Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
File: ftCMDM2oAs8gznq97qICFOBeR68.mft (raw, json)
Hash identifier: OngpKWGrGzYVSVZArUh963KoLbPBJJYDiAD9ykxvYN4=
Subject key identifier: 1A:C9:EB:0E:F2:6E:B3:E1:61:B2:51:B7:01:71:D9:4B:62:DB:67:FE
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Certificate issuer: /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial: 019CAD231315972F1C846B99BC5EB72A805F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 06:01:22 +0000
Manifest this update: Mon 02 Mar 2026 06:01:22 +0000
Manifest next update: Tue 03 Mar 2026 06:01:22 +0000
Files and hashes: 1: KrMG047MsDkcwkxBcUD2n7II2ek.roa (hash: 6Sar3x354qtl7kCtCHhcg2W3/WLEoHt036CjyIz1o2g=)
2: ftCMDM2oAs8gznq97qICFOBeR68.crl (hash: 0PXEHaqeT7dUu2cm0kiz8FsZiDnlHNazW+OvEwQgAmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:13:15:97:2f:1c:84:6b:99:bc:5e:b7:2a:80:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Validity
Not Before: Mar 2 06:01:22 2026 GMT
Not After : Mar 3 06:01:22 2026 GMT
Subject: CN=1ac9eb0ef26eb3e161b251b70171d94b62db67fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:f6:8e:cb:16:65:19:7c:63:aa:15:7e:f4:
7e:d3:02:14:db:6d:e1:e2:22:f7:97:22:bb:d5:70:
03:58:db:5c:5a:19:2d:3d:39:0d:70:7f:8b:3a:13:
58:7c:bf:47:83:05:71:54:f1:8a:02:55:5f:f4:0c:
55:3c:41:59:bd:9e:3b:f2:6d:56:fd:2e:ee:10:82:
af:5b:39:37:a1:78:bd:0a:8e:4b:5e:12:bd:79:84:
28:37:bf:37:a7:49:eb:de:62:5d:13:38:6c:81:b7:
6a:0e:bb:ac:86:a1:b8:68:89:77:0a:be:1f:9e:bf:
3d:89:f2:fb:5c:e7:68:44:f2:de:91:dd:7a:1c:0a:
78:ad:92:43:fc:0d:68:a7:6e:86:db:c6:7b:d4:14:
6a:d5:4d:21:59:11:f7:e1:6d:12:05:8d:20:d6:d4:
fa:31:25:b5:05:0f:2f:e8:16:c8:6e:00:ce:59:18:
f9:c9:21:0d:a6:7f:3b:e5:f9:47:d7:11:2c:05:ff:
fb:bc:1f:03:bf:37:cb:b6:63:17:e9:40:cd:d7:3b:
1c:88:0f:e4:8f:a7:6f:40:4a:a4:89:4f:cc:35:81:
6a:0a:94:d8:16:25:90:cc:2c:2f:a9:49:2d:bf:98:
22:1a:47:b8:78:1d:2d:58:e2:59:f0:80:aa:7e:13:
49:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C9:EB:0E:F2:6E:B3:E1:61:B2:51:B7:01:71:D9:4B:62:DB:67:FE
X509v3 Authority Key Identifier:
keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5c:49:3b:95:c0:de:db:a7:84:84:30:41:47:77:73:fc:06:
eb:45:8e:ae:78:08:e6:ca:87:07:25:dc:a8:75:53:2d:24:fe:
93:a0:8c:88:6b:91:80:49:25:cf:71:0b:72:ec:49:c8:77:f6:
77:a9:86:5c:75:fe:c2:30:d9:12:7f:c9:1a:6b:2f:2d:ca:c7:
cd:c8:8a:bd:11:bb:0d:79:14:8d:8f:91:49:98:b7:49:24:f2:
23:ec:80:7b:a1:a5:e5:19:7f:6a:cf:a0:f5:69:4e:5f:9c:c9:
02:29:b1:32:d2:9b:a4:ee:ab:0d:0b:67:27:a3:26:69:81:79:
80:71:2d:2f:6f:67:be:a1:3f:05:73:6b:15:66:49:b0:d8:ec:
9b:45:9c:ce:cb:d7:8d:dc:92:60:96:57:7a:6e:4f:1c:15:ae:
96:8b:42:b1:ef:45:bc:c0:3f:30:52:1c:45:65:24:ae:66:10:
69:ab:19:34:91:38:d1:13:80:8f:ea:1e:39:b1:c2:b1:2e:fb:
77:bd:dd:da:b4:e5:bc:df:f5:54:b1:6f:e5:d1:75:5a:80:64:
07:48:74:29:c8:a8:a3:48:7e:77:e0:da:11:60:35:fd:47:09:
2c:8f:6a:72:89:11:15:e3:ff:6d:65:58:19:5c:69:ae:67:e0:
7a:55:60:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:34 2026 by rpki-client