Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: oPy17Oyv0Ta5Aq743e1T//gf54nl/ygj/ikMPKUXXt8=
Subject key identifier: 5E:3D:E5:AD:15:84:A6:F3:73:58:0E:EA:96:44:F1:6F:DB:53:57:87
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 019DB3C79C5320E5631806E891E4D6557CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 0C31
Signing time: Wed 22 Apr 2026 06:01:36 +0000
Manifest this update: Wed 22 Apr 2026 06:01:36 +0000
Manifest next update: Thu 23 Apr 2026 06:01:36 +0000
Files and hashes: 1: 1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa (hash: SI1GZ68MQvNyp6z6E4tf9l9Kh6Fw9zjsRZN+PWTuZfk=)
2: 9jOl6Kcb1BJgHqe3R69MAMfscLs.roa (hash: mbvLuEee7YAsoidgyrb6OTXZspY1pEAVqK8jJs/3DzY=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: J9bu8TcQIcUjylpdVOmuf5SDb4PRYulQEfk/HBqi77s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:c7:9c:53:20:e5:63:18:06:e8:91:e4:d6:55:7c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Apr 22 06:01:36 2026 GMT
Not After : Apr 23 06:01:36 2026 GMT
Subject: CN=5e3de5ad1584a6f373580eea9644f16fdb535787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:88:2b:2c:cf:e8:3b:45:0e:81:a3:97:a5:d8:
0a:41:91:e6:e1:49:d4:28:91:49:3a:02:ac:b1:59:
8d:de:41:55:08:72:6c:69:63:d8:69:13:c8:94:48:
78:d1:b1:a2:d4:78:ce:8e:89:89:af:38:a4:00:f5:
22:64:6c:94:42:44:07:73:ad:76:6c:4e:92:1b:80:
20:96:2e:14:8c:43:a2:8b:52:e4:9a:d5:3c:46:d3:
48:52:77:82:2c:c5:48:3a:e1:fb:39:0c:9f:c4:a5:
f6:46:a5:a8:44:86:ee:48:22:af:e0:c4:57:fc:d3:
0b:40:af:44:a8:0e:ea:81:0c:b0:b6:30:5d:80:7a:
f6:6e:b6:40:40:fa:9b:4a:54:5a:bc:4b:1a:fe:e3:
d1:32:b1:46:fc:f6:01:48:98:81:99:5e:8f:74:b1:
08:7b:95:31:74:68:ca:dc:b2:7b:2c:95:0c:62:06:
eb:e1:7f:b8:5c:8d:a9:cb:28:5d:25:2e:89:05:24:
08:53:8e:37:75:20:d8:1e:be:30:25:87:cb:05:30:
7f:37:3d:f9:86:fd:4b:fe:22:4d:dd:9c:49:ac:98:
ae:4b:78:3c:b5:55:ab:61:5e:16:88:71:82:4e:1b:
7a:ca:25:17:e5:d0:e0:74:0b:e2:54:bb:6d:83:8d:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3D:E5:AD:15:84:A6:F3:73:58:0E:EA:96:44:F1:6F:DB:53:57:87
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cf:6e:e0:e1:26:5c:16:02:7c:c5:b6:0d:de:da:f7:9b:ed:
b3:f3:5c:77:84:66:07:f5:41:09:de:f2:e0:e1:13:df:8f:df:
9d:fc:77:87:f8:0a:51:97:1d:ea:d9:eb:a9:3e:8e:b4:60:1d:
4b:7c:c8:f7:47:d4:51:74:c2:aa:14:3a:18:a0:0c:82:a2:e5:
e3:95:f3:93:f2:3e:9f:2d:64:5f:e6:b2:5c:31:e4:da:e7:4e:
31:80:4f:68:38:2f:bd:67:04:e4:d6:e1:11:01:62:bb:74:a8:
2d:f0:d6:ef:cf:83:92:e0:69:ac:cb:f1:95:7d:8c:cb:88:a2:
a5:85:82:12:f9:59:a0:35:96:78:c5:8d:0e:ca:7d:84:c2:6d:
68:cc:fe:e0:bb:9f:91:47:80:78:49:26:88:d8:54:7a:48:24:
d0:b3:5f:0d:05:d0:14:b7:88:8c:71:e2:45:96:bb:e7:7a:d3:
7b:ed:f0:4d:10:8b:23:2e:5f:b6:f1:39:f2:b7:3c:89:fa:a7:
37:e9:6d:17:5b:01:e7:f1:f2:49:31:b6:05:28:5a:be:36:6e:
64:d7:0b:60:6f:ce:47:18:cd:2d:44:ac:08:1f:37:bf:a2:ad:
cf:21:5f:bf:a9:00:d2:b0:76:d4:37:f4:ea:e4:25:04:3b:88:
55:12:4f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 09:50:21 2026 by rpki-client