Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json)
Hash identifier: khmcxduNXh8yH2fVakRhNp/qunXhslbdOFbcvbj3ADI=
Subject key identifier: 6D:1E:DA:02:44:27:BD:6E:1D:BE:BF:01:D2:B0:68:F8:3C:49:D2:81
Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252
Certificate serial: 019CADFE10AD488EB0CD7116AD11716035EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
Manifest number: 0209
Signing time: Mon 02 Mar 2026 10:00:34 +0000
Manifest this update: Mon 02 Mar 2026 10:00:34 +0000
Manifest next update: Tue 03 Mar 2026 10:00:34 +0000
Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: FbgccPZQ0wt06J59lUv+nwTZvSEWEt3g5+nn7FWcrVw=)
2: LaKgTWrQkobeVQ1YjLHD79ykJ5M.roa (hash: aWACl4kesdkEy6/Xa5+RkoBL499zzk7WgONY6WBsSTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:10:ad:48:8e:b0:cd:71:16:ad:11:71:60:35:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d409032818a628cd2b28383802d77e7494a252
Validity
Not Before: Mar 2 10:00:34 2026 GMT
Not After : Mar 3 10:00:34 2026 GMT
Subject: CN=6d1eda024427bd6e1dbebf01d2b068f83c49d281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:e4:a8:3d:39:19:a0:49:35:d3:91:e5:23:
67:c0:b0:a1:7e:18:bb:e6:5b:1d:ce:c0:b1:6e:58:
5a:1c:eb:7d:bc:f2:95:3a:4b:ac:7d:73:ac:c1:b1:
36:a8:06:42:28:a7:aa:b3:4c:98:92:52:96:86:5a:
63:5b:b7:8e:e5:75:9f:de:7d:60:01:2f:0b:1e:01:
7b:45:cb:db:8a:a4:54:26:43:3e:fd:29:e2:c5:7f:
e2:6d:42:de:78:ac:77:cf:93:74:69:c9:f1:9f:5a:
7e:e3:ef:e8:27:08:97:db:8a:bd:be:ec:c2:bc:c9:
ff:d7:c9:c6:9c:e7:9b:99:c8:4b:53:cf:d6:32:86:
27:7b:d3:1f:5e:e3:b6:de:50:f1:62:ba:c8:e1:49:
da:72:df:03:cf:96:aa:aa:d1:ba:40:40:7d:20:ea:
fb:d1:f9:98:72:2e:4c:4d:5d:e0:9d:8e:33:a3:a1:
5d:40:5f:85:8e:95:33:f8:c8:8a:29:a4:8b:35:f8:
25:42:4c:a4:53:cf:e5:88:36:e0:d2:7f:88:2c:f9:
d0:8d:c1:cc:43:e0:5f:5f:29:cb:f6:77:72:94:54:
b0:e1:25:0d:ef:7a:1c:d6:a2:39:c6:b8:ab:0b:27:
13:2b:04:4c:26:83:1d:bb:ea:fd:e7:ad:c2:02:79:
5a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1E:DA:02:44:27:BD:6E:1D:BE:BF:01:D2:B0:68:F8:3C:49:D2:81
X509v3 Authority Key Identifier:
keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d8:d4:cc:41:7d:a4:e8:d2:9c:64:a6:e5:04:6b:fd:ac:c7:
c4:30:01:72:7b:9e:8c:5e:12:64:2d:43:ee:fe:1b:b2:f5:65:
17:aa:de:2a:d7:98:54:63:77:cc:0c:59:41:26:5f:b9:05:83:
0a:02:5b:00:f6:cb:af:eb:19:f4:a1:ab:01:53:40:c5:7f:5b:
24:97:33:b0:96:e9:2a:fa:0e:f2:e7:29:65:dd:60:6c:32:73:
b7:32:90:fa:73:60:55:0f:48:a8:84:e2:fb:a6:44:30:f5:54:
fe:a4:78:8b:ab:9c:3e:e3:1e:13:93:e3:c0:4c:4b:30:10:67:
9d:5b:b8:e9:78:71:8f:20:ce:33:57:08:e5:66:d1:10:5e:c3:
7f:86:45:1a:52:61:9a:24:a3:a0:38:81:33:71:d7:3d:18:77:
98:1f:a0:b2:2f:77:b2:90:55:1f:eb:da:a0:a5:0e:6f:3c:da:
4f:40:71:20:a0:46:0d:a7:60:1c:60:ce:42:a6:6a:aa:32:76:
26:83:71:0f:08:81:b5:d3:05:35:82:be:23:62:be:b5:c6:f5:
94:28:ef:7f:bf:5f:8d:aa:72:2b:d5:9d:fc:27:91:ee:20:58:
c4:f3:23:65:b2:e2:67:53:fc:bd:b5:19:35:3d:b4:30:ae:9f:
32:06:fc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:11 2026 by rpki-client