Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: lHgcGRHlCQq2m6AxHiU3bssY1WjmJgIryQatH6gBvJQ=
Subject key identifier: 3C:A4:BB:70:3A:F7:D6:8A:26:6B:33:70:1F:55:11:A4:62:C5:A8:93
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 01A0C77D3B29259489F4B8ECE79360EFE6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 1A40
Signing time: Tue 22 Sep 2026 05:01:08 +0000
Manifest this update: Tue 22 Sep 2026 05:01:08 +0000
Manifest next update: Wed 23 Sep 2026 05:01:08 +0000
Files and hashes: 1: LJweqdiAuex5ffHJZ-p0UeT6XrY.asa (hash: qexPojaaUKUXJCAIdb2LuHOm0GKtKH2oA0dqsygCpWc=)
2: O7voTXfNHlJYLDFfFhD0IyP6RWQ.roa (hash: LffxuYhlhgmo9uurPfnZvk9c5Vb5QUT4U1yEBcpzUI0=)
3: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: fNDHAfYRaTAuyXJwAr56As6uoIa5GjsWjFR5qZ7JhpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7d:3b:29:25:94:89:f4:b8:ec:e7:93:60:ef:e6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: Sep 22 05:01:08 2026 GMT
Not After : Sep 23 05:01:08 2026 GMT
Subject: CN=3ca4bb703af7d68a266b33701f5511a462c5a893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:78:95:1e:9f:e6:09:36:7c:b1:81:59:58:
e1:1c:2a:fa:d5:e0:02:f0:4b:4f:c8:ae:cb:69:9d:
96:d5:5d:ff:1e:82:05:e1:3b:c6:53:e3:21:88:0a:
68:36:5f:0b:67:86:28:4c:b5:52:63:55:ad:cc:64:
62:ee:1f:d7:96:9b:b5:93:89:a5:86:0e:c4:6d:88:
57:03:79:0c:e9:30:64:59:48:2d:9d:0e:05:9f:81:
1f:17:fe:09:7d:9a:ca:3c:55:95:36:be:eb:ae:12:
79:07:76:3f:ab:86:b7:86:95:f7:48:5c:a2:95:b8:
90:46:9c:00:fe:7b:43:37:75:66:ed:7e:5d:82:ed:
a0:68:eb:a3:f0:14:c1:36:0f:61:e5:fc:38:d1:63:
73:65:f4:67:c4:e2:2d:b0:a9:2b:1d:7c:bf:d2:45:
b1:52:e5:95:90:18:3e:72:98:80:95:5a:24:9c:73:
16:65:04:53:01:1e:9a:b0:6d:fa:96:27:fa:a0:5b:
0d:a8:a6:a2:57:7f:c5:15:48:7c:d9:b9:79:2a:ed:
c5:c5:7f:c1:49:8d:34:b0:f4:4b:f3:b8:30:ec:99:
7c:16:c3:48:bc:81:39:db:07:ae:80:87:ae:47:b5:
55:16:18:0a:0f:93:91:6e:b4:b1:5e:21:af:70:ba:
a5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A4:BB:70:3A:F7:D6:8A:26:6B:33:70:1F:55:11:A4:62:C5:A8:93
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:02:0b:10:d5:a0:71:20:fe:b0:53:9c:d7:1a:cf:ea:b1:fa:
12:c7:d8:c3:49:13:44:39:61:c5:21:51:ce:08:3f:c5:7c:3d:
ff:c2:34:a2:47:f5:fd:9a:3d:0b:1b:61:72:bc:eb:ee:31:06:
a7:0a:d7:01:ad:96:2b:cc:98:dd:45:76:67:fa:c4:41:93:2b:
bc:4d:65:c7:33:85:c4:0c:30:c2:9d:16:27:7c:07:1d:37:ba:
a6:cb:f5:9d:b2:ab:0e:bd:20:5e:cf:7c:86:91:0f:76:e6:4a:
c5:5c:ad:ad:3d:7b:53:5d:58:bf:60:46:a6:13:c8:eb:7d:1c:
6d:a4:b4:e8:07:d1:f7:9a:19:87:a7:b3:f3:bf:88:af:75:28:
1d:80:f4:2f:cd:af:a5:f1:6d:c2:35:90:7c:74:7f:5f:34:c7:
1e:09:59:38:bd:1c:5b:b6:aa:a7:45:b1:0d:18:e0:8d:35:9d:
5a:af:42:95:76:d3:11:71:8b:28:b5:b8:e4:29:55:7e:fc:a0:
e2:8a:b0:a3:09:92:bd:21:19:2d:f5:c0:51:c1:a2:e9:08:c2:
ef:af:09:b4:18:1e:e7:b0:f0:5d:ef:d3:12:44:64:96:7e:c6:
e6:b9:38:9e:e6:b3:3c:64:90:1c:8b:09:df:19:70:85:ab:a5:
6e:aa:99:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHfTspJZSJ9Ljs55Ng7+bVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkM2IyYzMzM2I3Mjk1NTdhYzBiZTAyNzQwYjIyMjk2ZDgw
MmJmODEwHhcNMjYwOTIyMDUwMTA4WhcNMjYwOTIzMDUwMTA4WjAzMTEwLwYDVQQD
EygzY2E0YmI3MDNhZjdkNjhhMjY2YjMzNzAxZjU1MTFhNDYyYzVhODkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvN4lR6f5gk2fLGBWVjhHCr61eAC
8EtPyK7LaZ2W1V3/HoIF4TvGU+MhiApoNl8LZ4YoTLVSY1WtzGRi7h/Xlpu1k4ml
hg7EbYhXA3kM6TBkWUgtnQ4Fn4EfF/4JfZrKPFWVNr7rrhJ5B3Y/q4a3hpX3SFyi
lbiQRpwA/ntDN3Vm7X5dgu2gaOuj8BTBNg9h5fw40WNzZfRnxOItsKkrHXy/0kWx
UuWVkBg+cpiAlVoknHMWZQRTAR6asG36lif6oFsNqKaiV3/FFUh82bl5Ku3FxX/B
SY00sPRL87gw7Jl8FsNIvIE52weugIeuR7VVFhgKD5ORbrSxXiGvcLqlvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyku3A699aKJmszcB9VEaRixaiTMB8GA1UdIwQY
MBaAFH07LDM7cpVXrAvgJ0CyIpbYAr+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82YjFiNjQtMjU2NC00N2E3LWIxYzEt
NTI4MzVkYjY1MTJjLzEvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82YjFiNjQtMjU2NC00N2E3LWIxYzEtNTI4MzVkYjY1MTJj
LzEvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgILENWg
cSD+sFOc1xrP6rH6EsfYw0kTRDlhxSFRzgg/xXw9/8I0okf1/Zo9Cxthcrzr7jEG
pwrXAa2WK8yY3UV2Z/rEQZMrvE1lxzOFxAwwwp0WJ3wHHTe6psv1nbKrDr0gXs98
hpEPduZKxVytrT17U11Yv2BGphPI630cbaS06AfR95oZh6ez87+Ir3UoHYD0L82v
pfFtwjWQfHR/XzTHHglZOL0cW7aqp0WxDRjgjTWdWq9ClXbTEXGLKLW45ClVfvyg
4oqwowmSvSEZLfXAUcGi6QjC768JtBge57DwXe/TEkRkln7G5rk4nuazPGSQHIsJ
3xlwhaulbqqZUw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:20:55 2026 by rpki-client