Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
File: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft (raw, json)
Hash identifier: /6Ch0y8LbpGtXWOnxATgG+1IP0H+VZ7GkraS44RqhOs=
Subject key identifier: BF:72:D6:CB:C1:D0:86:F9:A2:0F:CB:44:03:A0:B6:CF:3B:BA:AF:CE
Authority key identifier: 7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
Certificate issuer: /CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Certificate serial: 01A0890BCC046DBC908291D30B05F7891997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
Manifest number: 03AD
Signing time: Thu 10 Sep 2026 02:00:46 +0000
Manifest this update: Thu 10 Sep 2026 02:00:46 +0000
Manifest next update: Fri 11 Sep 2026 02:00:46 +0000
Files and hashes: 1: 5pQj7qkmBcSMfaLVfZDv-7kT9DI.roa (hash: Rd6vx0quono9MPD1F0vpd55eYapHMtF51xcO/Hw6eew=)
2: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl (hash: 5nfY75+iVrPDBaRTVR8aLyML5M88UnN7/FyUnEzQsFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0b:cc:04:6d:bc:90:82:91:d3:0b:05:f7:89:19:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Validity
Not Before: Sep 10 02:00:46 2026 GMT
Not After : Sep 11 02:00:46 2026 GMT
Subject: CN=bf72d6cbc1d086f9a20fcb4403a0b6cf3bbaafce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1a:cf:15:3c:b2:14:64:d6:33:05:48:c6:5c:
00:2f:42:fb:93:a3:2c:bd:61:35:c6:74:5f:fc:8c:
68:41:6c:8a:0d:b8:ea:27:a4:a8:09:71:6b:c7:24:
c5:82:89:c5:c1:70:85:85:2d:3e:6e:a7:bd:fb:7e:
b7:70:6f:f1:54:7f:ed:74:dd:80:6e:4b:ee:92:6f:
2c:e8:dd:0c:23:13:0d:6d:15:80:a6:31:ca:0d:1d:
f1:dc:a1:aa:e2:92:1e:e5:14:5e:91:26:22:62:09:
30:1b:17:e3:ff:ef:32:9f:ed:17:1c:af:6a:33:68:
9c:7e:3d:81:c9:94:34:3a:cc:c2:bb:1a:f7:a8:b3:
ee:36:70:7b:c9:77:ea:ff:32:c7:a4:b3:c1:27:c2:
79:5d:e7:21:84:47:eb:a2:33:88:e5:42:89:34:6e:
91:09:2d:7b:1c:0d:fb:8d:2f:ec:cb:64:3e:9f:9f:
9d:1c:9f:31:78:58:1b:b9:29:ba:e2:8b:eb:fc:25:
fa:8f:55:f8:0e:6b:c6:ac:3f:18:66:e1:d1:80:42:
db:08:73:73:63:a3:25:5b:3e:dc:03:80:85:7b:bc:
6e:85:4b:35:a0:93:49:bb:e0:88:33:90:bd:8f:34:
73:9f:f5:ca:ed:06:23:0e:4c:42:94:4c:af:02:18:
5a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:72:D6:CB:C1:D0:86:F9:A2:0F:CB:44:03:A0:B6:CF:3B:BA:AF:CE
X509v3 Authority Key Identifier:
keyid:7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ab:b5:08:13:a8:04:89:e4:53:b5:0a:ab:37:d7:3d:a0:4a:
0d:d0:66:7e:6b:7a:24:40:a7:b1:02:5c:46:f4:1b:ac:76:ba:
c4:15:59:ba:c9:7f:d2:44:04:b2:bc:a2:db:69:14:67:e1:6e:
d2:96:8c:02:1a:25:6d:d6:b4:27:61:30:cb:f4:81:a9:5d:a4:
61:d4:81:a7:d0:d8:49:cf:50:e2:94:1d:7b:f0:35:d4:0f:d4:
7f:6a:f8:5d:6e:0c:97:2d:ce:1c:e6:e7:5c:47:7b:99:78:50:
71:73:6a:8f:37:dd:60:0b:41:fd:3f:e5:fc:28:1a:3b:2f:7c:
21:62:71:6e:cf:26:34:29:82:42:18:40:97:cd:8c:cb:98:20:
a9:eb:63:ac:d8:76:20:d3:ba:9e:b5:dd:52:bc:ab:44:b7:3a:
e4:e7:0b:98:d3:31:ea:e8:32:3c:a2:47:ed:79:58:5e:e2:a8:
3e:30:c2:73:02:b0:da:56:0e:40:3f:15:ad:a8:ec:22:5a:78:
bf:c7:0f:a7:76:ec:dc:e0:f4:94:ff:cf:32:44:92:95:4d:73:
b5:5d:85:91:f9:d5:16:50:f9:9b:c5:47:92:e6:c5:ad:3f:aa:
70:cf:48:bc:f2:b3:e8:5e:2d:57:96:3e:19:a8:3c:b0:cf:67:
16:ba:e0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:02:50 2026 by rpki-client