Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
File: FT0HLM7wC_Rk1mDb0F2todoz0sg.mft (raw, json)
Hash identifier: 0+bEzHxZ8tYglPMzSFtCh3Axk7qHVRE6Q40KJehbZoY=
Subject key identifier: 8A:A9:FF:60:8C:AC:B9:21:D4:47:E5:95:CE:13:4F:51:93:C5:DB:F4
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Certificate issuer: /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial: 01A17EBC973AB14DCAEE0BC8AE08911C081D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
Manifest number: 0CED
Signing time: Tue 27 Oct 2026 19:00:50 +0000
Manifest this update: Tue 27 Oct 2026 19:00:50 +0000
Manifest next update: Wed 28 Oct 2026 19:00:50 +0000
Files and hashes: 1: FT0HLM7wC_Rk1mDb0F2todoz0sg.crl (hash: i0khLy9uTkYn6/AiYH8f226NPSfH0N03+QJVIOUA5jc=)
2: SGpevAZGETQFuN0tYIFbuVO-oHU.roa (hash: p6/1XP6vhlSrsHHLDARcNdGWShp5rNMH31ibs+saZHQ=)
3: h00EwWS0nwQcNex-PoN4bBKe784.roa (hash: KPJZ49G0RdOibbutyTd80kdxdj+ZbMSn0AFJ4T8Y7D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bc:97:3a:b1:4d:ca:ee:0b:c8:ae:08:91:1c:08:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Validity
Not Before: Oct 27 19:00:50 2026 GMT
Not After : Oct 28 19:00:50 2026 GMT
Subject: CN=8aa9ff608cacb921d447e595ce134f5193c5dbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:28:9d:bb:e4:7e:d5:39:97:8a:e8:3e:4d:d5:
8c:b7:37:12:87:ab:8b:1f:7e:fb:24:da:55:53:2e:
02:e4:4d:17:39:6e:1f:85:f6:aa:e4:8e:94:3c:91:
f2:27:a4:2c:68:f2:b5:5d:1a:cf:73:18:5f:c1:59:
90:33:00:b1:cb:9a:95:14:1e:f1:bd:a4:85:91:f0:
f1:8f:c7:7c:9e:7e:d1:17:b9:0f:04:00:09:b9:b9:
b0:93:72:74:84:db:e7:2f:83:34:bb:20:77:be:ea:
86:f3:af:b0:81:3c:fd:c3:a9:b6:ef:92:be:03:27:
43:03:c1:4f:92:de:96:c6:42:05:5c:5d:f3:6e:17:
57:a8:6e:ba:fe:06:c6:e0:c2:cb:30:b5:1a:01:28:
5e:e5:2a:a3:94:e5:1a:06:5e:97:5a:0d:1d:2c:62:
7f:0e:d9:21:23:97:c2:b6:fd:48:06:a9:9a:d0:01:
2d:49:e9:3f:53:e0:09:c3:65:0f:70:cf:10:34:fa:
4e:a1:14:6b:2c:21:36:69:63:66:31:3e:68:ec:c2:
a1:2e:5f:2f:fd:a8:24:3b:c3:ef:99:82:cf:a4:84:
4b:49:46:19:b7:22:87:92:8a:22:f1:96:4c:ef:d4:
d2:67:d9:db:28:1e:e6:60:8e:ea:2b:29:a8:12:bd:
1b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A9:FF:60:8C:AC:B9:21:D4:47:E5:95:CE:13:4F:51:93:C5:DB:F4
X509v3 Authority Key Identifier:
keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e6:fb:59:f9:ce:3d:0f:cf:16:09:84:f3:a2:81:cd:12:e6:
a1:a0:1d:cd:ff:00:0d:33:4c:c0:4b:9f:4e:94:9e:15:4b:73:
be:a2:e5:6d:24:08:36:cb:cb:95:bd:12:b8:3b:46:12:3e:a7:
70:59:75:e7:9f:67:e5:9c:be:e3:82:e6:2b:3d:0d:75:85:ae:
7f:d7:22:ed:d1:b1:46:01:ed:b6:82:2b:7a:f8:49:e3:bd:63:
8f:ef:2a:a5:65:e8:e2:66:2e:c1:d8:44:68:90:60:05:73:5c:
33:9a:65:6a:d2:6d:05:e0:56:cc:ad:ab:72:79:cf:12:a2:7e:
ee:50:30:a3:b8:95:35:44:3e:01:5d:f5:55:33:ce:5c:b8:c1:
ef:f1:4c:a0:25:3b:61:fe:f0:eb:d4:61:8f:b5:15:5e:a0:8f:
ac:88:23:8f:dd:dc:f1:b8:df:e1:f5:c1:64:b9:79:bd:bc:99:
ca:f6:d4:e8:b5:eb:9f:7d:01:06:bd:21:87:a9:51:64:74:64:
81:62:3b:1c:33:be:7d:1e:a7:a2:be:c4:93:50:78:f2:18:20:
e1:7d:c1:78:07:9d:a5:c3:c9:e9:9e:b5:f1:40:91:b0:66:67:
a4:37:07:a2:8a:3c:ee:7b:d9:92:79:66:b7:d4:3b:69:97:24:
33:ee:df:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:27:59 2026 by rpki-client