Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json)
Hash identifier: ppZ/MI/QXrsADBuDu4RUuLn+9EHmjgqll9Lu8KCthck=
Subject key identifier: 50:7B:F2:D2:7B:97:D4:78:0C:91:A0:A2:E0:26:DF:86:10:19:5B:63
Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252
Certificate serial: 019D9B87FF595FBD498A98D06094E5DF5F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
Manifest number: 0284
Signing time: Fri 17 Apr 2026 13:01:14 +0000
Manifest this update: Fri 17 Apr 2026 13:01:14 +0000
Manifest next update: Sat 18 Apr 2026 13:01:14 +0000
Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: Fo8RfnJ1r+7LGm+Pwz7h9nZRK40CWMRPQpAV5cD9nLY=)
2: LaKgTWrQkobeVQ1YjLHD79ykJ5M.roa (hash: aWACl4kesdkEy6/Xa5+RkoBL499zzk7WgONY6WBsSTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:ff:59:5f:bd:49:8a:98:d0:60:94:e5:df:5f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d409032818a628cd2b28383802d77e7494a252
Validity
Not Before: Apr 17 13:01:14 2026 GMT
Not After : Apr 18 13:01:14 2026 GMT
Subject: CN=507bf2d27b97d4780c91a0a2e026df8610195b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:96:ee:d2:50:be:9b:c4:fe:9e:ab:8b:55:
d2:7b:9d:39:c4:8d:2e:94:f3:1c:bd:79:8b:34:13:
62:83:95:b5:a4:46:ad:93:19:0d:08:7c:f4:03:98:
b2:0e:b8:77:1c:8a:6f:63:10:8d:07:d0:96:da:cb:
91:85:01:10:85:6a:6a:5f:be:db:9c:46:e0:fb:9b:
3e:29:3d:62:0b:b8:cf:52:68:b4:04:43:54:fd:34:
be:3e:81:23:01:be:60:b5:7d:df:53:b2:ea:d1:f8:
77:86:29:52:ae:5a:db:4f:32:de:b7:c0:18:09:89:
13:13:77:55:b9:89:01:8c:a8:44:62:5a:02:e6:4a:
d0:7a:bb:71:f8:87:0f:f1:8b:16:1c:6f:02:22:d5:
8e:58:4f:1a:97:a9:1b:f3:e0:5f:b6:73:dd:bd:c6:
d0:0e:0e:d5:1b:d7:1f:0d:7e:70:f1:28:14:7a:be:
38:20:5a:f2:60:52:de:ba:f5:0d:c0:53:b0:21:75:
cd:db:52:66:fc:1f:41:24:32:2a:d8:a4:0e:93:b3:
25:b8:51:8a:a0:95:54:2d:66:1f:e1:02:28:23:e4:
93:88:db:4f:cf:a9:86:5b:df:0b:56:6d:a6:26:61:
cc:c5:fe:11:cf:c0:83:01:fb:a1:7c:a7:bf:25:fd:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7B:F2:D2:7B:97:D4:78:0C:91:A0:A2:E0:26:DF:86:10:19:5B:63
X509v3 Authority Key Identifier:
keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:17:bb:d4:6a:21:1b:22:48:fd:f7:4a:85:a3:4f:86:72:f2:
be:2c:7a:1b:a8:3d:ad:e7:ae:84:06:11:15:8e:af:a8:7e:28:
24:e9:f1:eb:a9:d4:ce:38:c4:81:43:0f:b4:97:ec:64:16:65:
46:75:6b:f2:a9:c9:bf:09:50:32:a0:bb:b5:0f:cb:a5:ed:0e:
7b:88:3c:d8:af:28:10:87:e1:7f:63:06:32:f4:41:51:fb:21:
b6:35:f9:ae:05:ec:14:d1:fa:e1:80:ae:f2:13:ed:69:b3:ca:
48:0d:59:bb:90:ba:72:d8:10:17:66:f2:ed:fa:92:16:00:39:
12:d4:db:5e:5f:d3:a8:9f:1e:e1:69:7e:c2:3e:00:d5:13:d0:
64:29:5d:3d:ef:ee:3d:4f:ad:f6:7a:56:16:1b:0c:83:51:4f:
5c:63:40:3d:ef:a7:a5:b5:89:f2:65:c0:4e:ed:58:61:58:a4:
95:96:d5:c8:10:ff:8d:1c:52:bf:b9:75:0d:66:5c:b8:4c:79:
69:12:77:e6:7e:d2:85:55:62:a3:82:3c:f1:37:5f:d9:17:6e:
88:0e:30:bc:3a:3c:28:c5:e6:cd:a4:4d:d5:66:db:33:ec:6d:
53:1b:2b:6b:2b:23:32:90:62:7d:cd:6d:21:98:16:9d:c5:ef:
68:59:08:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh/9ZX71JipjQYJTl319NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZDQwOTAzMjgxOGE2MjhjZDJiMjgzODM4MDJkNzdlNzQ5
NGEyNTIwHhcNMjYwNDE3MTMwMTE0WhcNMjYwNDE4MTMwMTE0WjAzMTEwLwYDVQQD
Eyg1MDdiZjJkMjdiOTdkNDc4MGM5MWEwYTJlMDI2ZGY4NjEwMTk1YjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMiW7tJQvpvE/p6ri1XSe505xI0u
lPMcvXmLNBNig5W1pEatkxkNCHz0A5iyDrh3HIpvYxCNB9CW2suRhQEQhWpqX77b
nEbg+5s+KT1iC7jPUmi0BENU/TS+PoEjAb5gtX3fU7Lq0fh3hilSrlrbTzLet8AY
CYkTE3dVuYkBjKhEYloC5krQertx+IcP8YsWHG8CItWOWE8al6kb8+BftnPdvcbQ
Dg7VG9cfDX5w8SgUer44IFryYFLeuvUNwFOwIXXN21Jm/B9BJDIq2KQOk7MluFGK
oJVULWYf4QIoI+STiNtPz6mGW98LVm2mJmHMxf4Rz8CDAfuhfKe/Jf15EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFB78tJ7l9R4DJGgouAm34YQGVtjMB8GA1UdIwQY
MBaAFBbUCQMoGKYozSsoODgC1350lKJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMt
MGFlYjlkMzc3ODdlLzEvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMtMGFlYjlkMzc3ODdl
LzEvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRe71Goh
GyJI/fdKhaNPhnLyvix6G6g9reeuhAYRFY6vqH4oJOnx66nUzjjEgUMPtJfsZBZl
RnVr8qnJvwlQMqC7tQ/Lpe0Oe4g82K8oEIfhf2MGMvRBUfshtjX5rgXsFNH64YCu
8hPtabPKSA1Zu5C6ctgQF2by7fqSFgA5EtTbXl/TqJ8e4Wl+wj4A1RPQZCldPe/u
PU+t9npWFhsMg1FPXGNAPe+npbWJ8mXATu1YYViklZbVyBD/jRxSv7l1DWZcuEx5
aRJ35n7ShVVio4I88Tdf2RduiA4wvDo8KMXmzaRN1WbbM+xtUxsraysjMpBifc1t
IZgWncXvaFkI6Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:58:46 2026 by rpki-client