Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
File: FTyehIfJi0U_l08gMX7OPXD01d0.mft (raw, json)
Hash identifier: AleTQL1rpXSwrrtabQdAbWHlRFJJfgl8HWxAhGJJfOk=
Subject key identifier: DB:75:1E:A8:D8:54:F7:21:B3:C0:39:DC:0F:A2:BA:77:48:3A:0A:5C
Authority key identifier: 15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
Certificate issuer: /CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Certificate serial: 019D9998FA0D7F2EBC3A1C455DF7C5867DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
Manifest number: 0DFD
Signing time: Fri 17 Apr 2026 04:00:32 +0000
Manifest this update: Fri 17 Apr 2026 04:00:32 +0000
Manifest next update: Sat 18 Apr 2026 04:00:32 +0000
Files and hashes: 1: 9jINeFumL336-QR3Wj0mntR5_cM.roa (hash: wVCs9VOH0OKrniCbWjEGE6eJoair0ggue+MyLd2THDQ=)
2: FTyehIfJi0U_l08gMX7OPXD01d0.crl (hash: +UW40ek/cdf0Pe4AwiaCAMGAowY3b6EUOe9XOYSBx5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:fa:0d:7f:2e:bc:3a:1c:45:5d:f7:c5:86:7d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Validity
Not Before: Apr 17 04:00:32 2026 GMT
Not After : Apr 18 04:00:32 2026 GMT
Subject: CN=db751ea8d854f721b3c039dc0fa2ba77483a0a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9c:9e:cd:b2:11:17:8d:85:d5:5a:6f:68:75:
24:b0:73:a1:3d:0b:88:db:ff:90:5f:48:1d:32:d9:
d8:a6:02:05:a1:50:8c:ba:c0:64:26:83:85:a3:31:
85:a7:c5:d7:b0:4e:01:f8:66:49:ca:95:39:bd:5e:
1c:5d:38:d9:0e:bb:ef:35:9c:99:68:b7:ef:3c:b7:
78:50:34:7e:da:c4:5c:37:bf:6d:c7:ac:d4:ff:06:
3d:9c:e9:a8:2b:68:d4:cb:12:84:a1:8e:e7:0c:6e:
f4:c2:cf:e6:b3:db:d8:ae:c3:cf:9f:32:17:3a:11:
89:3e:dc:4c:2b:73:cf:f3:e3:72:3e:a6:87:35:0f:
ad:2e:88:8d:07:80:f7:85:3a:df:8c:10:28:d3:e9:
e1:b4:0b:26:aa:7e:5a:76:35:71:0b:c5:6b:11:a4:
a5:34:79:bf:77:de:63:d6:53:26:8d:b3:e5:75:be:
80:43:31:d5:5f:93:c6:12:a2:75:d8:a1:b8:91:a3:
e7:bf:98:98:48:e4:82:c7:5a:ff:f3:ff:59:a5:0e:
6d:93:a4:1f:8b:c9:ae:6b:fb:9f:00:c9:bc:32:13:
97:6a:49:4e:51:33:48:0d:ee:ac:08:a6:62:17:22:
1d:97:6f:ce:07:39:ba:ad:26:44:6b:ef:63:b8:a6:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:75:1E:A8:D8:54:F7:21:B3:C0:39:DC:0F:A2:BA:77:48:3A:0A:5C
X509v3 Authority Key Identifier:
keyid:15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:56:63:8d:f1:55:e4:d3:64:8f:f6:4a:f4:76:e6:2b:48:39:
65:da:2c:bb:ac:88:51:31:0c:03:db:13:3f:1c:51:26:bd:a4:
44:dd:1e:55:d4:ae:31:64:74:84:23:02:7a:88:8b:bc:95:19:
d1:a9:c9:56:e6:33:00:cb:77:94:56:9a:a3:ee:05:25:c6:45:
de:de:2e:93:ce:2c:39:68:32:e4:d3:98:d1:21:95:cf:09:1b:
36:4a:3e:7e:37:ce:cf:63:7d:61:01:db:d0:fa:a7:26:9e:1b:
3d:03:20:a7:c3:0b:80:60:6a:92:d9:6c:ef:80:ad:20:9d:90:
33:b7:80:7a:e6:59:a6:b1:a7:32:72:36:bc:ed:e3:2a:3c:4f:
85:73:79:eb:4b:0f:fd:94:5b:db:4c:10:e1:4d:76:7e:4e:41:
7c:e2:86:84:a5:a4:39:75:ed:2e:c3:f8:60:8f:0f:81:0f:43:
92:77:60:bb:f3:50:5a:22:d3:60:4b:2c:c8:cb:b2:2b:fb:90:
e0:4f:79:fe:d2:2b:a8:91:34:db:d3:a5:26:7a:02:e5:a6:9e:
db:7f:06:f4:a4:5c:0e:fc:04:e7:4a:63:cd:f3:a8:86:7c:3c:
ce:f8:3c:d5:81:a7:ef:d1:68:8a:4a:13:6f:de:4d:08:c6:0f:
82:31:69:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:34:22 2026 by rpki-client