Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
File: FTXSThc2fkBbeA9xEEnl940QHxY.mft (raw, json)
Hash identifier: CngJr+TMgfhpw/PnvqIUwT9U1tU3kT+pnR9+H8I84QE=
Subject key identifier: 22:DC:91:DA:84:13:D4:44:4E:6F:14:FD:BB:12:55:F6:E6:5E:DA:4B
Authority key identifier: 15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
Certificate issuer: /CN=1535d24e17367e405b780f711049e5f78d101f16
Certificate serial: 019CAD22A8171316C623E60CEB0275CBA4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
Manifest number: 1423
Signing time: Mon 02 Mar 2026 06:00:55 +0000
Manifest this update: Mon 02 Mar 2026 06:00:55 +0000
Manifest next update: Tue 03 Mar 2026 06:00:55 +0000
Files and hashes: 1: FTXSThc2fkBbeA9xEEnl940QHxY.crl (hash: rzvveZAKfQIarmGnnIKFN1J1ARZN9sEeMi3m0xSjePc=)
2: XdCzrXLhnjwJ8yBYNm69QxUeO5A.roa (hash: Q7iCQLw3LeLyUg+qshhdU21++GYyz/g1gumZUpCqGtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:a8:17:13:16:c6:23:e6:0c:eb:02:75:cb:a4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1535d24e17367e405b780f711049e5f78d101f16
Validity
Not Before: Mar 2 06:00:55 2026 GMT
Not After : Mar 3 06:00:55 2026 GMT
Subject: CN=22dc91da8413d4444e6f14fdbb1255f6e65eda4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:17:b6:9e:99:3d:f2:55:ad:99:c4:a6:fe:
35:b0:08:01:8e:7a:bb:07:3d:13:9c:fc:7e:fa:b1:
2e:74:73:e0:0c:4b:42:1d:54:c7:a6:26:62:25:7e:
0e:67:ee:53:b4:ff:aa:64:92:ab:0d:70:b8:a9:b9:
d7:83:78:e4:1a:bb:f9:5f:59:0b:3c:95:1f:3e:9a:
b1:c6:ce:a8:00:e3:86:07:c4:22:96:be:7a:cb:86:
f0:4a:17:b7:b8:3a:60:6f:93:cb:c2:bd:46:c3:51:
bb:2d:1a:9c:f3:29:18:77:2d:cb:ca:b2:b4:bb:cf:
b2:73:ec:d1:42:64:58:5d:c2:dc:9d:ca:04:da:6b:
c3:88:b1:cc:03:a0:b6:73:21:a6:9a:47:fd:50:a0:
66:91:09:24:e3:f3:79:4e:c0:56:d9:56:fa:ec:8e:
2d:d5:9f:7a:20:70:27:48:44:51:6e:e0:7d:12:e4:
f3:fe:9f:f3:1a:f9:4c:65:39:3f:bb:f7:5f:f1:4d:
48:a1:1e:d1:32:00:82:83:ba:92:35:4a:64:18:49:
f3:6a:bf:06:fb:9a:92:ed:4a:cf:14:fe:66:b7:98:
56:17:88:6d:d2:f4:75:8e:55:31:9a:ac:d1:8b:7c:
4f:2b:d1:a1:bf:d3:db:f3:4e:eb:a6:8b:93:09:94:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DC:91:DA:84:13:D4:44:4E:6F:14:FD:BB:12:55:F6:E6:5E:DA:4B
X509v3 Authority Key Identifier:
keyid:15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:86:0e:54:aa:42:8c:c5:0b:86:e6:99:36:3c:92:69:58:ce:
06:ae:24:e0:9a:c9:e8:a8:73:79:55:2e:d4:11:31:2e:cf:ce:
bc:27:d2:08:7b:2b:49:cc:90:33:e1:70:1e:51:60:66:05:d3:
4b:2a:99:f2:b4:33:ad:db:8b:9f:0c:0d:ca:89:90:e9:09:0d:
c9:13:2e:4e:bb:51:43:fb:78:84:42:04:5e:f6:ff:77:6c:40:
26:b8:8f:0f:f5:79:e4:97:df:d6:c6:e6:24:50:51:9e:44:f6:
08:d6:bd:b8:f4:a4:aa:cf:b9:4b:3c:4c:ec:52:c7:27:aa:05:
ea:5e:6a:16:96:81:64:a0:2a:e1:0b:f9:35:07:13:e1:b3:be:
c7:86:e7:ce:58:8b:da:ed:15:46:0d:39:e1:cc:f1:b2:3b:88:
98:3c:0f:ce:75:3d:a6:de:89:ea:28:26:fc:5c:79:ce:28:7c:
7b:e4:25:07:c9:dc:f7:50:c1:dc:9e:2d:e5:bd:79:0c:81:28:
5e:6b:c0:2a:ff:33:e8:fd:3f:1d:e1:16:76:70:bb:bc:d7:f6:
51:67:93:58:cb:ec:26:2d:19:e8:1b:e9:2e:bf:d0:b8:f7:51:
7f:09:bc:09:be:38:f7:77:06:93:75:5d:92:84:c8:b5:ba:e9:
08:e4:0d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:21 2026 by rpki-client