2026 GMT
Subject: CN=f90358a1e150b9621096855b93b9dd558fa7dfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bd:f1:ec:20:cd:0c:1c:c9:16:14:3f:df:92:
12:5f:9a:ed:e3:5a:06:eb:b1:11:23:6b:8d:d3:57:
01:17:95:52:44:31:50:0b:c9:e1:7b:38:db:ad:aa:
08:63:71:dc:a0:55:68:c3:93:81:d9:b9:87:56:63:
82:5a:dd:d4:2f:9a:9c:f7:0b:c8:75:b6:60:0a:dd:
9e:01:6b:0a:9c:9d:82:16:29:ee:ac:26:4a:65:2f:
14:1e:40:88:14:1f:32:4b:ff:4d:4c:3c:23:9f:ca:
35:01:a8:df:a2:61:4f:b2:75:12:fe:03:6b:da:8c:
da:8e:f6:e8:59:60:08:63:91:4b:cb:33:17:d8:e4:
b1:52:d8:b1:ee:cf:16:58:44:14:f7:91:2a:a4:01:
3f:e6:db:23:86:2b:ca:7c:f9:2c:75:60:59:cc:da:
64:cb:14:0e:c7:23:92:0a:c1:3a:b1:77:7a:77:bc:
1e:62:bb:9e:0c:19:e1:a8:78:60:80:83:61:58:41:
0c:31:f3:57:08:47:62:16:29:eb:23:72:da:22:c3:
55:41:a2:eb:41:b7:d0:aa:19:8e:2f:06:d0:02:2b:
2f:80:51:cc:95:ad:61:49:7b:26:35:00:f5:ef:d2:
30:b9:0a:0d:2d:19:51:63:4c:ff:eb:2c:a2:db:cc:
ff:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:03:58:A1:E1:50:B9:62:10:96:85:5B:93:B9:DD:55:8F:A7:DF:D4
X509v3 Authority Key Identifier:
keyid:15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:82:16:6f:07:62:2a:29:b8:0a:25:ac:7a:a8:13:ea:36:0c:
0b:ce:db:cc:6c:b8:ec:a4:06:1f:dc:0c:9f:74:ab:db:bd:fc:
94:c4:0f:52:6c:e2:fa:44:f9:8e:67:b4:ce:52:a5:75:a7:01:
d1:b4:bf:73:16:53:d8:b5:a5:64:b2:b6:33:1e:c0:f4:e0:4f:
8a:6e:de:39:09:60:7e:4b:77:b2:20:7d:02:a3:4e:e0:33:91:
3a:9a:f1:1c:74:40:fc:e4:28:a3:bf:c5:35:70:99:cd:6e:c6:
b1:6e:8b:99:62:5b:c4:76:d4:6d:4d:54:33:d6:09:d7:f7:78:
2f:13:41:07:22:f2:48:e5:ca:ab:29:65:08:0b:8c:7d:f0:82:
16:f2:b5:39:00:88:d3:74:ca:75:f8:d3:14:2f:6e:6e:d2:2e:
c0:d8:b3:45:8d:b5:14:e8:1e:ba:de:d6:a7:65:e1:db:bc:cd:
fb:84:b7:3b:74:34:46:bb:55:76:5f:f9:0e:6a:62:7d:1a:cd:
c8:d8:9d:a6:76:5c:66:b7:7b:32:44:2f:6d:c5:2b:68:9d:17:
7a:3e:72:5c:28:b8:7e:4b:08:1b:64:5b:49:e7:aa:cf:15:e2:
11:a8:31:6e:d0:b7:63:5c:d0:a7:7c:73:1f:78:7f:2e:46:10:
32:8e:6d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:33 2026 by rpki-client