Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json)
Hash identifier: /ok7jetvye+iISkaIJFn6oQF+XfeH/fj0h7L1N9La2A=
Subject key identifier: 9C:BA:0E:1E:37:35:9D:E5:0F:19:45:A5:B5:6F:60:EB:68:B5:C2:B5
Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252
Certificate serial: 01A0D2377630CF05FD63F83F80F07ADF229A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
Manifest number: 042E
Signing time: Thu 24 Sep 2026 07:00:45 +0000
Manifest this update: Thu 24 Sep 2026 07:00:45 +0000
Manifest next update: Fri 25 Sep 2026 07:00:45 +0000
Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: jnlWQgr3xeBCeM/6PNoM8hBxmAmYfXWNZ5OQtkzVdUM=)
2: LaKgTWrQkobeVQ1YjLHD79ykJ5M.roa (hash: aWACl4kesdkEy6/Xa5+RkoBL499zzk7WgONY6WBsSTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:76:30:cf:05:fd:63:f8:3f:80:f0:7a:df:22:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d409032818a628cd2b28383802d77e7494a252
Validity
Not Before: Sep 24 07:00:45 2026 GMT
Not After : Sep 25 07:00:45 2026 GMT
Subject: CN=9cba0e1e37359de50f1945a5b56f60eb68b5c2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:17:1f:49:cb:62:07:f7:76:9a:05:dd:66:07:
65:21:27:a1:21:20:ac:94:1f:6f:8f:7e:10:e2:18:
c4:d9:24:82:49:1e:61:36:b9:ab:ec:7d:95:ba:d8:
bf:cd:2b:c3:28:1c:70:00:ba:0b:86:d9:5b:95:a2:
6c:b4:0c:0e:dc:ac:b6:ce:62:b1:eb:19:e7:2c:c8:
b4:45:d2:e8:17:98:45:59:ed:b6:81:e7:4d:9b:dd:
52:53:31:bc:fc:38:4e:b6:5a:d9:7f:c3:3f:07:fa:
a8:8d:a1:60:36:0c:dd:e8:25:3e:60:12:be:7c:3b:
27:c6:a2:8c:ce:89:42:ee:b4:a1:ed:ba:cc:dd:a9:
88:86:af:24:a3:e9:80:9e:ae:55:b5:d6:b4:94:45:
99:3b:f1:9e:73:21:dc:ef:74:2b:71:fe:55:e2:63:
63:16:fd:3a:d6:e2:ee:2f:10:0e:64:36:61:e5:0f:
03:25:63:8e:b1:a2:9c:ac:ae:03:20:d8:a3:d4:89:
29:a7:c7:1a:2d:78:77:79:2e:a3:29:8f:9c:68:90:
dc:01:54:08:ac:18:1c:2b:36:ad:fb:98:70:56:82:
bb:24:f9:47:a3:ce:4c:a0:d8:cc:3f:7b:38:7c:80:
26:c0:53:66:5a:35:98:87:ed:ee:be:39:24:53:70:
6a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BA:0E:1E:37:35:9D:E5:0F:19:45:A5:B5:6F:60:EB:68:B5:C2:B5
X509v3 Authority Key Identifier:
keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f9:a3:c3:54:a7:28:eb:93:d4:73:ba:11:bc:cb:df:50:e5:
05:85:02:40:28:25:5d:ac:8c:3e:68:c4:b2:92:e5:d9:a4:08:
c2:77:4d:bc:d0:8a:45:89:1f:5c:f5:df:c2:58:f9:20:1e:59:
3d:0a:15:6d:23:19:12:6c:4b:53:2e:2a:04:55:3f:19:83:64:
11:5b:4f:3b:61:64:ed:c3:0c:41:e6:8d:ec:33:ff:b0:95:59:
43:04:64:95:5b:39:96:ee:4b:98:3b:9d:e6:96:de:86:84:d5:
9d:f6:4f:00:12:76:66:d6:7f:fc:b3:0b:df:e7:14:5f:01:fd:
7b:6c:54:ff:e5:25:3d:83:1a:74:41:02:34:e8:e0:4a:00:9c:
bd:bc:e4:0c:72:2a:69:99:49:75:ba:be:ac:00:b5:40:ac:fd:
50:bd:e0:4b:1c:b4:fa:5f:7a:f6:ee:3d:ba:32:93:9f:9c:ce:
7e:96:9d:6d:b3:81:68:fc:9c:a1:0c:46:22:43:0e:40:a5:42:
5d:a6:5b:fb:b2:1e:ae:77:56:5d:bf:4f:36:2d:79:9a:30:46:
1e:4d:73:16:c2:21:5c:a5:55:25:17:ed:f5:7a:c0:35:9e:27:
f3:0e:a0:68:8b:43:c1:07:6e:f0:3f:96:30:40:40:81:21:54:
df:73:10:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:09:37 2026 by rpki-client