Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: h/UbBL0yKx4IhRQbzj9jN/NVBrfoEIPo8prQvR6seRw=
Subject key identifier: 5A:05:25:69:D1:8B:4F:03:B3:7C:D5:39:6F:C0:E8:21:29:19:5B:E9
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 019D98BDF50BFDF431ADAB1741D8AAA436D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 189A
Signing time: Fri 17 Apr 2026 00:01:18 +0000
Manifest this update: Fri 17 Apr 2026 00:01:18 +0000
Manifest next update: Sat 18 Apr 2026 00:01:18 +0000
Files and hashes: 1: LJweqdiAuex5ffHJZ-p0UeT6XrY.asa (hash: qexPojaaUKUXJCAIdb2LuHOm0GKtKH2oA0dqsygCpWc=)
2: O7voTXfNHlJYLDFfFhD0IyP6RWQ.roa (hash: LffxuYhlhgmo9uurPfnZvk9c5Vb5QUT4U1yEBcpzUI0=)
3: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: bjnQc1E0HRbuWPyweFgNOtg201F0eoNZaJv5EKndSRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:f5:0b:fd:f4:31:ad:ab:17:41:d8:aa:a4:36:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: Apr 17 00:01:18 2026 GMT
Not After : Apr 18 00:01:18 2026 GMT
Subject: CN=5a052569d18b4f03b37cd5396fc0e82129195be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:be:84:03:5f:9d:5c:74:d1:e5:64:1d:ca:
fd:fc:71:9d:c0:41:90:b6:3f:ab:45:dd:32:3e:24:
10:28:4e:76:40:23:ce:1d:00:98:67:28:5c:61:e5:
5c:2c:04:90:d1:5b:73:fc:6b:10:90:76:cd:b1:85:
8a:89:6a:0a:01:a0:c3:d8:f5:5f:8b:de:17:78:eb:
5c:60:43:0d:a1:c1:4b:c7:18:53:26:35:fd:4f:e1:
b0:f7:59:a1:e3:01:e2:5b:73:d6:06:d5:82:a8:ee:
08:7a:2c:3c:d2:03:8e:2a:22:0f:aa:0a:36:09:e2:
9e:4c:0f:2d:48:2c:2e:d0:27:8f:3e:28:7f:9c:f6:
5f:eb:58:92:f6:53:af:f3:fb:af:48:6f:ee:ff:fd:
08:33:35:34:56:6c:3c:ec:55:6a:18:8d:6d:10:7c:
a0:26:01:c3:3e:c4:60:0c:1e:b3:10:39:e2:90:e3:
4b:64:68:fc:89:ad:03:5e:12:30:55:ce:5f:e8:39:
90:40:46:b6:94:29:0e:23:4e:7a:c3:f6:bb:9f:39:
d2:1b:97:73:60:db:21:98:32:a4:15:8d:d9:f8:87:
8d:f7:d6:09:00:5b:83:4e:d4:c6:24:b2:48:7f:4a:
33:a8:bd:8f:b9:d2:25:5d:e7:86:2c:78:40:a7:0a:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:05:25:69:D1:8B:4F:03:B3:7C:D5:39:6F:C0:E8:21:29:19:5B:E9
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:64:bc:be:49:ff:97:0b:c1:4d:66:7b:84:3c:d9:d4:1e:3a:
78:96:4e:c5:12:5d:57:4d:01:76:0d:eb:db:8e:1e:24:06:e1:
e4:d3:4c:d0:fa:84:46:9d:fd:7f:61:2e:96:a7:a5:03:70:f4:
b7:e6:1d:49:ab:4d:34:fa:90:dd:67:fb:ce:c4:78:ff:96:b2:
fb:c0:69:6a:50:6d:d2:6e:ad:53:aa:af:44:13:4c:70:47:79:
42:5a:7a:37:df:6b:08:d8:0a:ea:a4:6f:87:da:63:53:4f:8d:
72:b2:1c:4a:ce:d4:6c:0e:3b:dd:87:16:53:ff:ef:7e:e0:12:
d3:f3:ed:b4:95:50:59:49:58:13:a6:06:cc:42:cd:91:bd:35:
ef:84:3a:73:82:a8:25:31:35:b3:c3:e5:09:29:1c:e8:68:62:
dc:b7:04:ec:e9:e5:8b:6d:b3:ad:be:a4:42:b9:cf:a1:0c:fe:
ce:1d:8f:a8:50:69:4f:27:22:d9:ae:52:70:ef:8e:52:96:e8:
e9:b4:ad:f5:b3:9b:cf:02:db:8d:73:0a:39:1e:c8:d2:d6:25:
f8:fe:dc:ef:53:49:bb:7a:f6:34:a1:1a:ee:6e:99:63:65:09:
90:57:e3:ad:3f:0a:11:a0:01:ed:91:9c:93:30:cb:61:6b:18:
de:9b:a1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:23 2026 by rpki-client