Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
File: FT0HLM7wC_Rk1mDb0F2todoz0sg.mft (raw, json)
Hash identifier: ggeeagPhHBO/fsIWstQUqjJbetSD6g3jpcXaZVVrLlo=
Subject key identifier: 4C:85:1D:5D:62:4B:3A:F3:BD:F6:07:64:34:4A:E3:42:21:A3:BE:E2
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Certificate issuer: /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial: 019CE4B592DB325FE3D8DA2808C316C23BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
Manifest number: 0A8B
Signing time: Fri 13 Mar 2026 01:00:30 +0000
Manifest this update: Fri 13 Mar 2026 01:00:30 +0000
Manifest next update: Sat 14 Mar 2026 01:00:30 +0000
Files and hashes: 1: FT0HLM7wC_Rk1mDb0F2todoz0sg.crl (hash: QTOctvpbnGXm2ws2inRS+vbKr8JERGuYqQANMyP/I1w=)
2: SGpevAZGETQFuN0tYIFbuVO-oHU.roa (hash: p6/1XP6vhlSrsHHLDARcNdGWShp5rNMH31ibs+saZHQ=)
3: h00EwWS0nwQcNex-PoN4bBKe784.roa (hash: KPJZ49G0RdOibbutyTd80kdxdj+ZbMSn0AFJ4T8Y7D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:92:db:32:5f:e3:d8:da:28:08:c3:16:c2:3b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Validity
Not Before: Mar 13 01:00:30 2026 GMT
Not After : Mar 14 01:00:30 2026 GMT
Subject: CN=4c851d5d624b3af3bdf60764344ae34221a3bee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:f8:21:62:e9:94:94:fe:d0:6a:4d:c9:32:
f0:4a:ec:6c:b9:d0:81:3f:da:75:de:27:fc:1e:31:
6d:de:4c:3f:40:29:8a:30:22:1c:ff:9c:1f:52:74:
2c:9e:88:61:e4:b2:5f:a8:b7:2a:8c:09:50:75:89:
33:d0:a7:e5:cd:f1:ce:a0:3c:e4:ca:3d:e6:13:1a:
22:6d:a3:03:e6:bc:f8:2b:82:03:92:a8:f5:ae:38:
e9:f6:23:c3:a6:ed:9a:01:2e:22:c6:56:0e:be:12:
5a:b8:19:37:12:d2:13:93:05:e5:d1:6a:9a:73:60:
86:67:f9:55:27:ba:14:9f:0b:89:7d:79:46:84:3b:
9a:25:45:5b:95:18:e4:af:dd:1f:00:c1:da:b7:07:
d7:54:c7:24:bb:22:d0:8b:ba:1c:63:07:93:0c:77:
34:01:24:14:c0:bf:56:a4:fe:d9:a9:c6:84:6b:08:
17:15:d7:81:d3:16:6c:d5:ee:e7:f9:74:d5:27:01:
e6:94:14:48:24:e7:6a:2c:85:40:8a:6f:b3:87:b1:
d8:2f:91:c8:ba:c5:e6:c3:72:8c:5e:65:4b:cc:c8:
f4:94:84:1c:57:c1:e5:a5:9f:2a:52:4a:e8:e4:75:
8c:72:fb:25:91:24:c3:04:85:2f:3e:c9:5c:2f:af:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:85:1D:5D:62:4B:3A:F3:BD:F6:07:64:34:4A:E3:42:21:A3:BE:E2
X509v3 Authority Key Identifier:
keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7a:a1:51:31:bc:ac:a2:d3:e3:2e:ad:0c:67:81:17:84:0e:
cb:a7:77:49:a8:64:68:43:13:ff:5a:ef:02:e4:35:69:09:db:
43:be:72:ee:87:1c:1e:97:1e:14:8c:0d:9c:ed:c4:c7:83:ea:
1a:00:ec:eb:99:9d:19:5c:94:54:b4:28:57:4a:6f:d3:42:8d:
60:40:d5:4a:f8:82:15:2b:fd:23:26:6e:37:a0:ea:63:0a:6c:
f2:b5:12:a8:31:1f:d8:36:d6:01:8f:5c:c6:92:63:2b:c7:1e:
04:6c:2d:33:81:44:cc:bf:e7:4a:04:15:1e:80:7b:59:02:30:
58:e5:f8:0e:a5:80:97:84:0c:4e:af:ea:31:ae:02:00:1c:7a:
7f:df:08:26:eb:80:49:be:81:7d:f6:57:15:69:40:94:b5:96:
ed:3c:d4:15:7c:9f:11:ca:36:7d:55:8f:b3:e0:74:b6:cf:b6:
b4:a2:03:06:0f:1b:db:cc:43:db:a6:bd:9e:d1:94:78:56:e5:
33:2e:23:7b:97:32:b9:eb:1f:91:7a:37:3e:4b:5d:98:ff:d1:
23:5d:74:48:e6:bc:aa:0b:68:69:1c:62:b3:f9:fa:2f:0d:68:
88:80:07:38:99:58:04:71:65:bf:a3:c6:92:5e:08:d2:09:2d:
23:63:41:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzktZLbMl/j2NooCMMWwjuyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1M2QwNzJjY2VmMDBiZjQ2NGQ2NjBkYmQwNWRhZGExZGEz
M2QyYzgwHhcNMjYwMzEzMDEwMDMwWhcNMjYwMzE0MDEwMDMwWjAzMTEwLwYDVQQD
Eyg0Yzg1MWQ1ZDYyNGIzYWYzYmRmNjA3NjQzNDRhZTM0MjIxYTNiZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+34IWLplJT+0GpNyTLwSuxsudCB
P9p13if8HjFt3kw/QCmKMCIc/5wfUnQsnohh5LJfqLcqjAlQdYkz0KflzfHOoDzk
yj3mExoibaMD5rz4K4IDkqj1rjjp9iPDpu2aAS4ixlYOvhJauBk3EtITkwXl0Wqa
c2CGZ/lVJ7oUnwuJfXlGhDuaJUVblRjkr90fAMHatwfXVMckuyLQi7ocYweTDHc0
ASQUwL9WpP7ZqcaEawgXFdeB0xZs1e7n+XTVJwHmlBRIJOdqLIVAim+zh7HYL5HI
usXmw3KMXmVLzMj0lIQcV8HlpZ8qUkro5HWMcvslkSTDBIUvPslcL69kfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyFHV1iSzrzvfYHZDRK40Iho77iMB8GA1UdIwQY
MBaAFBU9ByzO8Av0ZNZg29BdraHaM9LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlQwSExNN3dDX1JrMW1EYjBGMnRvZG96MHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82NGIxZTYtMGExZi00MGVjLTk0Mzct
MDRhNGMyYzQxYzM0LzEvRlQwSExNN3dDX1JrMW1EYjBGMnRvZG96MHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82NGIxZTYtMGExZi00MGVjLTk0MzctMDRhNGMyYzQxYzM0
LzEvRlQwSExNN3dDX1JrMW1EYjBGMnRvZG96MHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnqhUTG8
rKLT4y6tDGeBF4QOy6d3SahkaEMT/1rvAuQ1aQnbQ75y7occHpceFIwNnO3Ex4Pq
GgDs65mdGVyUVLQoV0pv00KNYEDVSviCFSv9IyZuN6DqYwps8rUSqDEf2DbWAY9c
xpJjK8ceBGwtM4FEzL/nSgQVHoB7WQIwWOX4DqWAl4QMTq/qMa4CABx6f98IJuuA
Sb6BffZXFWlAlLWW7TzUFXyfEco2fVWPs+B0ts+2tKIDBg8b28xD26a9ntGUeFbl
My4je5cyuesfkXo3PktdmP/RI110SOa8qgtoaRxis/n6Lw1oiIAHOJlYBHFlv6PG
kl4I0gktI2NBpg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:56:48 2026 by rpki-client