Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
File: FT0HLM7wC_Rk1mDb0F2todoz0sg.mft (raw, json)
Hash identifier: 4h5XFTJgkgysFSKmqTKpc/7A+Pc0YxnsOkO1HiTIMcs=
Subject key identifier: 23:E2:09:D8:A3:AA:C3:03:A4:05:F1:38:47:C5:46:32:14:64:08:8F
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Certificate issuer: /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial: 019DCE627F8A30C658C63C9C5363197FE3B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
Manifest number: 0B04
Signing time: Mon 27 Apr 2026 10:00:54 +0000
Manifest this update: Mon 27 Apr 2026 10:00:54 +0000
Manifest next update: Tue 28 Apr 2026 10:00:54 +0000
Files and hashes: 1: FT0HLM7wC_Rk1mDb0F2todoz0sg.crl (hash: KZZnU50akEHkfG/j7HBNweBHDOkt3thN36vo9g4Ihcw=)
2: SGpevAZGETQFuN0tYIFbuVO-oHU.roa (hash: p6/1XP6vhlSrsHHLDARcNdGWShp5rNMH31ibs+saZHQ=)
3: h00EwWS0nwQcNex-PoN4bBKe784.roa (hash: KPJZ49G0RdOibbutyTd80kdxdj+ZbMSn0AFJ4T8Y7D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:7f:8a:30:c6:58:c6:3c:9c:53:63:19:7f:e3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Validity
Not Before: Apr 27 10:00:54 2026 GMT
Not After : Apr 28 10:00:54 2026 GMT
Subject: CN=23e209d8a3aac303a405f13847c546321464088f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:2f:e8:b1:03:58:7d:67:df:cb:f1:14:75:
00:8a:50:67:b3:8e:ce:16:49:82:5d:9a:d4:c4:49:
c2:36:62:e7:22:b8:42:65:a3:a8:40:7d:bc:ef:c5:
22:99:a6:41:b6:2d:dd:a8:a7:db:f0:27:7b:5f:21:
b2:5b:89:08:dd:ec:26:97:a3:fa:2c:75:52:80:94:
14:60:c5:f9:4e:e2:8a:3a:6d:f6:73:f6:ac:ab:c9:
57:d6:13:1b:f8:84:8e:a9:1a:ee:c7:8b:2c:35:5d:
e4:fd:b8:49:d2:3e:84:25:00:c1:56:7f:fb:8e:f0:
9e:d0:04:92:22:cd:6f:a4:2a:6b:4b:e5:ef:e3:ee:
74:fb:77:67:b8:1d:c6:e1:e7:de:c9:89:f8:bd:3c:
a0:8f:01:68:72:07:34:37:7b:99:6e:1f:cc:60:da:
a8:a7:26:fb:d8:af:2b:28:46:60:dd:7e:49:39:e1:
71:3a:cf:5a:96:49:0f:b3:e2:bf:27:f4:90:36:45:
14:d3:71:f7:dd:98:8f:b9:48:82:7a:1b:4f:d2:91:
9c:71:31:19:8a:26:ce:40:ad:c2:86:40:4b:6c:7a:
1e:14:e7:24:20:4d:46:fb:54:54:a7:0b:f0:39:0d:
a0:fe:59:0b:b5:b3:e2:bd:47:dc:46:7a:dc:31:27:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E2:09:D8:A3:AA:C3:03:A4:05:F1:38:47:C5:46:32:14:64:08:8F
X509v3 Authority Key Identifier:
keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:94:16:d1:98:cd:4d:21:68:25:45:f7:2e:71:12:c0:cb:5a:
b3:99:bc:c6:33:95:bb:3d:cf:b3:a9:7a:26:45:ea:83:10:b6:
23:08:8b:bc:85:f2:1e:80:3d:3f:f5:04:b8:79:fc:67:da:ab:
42:81:b6:0c:00:15:6c:39:c2:70:70:e5:0c:55:6b:3a:a6:eb:
06:b6:3c:c4:60:58:9d:93:b4:e3:2b:a4:cd:1d:85:56:cc:cf:
5d:1e:df:8d:f6:2f:d8:6c:58:0b:cd:cb:5c:dd:5d:b1:77:fe:
70:ed:7a:19:36:55:1c:7c:7a:51:28:62:b3:9b:bf:3c:e8:b8:
d2:6e:29:b5:6e:d6:82:86:22:f0:a9:7c:bc:5b:31:99:92:ad:
6e:1f:9a:f2:50:ad:e0:6e:3d:71:ed:07:ea:2d:22:02:c6:b5:
38:9b:f0:72:3d:68:0c:de:d2:79:a3:df:0e:a2:49:56:22:d1:
9f:0c:70:43:95:2d:be:9b:92:ae:dd:6f:ce:b0:7a:cd:a1:87:
57:9c:79:fa:bb:6b:dd:f3:b2:12:8f:00:01:54:bf:fe:bf:aa:
47:43:d7:e1:d6:97:95:08:4f:60:cd:48:f4:4f:0a:1e:a4:66:
c3:83:c1:f3:89:c0:5f:c6:05:1c:36:1a:4c:3b:9e:fe:72:a7:
13:13:cb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:38:33 2026 by rpki-client