Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json)
Hash identifier: 2eI7V6qUapaQOAds/lc1GH/kcZrhCl3eL87VXfU2QyM=
Subject key identifier: 77:74:4D:D0:E4:3B:02:34:B4:13:D3:14:6B:43:D3:06:F7:50:0F:E7
Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252
Certificate serial: 019FAABE873ED48FA158259E82CF83265957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
Manifest number: 0395
Signing time: Tue 28 Jul 2026 22:00:40 +0000
Manifest this update: Tue 28 Jul 2026 22:00:40 +0000
Manifest next update: Wed 29 Jul 2026 22:00:40 +0000
Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: XWP7kyj7dsji69RKCWBe1URlCuBgwig5qpw18cI3pVE=)
2: LaKgTWrQkobeVQ1YjLHD79ykJ5M.roa (hash: aWACl4kesdkEy6/Xa5+RkoBL499zzk7WgONY6WBsSTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:87:3e:d4:8f:a1:58:25:9e:82:cf:83:26:59:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d409032818a628cd2b28383802d77e7494a252
Validity
Not Before: Jul 28 22:00:40 2026 GMT
Not After : Jul 29 22:00:40 2026 GMT
Subject: CN=77744dd0e43b0234b413d3146b43d306f7500fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:da:6d:f2:06:c8:72:8e:c9:8f:53:a3:53:a2:
24:e0:77:50:3f:f7:a7:ba:61:23:be:66:0b:7d:10:
50:ae:99:98:9b:18:04:c0:3e:01:63:89:16:cc:d8:
87:18:e9:bf:91:33:64:77:19:38:c2:68:0e:9b:be:
3a:13:d5:89:d0:f6:3d:d7:98:44:e0:0e:44:e3:ce:
f1:5e:5d:a8:02:47:6a:21:58:00:cc:c3:55:05:4d:
be:e4:01:7e:35:07:83:08:c1:9f:ca:56:61:d9:ee:
a3:d7:a9:6c:fe:4d:98:5c:d9:23:9e:7c:d4:0b:a4:
e4:82:86:e2:b6:24:ed:87:67:56:82:6e:20:ce:25:
ed:dd:f0:bd:91:59:aa:d8:2c:9e:09:3f:28:f0:83:
a7:12:bc:76:da:60:6c:4e:b3:18:f8:0d:63:61:72:
c0:ca:4e:11:ca:01:27:a3:a0:54:b2:31:c2:4c:de:
4f:f9:f9:47:1c:6a:36:22:ea:bf:2a:0a:1c:c6:03:
05:24:99:c9:32:28:b9:cb:b7:70:0b:b1:19:1b:f9:
99:89:f3:c8:ec:9c:5f:61:a4:0d:8f:70:dd:3e:17:
83:49:9c:b7:39:39:ba:15:2e:47:c9:e7:dc:5a:99:
b5:54:7b:4c:e1:7c:98:ff:51:c9:48:ab:15:11:a5:
04:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:74:4D:D0:E4:3B:02:34:B4:13:D3:14:6B:43:D3:06:F7:50:0F:E7
X509v3 Authority Key Identifier:
keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b0:ff:d9:f9:36:96:dc:af:32:8a:11:d7:b1:d6:c2:88:67:
6d:23:54:b5:49:54:85:34:60:a9:3b:0e:82:3a:03:8a:bc:ba:
4f:4a:bc:ca:a1:30:1f:8c:47:fc:fd:b8:70:90:55:56:67:aa:
a5:c3:ec:c8:04:a2:39:40:88:96:f1:2c:ae:9b:0c:b2:1c:ba:
c9:7d:c2:92:28:f0:8a:ea:21:8f:d0:ba:09:bd:59:f2:c4:cc:
44:f4:0e:a5:0b:c6:c9:83:c4:6d:63:97:e4:66:d5:9f:3c:e5:
6c:a0:1c:8f:2a:e2:bd:ca:bd:9a:da:32:52:d5:e4:a7:67:4f:
ba:3f:9f:6d:d5:74:cd:07:ee:d9:05:be:99:92:01:44:77:31:
9d:a6:98:0d:bb:a8:90:7f:da:ee:32:a9:67:62:49:5e:cd:0b:
8c:59:94:be:6d:d6:ac:bd:5a:32:80:b9:fe:d5:be:5d:72:98:
ce:06:3b:67:14:3f:5d:93:bc:d3:a0:e7:c2:c1:8d:3b:f3:5a:
85:72:e5:b9:02:1b:c9:35:fe:54:21:c1:35:15:82:bc:d5:ca:
28:1c:c3:36:5d:48:b2:aa:c6:9c:d9:c0:9c:5b:5c:dd:6f:a3:
ab:de:6a:96:e3:c8:c0:6d:44:c6:db:36:04:33:40:52:ee:aa:
c6:e6:c3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:03 2026 by rpki-client