Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
File: ftCMDM2oAs8gznq97qICFOBeR68.mft (raw, json)
Hash identifier: uUky5nE1JmxXJXdCW1dljZ+yAg9nNnB5yu1lGcDMDz8=
Subject key identifier: 29:56:D3:81:D4:0F:9A:EE:84:90:27:84:8C:89:08:55:D1:FA:B3:85
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Certificate issuer: /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial: 019DA453AD380039D033C7DD030B9D9FF35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 06:00:40 +0000
Manifest this update: Sun 19 Apr 2026 06:00:40 +0000
Manifest next update: Mon 20 Apr 2026 06:00:40 +0000
Files and hashes: 1: KrMG047MsDkcwkxBcUD2n7II2ek.roa (hash: 6Sar3x354qtl7kCtCHhcg2W3/WLEoHt036CjyIz1o2g=)
2: ftCMDM2oAs8gznq97qICFOBeR68.crl (hash: 8mBsrAhT4RroQn/TKRjGga5wPtGVxIYG1d98Vo5hU0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:ad:38:00:39:d0:33:c7:dd:03:0b:9d:9f:f3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Validity
Not Before: Apr 19 06:00:40 2026 GMT
Not After : Apr 20 06:00:40 2026 GMT
Subject: CN=2956d381d40f9aee849027848c890855d1fab385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:50:7c:d6:b0:62:98:86:42:cc:98:97:0c:81:
45:94:f2:de:32:49:99:f1:f3:8d:9f:78:a9:b2:ed:
b3:c5:f7:a1:78:82:5f:8e:32:de:78:33:41:7c:63:
89:fb:45:48:79:09:e2:63:60:cc:20:d8:0c:e7:ac:
f1:00:e0:c7:b5:1a:1b:1b:6a:f4:72:b3:a7:3b:e2:
cd:1e:11:09:d8:f7:6f:53:8b:4a:d6:42:61:4f:30:
1b:fc:76:c9:08:88:72:ff:e9:45:de:b8:40:9b:38:
41:6a:1a:3c:84:3c:80:60:a7:b1:62:06:0b:d7:a7:
64:b6:71:a8:17:32:12:dd:25:4b:ec:f9:99:a8:0a:
c4:8b:e8:c2:18:90:96:63:49:f3:19:2d:ce:be:60:
c6:67:a8:12:a5:e3:a8:ac:d8:24:ed:02:99:b1:1e:
81:f2:2e:7d:58:a2:a2:e6:87:55:bd:59:fc:9d:6b:
89:31:e9:a1:33:a1:c8:ea:82:b9:01:10:4b:9b:03:
4a:e0:bd:4f:7b:99:e2:ed:a7:5f:af:10:18:24:43:
35:32:84:28:58:7e:cf:8d:ac:6f:0b:c3:f1:35:2b:
c3:54:5a:4d:02:d7:c4:d3:36:e7:e4:7b:d5:8f:8f:
44:fd:b4:c5:ae:2e:ae:eb:4f:fd:55:31:52:0f:79:
69:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:56:D3:81:D4:0F:9A:EE:84:90:27:84:8C:89:08:55:D1:FA:B3:85
X509v3 Authority Key Identifier:
keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:82:ec:b0:61:0c:43:a4:18:56:15:01:0a:15:64:5c:94:4e:
99:61:c1:2a:85:a9:69:20:e6:d6:71:f3:7a:24:2f:c9:97:a6:
20:9d:f6:b1:31:e8:93:2d:b6:04:21:ed:f5:6f:6b:a3:b5:2a:
71:26:c9:44:ba:52:b8:c0:aa:ed:ea:43:f9:32:80:1f:4f:ae:
dd:d4:02:19:06:7f:ad:56:b1:48:f9:23:59:9f:d1:84:08:14:
b7:1d:5e:0e:76:d5:a6:a0:0a:cc:da:39:06:3e:02:4e:64:96:
6e:a3:7b:86:7e:eb:cd:af:20:46:c8:2d:64:cc:7c:d7:eb:78:
fa:4b:55:be:2b:a6:da:03:4f:60:1f:f7:6e:2d:d0:39:05:f2:
79:95:96:f2:77:8a:93:0c:98:af:14:b9:a3:ba:53:02:55:33:
73:bb:3d:40:05:c1:86:06:d2:b4:14:fd:22:77:1f:c8:cf:dc:
42:8d:e6:3d:9a:db:e1:bd:5b:1a:23:bf:9e:8e:38:6a:06:3a:
e8:eb:04:c9:ba:b6:a9:ac:69:fa:4d:01:17:6b:14:dc:8f:fd:
99:1c:fa:37:bd:b4:86:ac:9b:ea:ce:29:46:7a:9e:06:ec:ed:
0f:01:92:42:d9:b1:f7:b2:a9:8d:01:36:a9:d9:1b:87:4e:5c:
4c:2e:cc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:40:00 2026 by rpki-client