Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
File: FTyehIfJi0U_l08gMX7OPXD01d0.mft (raw, json)
Hash identifier: zLZk/9xtGoEYSDfSbeaEoDon7Ql8EFwb3cNZ/q/kj7Y=
Subject key identifier: 5F:3E:68:02:D6:43:EB:BF:34:E3:80:D6:86:10:8C:F3:12:B4:70:D2
Authority key identifier: 15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
Certificate issuer: /CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Certificate serial: 019CAA21300C558A300E2E9A8C141F8DF705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
Manifest number: 0D81
Signing time: Sun 01 Mar 2026 16:00:27 +0000
Manifest this update: Sun 01 Mar 2026 16:00:27 +0000
Manifest next update: Mon 02 Mar 2026 16:00:27 +0000
Files and hashes: 1: 9jINeFumL336-QR3Wj0mntR5_cM.roa (hash: wVCs9VOH0OKrniCbWjEGE6eJoair0ggue+MyLd2THDQ=)
2: FTyehIfJi0U_l08gMX7OPXD01d0.crl (hash: eIMPcD2WkWDh7kIY03jIgmgk7cmNq5mPEP2LDT/nhbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:30:0c:55:8a:30:0e:2e:9a:8c:14:1f:8d:f7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Validity
Not Before: Mar 1 16:00:27 2026 GMT
Not After : Mar 2 16:00:27 2026 GMT
Subject: CN=5f3e6802d643ebbf34e380d686108cf312b470d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:36:e8:a9:af:07:70:dc:3d:fd:a7:ab:c6:80:
78:9b:a7:b0:69:58:91:97:02:f1:ce:db:29:8b:83:
41:0b:43:ad:23:8a:ab:2e:bb:b9:f2:8c:3e:3c:3f:
8c:73:d2:e9:8a:b9:37:a2:3f:ea:c1:97:c6:a8:d1:
08:60:90:ad:41:d6:4d:79:f0:0a:2a:25:ea:dd:ec:
85:2e:8e:e1:33:f1:70:16:44:95:c5:6e:0b:a0:3f:
1b:11:7a:20:2f:09:0f:f8:f5:cf:11:af:c8:c8:db:
1d:12:f0:e0:65:70:07:26:e9:43:2f:c7:c1:ea:8f:
45:69:e6:7b:84:14:d2:6b:e2:c3:97:e5:a0:ae:4a:
00:42:95:d0:4a:6a:d2:21:52:ba:bc:b3:17:9c:fc:
52:18:12:3e:3f:b7:31:eb:92:89:a8:11:f5:55:86:
06:88:18:b5:af:e3:32:66:96:03:44:4d:43:0a:9e:
4d:0f:4c:05:38:43:cd:3c:79:67:71:94:b1:66:31:
33:08:14:cd:f2:89:29:ae:20:49:89:9a:99:98:6d:
fe:6d:bf:74:ed:53:d5:8c:f8:03:1a:4c:11:da:47:
75:e7:40:03:6a:38:23:a4:f0:b3:f0:2b:77:53:6f:
46:f2:c9:c6:54:5d:bf:77:1f:b8:34:3d:27:34:48:
25:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3E:68:02:D6:43:EB:BF:34:E3:80:D6:86:10:8C:F3:12:B4:70:D2
X509v3 Authority Key Identifier:
keyid:15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e0:a6:97:78:8c:2c:26:09:85:36:c3:31:30:eb:77:eb:9c:
16:78:d6:8a:02:95:07:b8:33:c7:80:fb:1e:5c:42:ba:54:b5:
57:10:56:83:0a:02:1c:98:a5:12:36:f7:c2:f2:b5:02:1f:ac:
73:b4:3c:93:7b:d2:3b:31:8a:b5:e8:96:ac:10:3b:17:86:23:
d9:34:a3:f7:93:fb:2e:57:e4:ca:37:13:a7:b1:50:92:08:68:
c4:0c:a6:f1:ec:93:ab:65:b0:41:c3:bc:6b:f0:7f:44:7f:55:
28:34:b9:d2:bd:7f:d4:84:6e:33:e9:95:ba:9d:15:19:6a:fb:
a7:b2:81:9c:ed:41:c7:3f:40:4c:54:57:b9:cb:83:9d:2d:a2:
65:da:2d:88:cd:bd:ee:9c:c3:45:da:d7:99:55:d4:b0:9f:c1:
7b:3a:bc:a1:3b:59:0e:fb:58:ea:d6:c1:e2:89:f1:ea:8c:a4:
c8:7e:5b:be:1d:45:0c:40:c2:5c:54:6c:db:6d:12:bf:10:0f:
88:db:b4:cc:cf:5e:c8:93:61:31:82:0a:da:9c:78:3e:55:6e:
bd:fa:ac:af:93:39:69:e7:dd:4c:56:f0:ff:06:85:6c:1f:14:
b1:49:b5:51:fe:4c:71:dd:c7:63:f8:50:3b:62:e7:2b:69:34:
7c:f6:59:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:49 2026 by rpki-client