Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File: FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier: +PbKUotYKL4dzoRRsasELplObmPrnsMJyQu4jBgOr1A=
Subject key identifier: 10:B3:F1:9F:87:12:22:23:E3:54:EF:D4:E8:09:69:BF:CA:4B:D7:4B
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer: /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial: 01A0CC355B01A0BF6F024263B61C0862F144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number: 0B89
Signing time: Wed 23 Sep 2026 03:00:43 +0000
Manifest this update: Wed 23 Sep 2026 03:00:43 +0000
Manifest next update: Thu 24 Sep 2026 03:00:43 +0000
Files and hashes: 1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: 69Q2Ery8FAhZolfBPql6mvZUDoBd3dBX9RNUnOUg/gQ=)
2: MBwPXOKM_iWsdzlsSXqDs7ZTH3I.roa (hash: 6X+PmBDPGX3JlUhHkCIG/oJUZITMm91IUs89tz0dREE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:5b:01:a0:bf:6f:02:42:63:b6:1c:08:62:f1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
Validity
Not Before: Sep 23 03:00:43 2026 GMT
Not After : Sep 24 03:00:43 2026 GMT
Subject: CN=10b3f19f87122223e354efd4e80969bfca4bd74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b0:94:98:36:be:31:f1:c1:5f:69:69:0a:b8:
9f:cc:2a:38:b3:4d:74:91:b6:df:bf:5c:92:21:25:
bd:bf:58:61:14:86:8f:a3:ee:f3:57:05:e4:e3:a2:
6b:8a:7b:07:9b:39:a6:11:45:5f:fc:9e:d4:90:63:
af:29:5b:fd:00:31:3b:e5:45:45:8b:db:f8:e8:7f:
8a:d1:3e:59:5b:0c:98:8d:13:ee:65:1a:d3:df:25:
dd:48:de:0d:75:cd:23:f8:de:67:80:e3:2e:3d:66:
a8:d0:7a:13:ed:db:46:67:9e:8f:ec:ab:ea:f2:7a:
c7:db:66:53:33:4b:b9:40:c6:30:e1:c6:52:f2:10:
5b:dc:47:6c:bc:4a:ae:5a:ff:cb:b7:86:66:56:bf:
b8:10:54:a0:02:d4:d8:6c:9c:2c:b3:b2:b7:bd:2e:
10:eb:23:a0:82:57:6b:15:30:0c:4c:4c:fe:e4:63:
25:a8:68:0f:6d:d5:76:6f:24:2a:bb:1d:15:d0:b3:
06:ba:26:14:19:4d:7c:21:09:35:aa:3b:03:9d:be:
40:8c:f7:db:d3:18:cf:66:97:c6:92:8b:29:2f:bc:
2b:17:49:23:b8:1c:f0:fe:6b:d9:1f:80:46:46:df:
cc:fa:bd:95:ba:6a:ea:2c:71:84:57:b0:94:32:ee:
c4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B3:F1:9F:87:12:22:23:E3:54:EF:D4:E8:09:69:BF:CA:4B:D7:4B
X509v3 Authority Key Identifier:
keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:41:46:08:f4:fa:7b:f1:3e:50:ca:c6:84:6f:05:b9:01:69:
25:b0:fd:4e:a8:df:71:e4:83:b7:a0:f4:8f:5e:24:72:87:be:
70:69:09:ec:d0:c1:f0:81:64:2c:f0:40:83:69:75:af:c5:20:
cb:1c:a1:21:4e:40:bc:05:2e:ed:ac:12:29:7a:3e:73:d6:2c:
70:b3:fd:20:d0:25:02:72:eb:56:af:23:57:29:67:7a:0d:40:
98:00:89:8b:14:2b:24:d8:cf:d7:c5:a0:43:32:d0:0d:8e:ba:
3b:7f:4d:a3:a8:3e:71:31:a9:f1:90:21:53:9b:a5:24:5d:14:
c4:f3:36:86:db:7a:35:c2:e6:ae:ee:3e:4f:c0:39:a5:ef:52:
1a:bb:61:84:07:b4:84:57:e0:0f:2d:a3:f4:01:bf:25:43:5f:
d0:f3:1c:9c:c0:b2:31:c2:2b:84:f1:4c:a7:24:9d:fb:db:39:
d4:c8:95:8f:ad:10:24:a5:52:0d:a2:eb:4b:fe:86:84:d7:ec:
ce:40:8c:62:fd:9f:ca:bf:10:36:22:a2:8b:42:fd:71:1d:ce:
e0:eb:48:ca:78:9c:f1:a1:c7:eb:ca:ec:af:f3:0b:22:54:89:
5d:7f:93:e8:37:0c:12:74:ae:01:31:c2:f7:6e:96:ab:a5:7e:
75:a1:a9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:45:13 2026 by rpki-client