Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
File: FTXSThc2fkBbeA9xEEnl940QHxY.mft (raw, json)
Hash identifier: r/X+IlD75Y1aiZMzkaSXP0E6FQzlsbvDdUnxAwiM3Zc=
Subject key identifier: A1:A3:F5:F2:5D:C0:D3:88:75:F5:DF:0F:12:5D:1E:82:F7:D7:8E:96
Authority key identifier: 15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
Certificate issuer: /CN=1535d24e17367e405b780f711049e5f78d101f16
Certificate serial: 019D98BD91F895D5D1ECAA07E4CBC4AA8581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
Manifest number: 149D
Signing time: Fri 17 Apr 2026 00:00:53 +0000
Manifest this update: Fri 17 Apr 2026 00:00:53 +0000
Manifest next update: Sat 18 Apr 2026 00:00:53 +0000
Files and hashes: 1: FTXSThc2fkBbeA9xEEnl940QHxY.crl (hash: JVril/YqUJNEJzUH6I4zz8yvAtSeqaT/Yil9/vyjSqE=)
2: XdCzrXLhnjwJ8yBYNm69QxUeO5A.roa (hash: Q7iCQLw3LeLyUg+qshhdU21++GYyz/g1gumZUpCqGtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:91:f8:95:d5:d1:ec:aa:07:e4:cb:c4:aa:85:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1535d24e17367e405b780f711049e5f78d101f16
Validity
Not Before: Apr 17 00:00:53 2026 GMT
Not After : Apr 18 00:00:53 2026 GMT
Subject: CN=a1a3f5f25dc0d38875f5df0f125d1e82f7d78e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:65:be:f3:6e:46:a0:8d:55:97:78:72:46:29:
f0:24:76:22:58:26:cf:5d:0d:f4:71:99:49:c0:fc:
12:8e:5f:e0:b8:ff:f2:f4:35:f0:b8:28:bc:7d:5c:
8a:a1:6b:f1:32:b9:76:77:71:44:6e:69:ef:a9:61:
e7:d5:54:73:01:97:d3:66:be:27:95:b3:52:36:19:
8a:36:76:35:74:1b:f5:75:86:5f:a4:96:07:dc:19:
a0:ff:4d:98:c7:fb:16:cd:d0:b9:8d:6f:0b:50:5b:
18:83:b7:a7:2f:5c:c1:bf:34:9a:9f:56:76:fc:01:
5a:1b:43:88:35:c4:f1:eb:0c:ce:30:51:59:70:3e:
e1:62:6d:60:b3:b1:53:15:c1:37:3a:8e:bb:b7:a0:
99:2d:a9:a8:10:12:da:eb:de:00:9b:12:ba:7e:10:
e7:69:22:8e:33:21:95:3e:58:10:fa:85:62:ce:ed:
de:79:db:23:23:e5:c5:dd:ec:d7:d7:0b:ab:55:93:
23:44:77:4c:c0:91:52:c2:bf:5e:a5:21:67:63:39:
86:c6:88:44:1f:3a:73:33:88:22:43:19:36:3c:9d:
24:6e:0b:ae:03:c5:38:70:a5:44:21:a2:e4:ca:75:
78:89:c8:10:8f:e2:5f:56:96:38:49:de:7b:a8:bb:
0a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A3:F5:F2:5D:C0:D3:88:75:F5:DF:0F:12:5D:1E:82:F7:D7:8E:96
X509v3 Authority Key Identifier:
keyid:15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:18:20:9b:d7:d2:63:aa:ec:84:b3:72:1c:d8:7e:ed:f6:4b:
f5:e1:59:65:e0:61:3c:5f:62:8a:d5:5c:06:f6:ac:3a:9c:51:
c9:da:78:91:ea:5c:9e:ca:e0:c8:26:a6:8a:a6:ff:52:c3:27:
fd:ba:7e:57:14:3f:64:81:19:f3:77:18:82:ff:43:25:f8:23:
ff:79:fc:6f:1b:38:a6:74:a2:f9:c0:e1:48:45:c8:3b:a3:fb:
39:da:bf:6a:44:42:28:4c:71:9f:ab:0a:8b:59:77:d5:ba:9e:
bb:da:b5:19:97:e0:9f:b4:d2:61:2b:8b:3c:15:53:3f:86:8c:
34:24:74:b6:1d:d8:48:dd:e8:5e:61:6a:0c:bf:25:4b:df:29:
ba:92:66:d7:c0:30:e6:9d:08:29:71:b5:fc:2f:ec:e7:46:22:
ae:e0:cf:d3:e6:d4:87:4d:9a:a3:32:13:c1:d9:ad:60:b3:1f:
75:e4:84:0a:19:f7:11:ad:69:b9:d4:89:7e:82:42:10:79:73:
05:cc:b9:22:e6:97:ec:6c:9a:57:4e:43:28:37:45:01:29:37:
10:fa:be:fb:b4:7f:0e:10:9b:01:1a:c8:bc:fa:ed:7d:c0:6f:
b7:2d:38:db:8d:dd:d5:70:f3:a8:7f:92:b5:25:6d:55:6d:3a:
8b:26:73:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:37 2026 by rpki-client