
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
File: ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft (raw, json)
Hash identifier: zCM8Ae3wT3HOiCAmIkzdacB5g1ilfTXYtLZrTj/kHog=
Subject key identifier: 85:6B:17:C1:91:3C:A0:A3:72:87:3D:52:FC:4F:76:7C:C5:7C:BE:55
Authority key identifier: 7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C
Certificate issuer: /CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c
Certificate serial: 019A50E3A7EF90A2E4330B1AC2ED0639B494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:01:28 +0000
Manifest this update: Tue 04 Nov 2025 22:01:28 +0000
Manifest next update: Wed 05 Nov 2025 22:01:28 +0000
Files and hashes: 1: agRUYODGUgcgQjP7ijxcZLYm3nc.roa (hash: f6YBLXl3ZPBgWVXG5y2MoTRUZ2l1iv1DIF9aPxpzV6M=)
2: ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl (hash: /XV9Fibu7yO65B9RlbfHS7X64Gs+L7h+SW+Ej15GDAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:a7:ef:90:a2:e4:33:0b:1a:c2:ed:06:39:b4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c
Validity
Not Before: Nov 4 22:01:28 2025 GMT
Not After : Nov 5 22:01:28 2025 GMT
Subject: CN=856b17c1913ca0a372873d52fc4f767cc57cbe55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d4:96:ba:01:3e:08:3a:5c:2c:21:83:58:3b:
83:78:d5:d0:15:c6:61:51:3b:07:ea:d6:54:36:45:
cb:e7:dd:cc:c7:70:a9:2c:f2:77:a7:76:de:6e:dd:
e1:e8:5f:53:52:e0:63:44:66:01:2e:92:33:b3:c3:
ff:d9:96:a3:39:c0:51:46:89:23:c1:fe:d8:41:a0:
95:07:81:95:8d:57:f4:0a:ab:96:98:a0:1a:35:10:
92:8d:53:58:54:b9:35:e5:6e:3d:6d:53:65:99:1d:
3d:23:f2:e7:40:e5:cc:4f:89:72:0e:31:b6:b7:1a:
6b:17:8a:5c:d4:f0:93:ec:26:e7:ce:e3:be:32:55:
e6:6d:19:c8:58:c2:b3:21:20:46:92:f0:b8:b2:6b:
a6:6c:b8:64:c5:47:d2:61:f5:2e:f8:5c:f3:27:d3:
b9:fb:88:8f:3a:dd:c6:d8:56:de:1e:23:61:1d:f5:
c4:af:bf:a2:8c:cf:b6:36:e8:b1:0f:db:91:30:8a:
db:1f:12:01:72:d4:ce:6c:3d:08:71:a4:31:81:7a:
00:55:0c:98:c3:e0:90:d9:90:93:88:ce:d8:fd:34:
15:1a:e1:8c:84:79:30:9e:cd:59:38:5e:27:a5:6f:
1a:3b:92:21:0a:b9:a5:6d:66:11:21:2b:5b:83:cf:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6B:17:C1:91:3C:A0:A3:72:87:3D:52:FC:4F:76:7C:C5:7C:BE:55
X509v3 Authority Key Identifier:
keyid:7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d2:bf:e5:9c:7a:76:9b:b8:3c:d6:62:42:19:61:a1:0b:be:
1a:98:f9:84:11:5f:3b:d0:5f:5b:02:a0:7c:65:09:b0:07:32:
95:9f:03:a7:27:30:e8:c7:6f:19:21:5f:63:10:f4:d6:9a:dd:
57:05:55:c4:00:fe:63:4f:81:ba:e1:bf:3a:67:0c:c3:ec:ee:
d6:3d:fd:6b:94:e5:c0:f0:5f:d4:34:cb:35:9b:70:3d:1e:9e:
d9:6d:5d:ae:52:95:f6:14:90:6d:52:5e:a3:c4:bc:54:04:8e:
ef:aa:ad:b6:4a:1b:b6:15:93:18:f5:ea:2c:08:0f:77:22:2c:
c1:8c:8a:db:ee:93:03:a8:f4:be:03:1c:e6:86:11:70:1c:78:
c0:26:dd:79:2a:fa:f7:51:07:2c:70:10:54:2d:19:7f:15:f1:
8f:02:71:20:d8:e5:37:d3:d0:68:2a:0f:03:f1:df:64:ee:da:
c4:aa:8a:2b:ea:f9:d1:17:65:a3:bf:3d:df:07:80:54:f4:e8:
be:71:6b:39:7b:c8:86:86:7e:96:92:ca:4f:a9:d0:80:2e:17:
10:72:58:2f:7f:e0:c8:98:1c:dd:b2:0f:dd:e0:c5:be:51:76:
3f:46:b4:48:f6:ef:73:36:56:18:85:aa:41:c0:52:4b:a5:01:
2a:c0:d3:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ46fvkKLkMwsawu0GObSUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZDI0YzVkMzQ0ZmI5MmJjZjRjZjZlMWU1NjlmNTFhZTQx
YWE4N2MwHhcNMjUxMTA0MjIwMTI4WhcNMjUxMTA1MjIwMTI4WjAzMTEwLwYDVQQD
Eyg4NTZiMTdjMTkxM2NhMGEzNzI4NzNkNTJmYzRmNzY3Y2M1N2NiZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dSWugE+CDpcLCGDWDuDeNXQFcZh
UTsH6tZUNkXL593Mx3CpLPJ3p3bebt3h6F9TUuBjRGYBLpIzs8P/2ZajOcBRRokj
wf7YQaCVB4GVjVf0CquWmKAaNRCSjVNYVLk15W49bVNlmR09I/LnQOXMT4lyDjG2
txprF4pc1PCT7CbnzuO+MlXmbRnIWMKzISBGkvC4smumbLhkxUfSYfUu+FzzJ9O5
+4iPOt3G2FbeHiNhHfXEr7+ijM+2NuixD9uRMIrbHxIBctTObD0IcaQxgXoAVQyY
w+CQ2ZCTiM7Y/TQVGuGMhHkwns1ZOF4npW8aO5IhCrmlbWYRIStbg8+brQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVrF8GRPKCjcoc9UvxPdnzFfL5VMB8GA1UdIwQY
MBaAFH7STF00T7krz0z24eVp9RrkGqh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnRKTVhUUlB1U3ZQVFBiaDVXbjFHdVFhcUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9jOGFlNzktNmQ3Yi00Nzc2LTgwYjct
NDIwNDkyY2QxYWZkLzEvZnRKTVhUUlB1U3ZQVFBiaDVXbjFHdVFhcUh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9jOGFlNzktNmQ3Yi00Nzc2LTgwYjctNDIwNDkyY2QxYWZk
LzEvZnRKTVhUUlB1U3ZQVFBiaDVXbjFHdVFhcUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoNK/5Zx6
dpu4PNZiQhlhoQu+Gpj5hBFfO9BfWwKgfGUJsAcylZ8Dpycw6MdvGSFfYxD01prd
VwVVxAD+Y0+BuuG/OmcMw+zu1j39a5TlwPBf1DTLNZtwPR6e2W1drlKV9hSQbVJe
o8S8VASO76qttkobthWTGPXqLAgPdyIswYyK2+6TA6j0vgMc5oYRcBx4wCbdeSr6
91EHLHAQVC0ZfxXxjwJxINjlN9PQaCoPA/HfZO7axKqKK+r50Rdlo7893weAVPTo
vnFrOXvIhoZ+lpLKT6nQgC4XEHJYL3/gyJgc3bIP3eDFvlF2P0a0SPbvczZWGIWq
QcBSS6UBKsDTuA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:08 2025 by rpki-client