Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
File: FTtGcCg5p5W6uo2NFezcymN-M2w.mft (raw, json)
Hash identifier: KJjmv/P1Z7crOWummHMiONm950G5mZcehw86jWJYmUk=
Subject key identifier: FD:FE:EF:3D:BD:52:11:2C:37:AC:59:65:A2:E3:53:12:A1:2C:AE:39
Authority key identifier: 15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
Certificate issuer: /CN=153b46702839a795baba8d8d15ecdcca637e336c
Certificate serial: 019D9AE2F13E5098945C24BBDD60A26D4CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 10:00:57 +0000
Manifest this update: Fri 17 Apr 2026 10:00:57 +0000
Manifest next update: Sat 18 Apr 2026 10:00:57 +0000
Files and hashes: 1: 60Yzg5ovYbhNZtsG87V10o4lft0.roa (hash: pwf3Cr849YIF4wTPFp3jPWoUW71SDRP921dWjmbB0ls=)
2: FTtGcCg5p5W6uo2NFezcymN-M2w.crl (hash: 2VALRlEOvSH4czKcblBmukFQDVzOSJgsVlcXkSsVmOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:f1:3e:50:98:94:5c:24:bb:dd:60:a2:6d:4c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153b46702839a795baba8d8d15ecdcca637e336c
Validity
Not Before: Apr 17 10:00:57 2026 GMT
Not After : Apr 18 10:00:57 2026 GMT
Subject: CN=fdfeef3dbd52112c37ac5965a2e35312a12cae39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:63:e6:8f:3f:09:16:7d:63:92:99:f5:62:d9:
59:a5:f1:62:49:68:37:30:8e:43:84:17:b4:2a:5e:
4f:fe:95:ce:d9:4e:87:46:02:84:21:11:6d:10:ec:
bb:84:bb:d7:6a:e8:92:6b:da:42:c7:2d:4c:d6:d4:
a7:07:ac:85:81:fb:44:34:72:35:11:81:28:31:3d:
10:da:ba:91:45:86:cf:75:ed:69:ca:c6:7c:ce:f0:
7b:b5:7d:3a:b3:ee:c0:bf:d0:a0:1b:91:e4:b2:21:
89:c7:36:b5:33:51:e0:b6:e1:46:d4:2d:28:74:79:
c6:54:35:16:12:30:7c:d0:57:86:48:73:77:0d:7c:
06:af:07:ef:6a:14:53:b9:41:68:4f:25:d4:21:05:
83:25:4c:03:cf:da:b9:6d:a1:2f:a8:bd:1c:1b:a9:
58:a0:36:45:04:c5:26:18:96:b1:0b:a1:9f:a4:55:
f5:fb:d9:b8:fe:1b:ad:39:10:2c:50:be:95:30:c6:
03:23:81:cc:14:01:4e:f6:59:c1:fe:26:8c:00:3b:
12:b2:24:c4:d5:b0:4d:b3:d4:17:aa:19:6f:13:c6:
05:46:06:d4:83:2f:1b:f5:97:ee:03:ac:4d:4b:6d:
69:aa:c0:20:b8:4d:26:23:37:54:a1:b0:d7:e6:05:
2d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FE:EF:3D:BD:52:11:2C:37:AC:59:65:A2:E3:53:12:A1:2C:AE:39
X509v3 Authority Key Identifier:
keyid:15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:11:81:05:15:d9:b1:58:e6:87:d6:6f:94:c7:35:46:0a:c9:
33:a2:c5:1d:30:be:6b:7a:c8:a8:ea:a6:45:13:54:e0:9f:f8:
f0:91:e5:ea:5f:87:f3:9b:a2:7d:eb:6d:71:67:37:dd:3f:07:
71:6e:8c:53:ff:4f:c8:88:e1:ce:cb:46:09:59:b2:00:07:02:
b5:53:97:31:08:ab:8b:76:93:e8:40:20:03:32:a4:5e:3b:f4:
6d:8b:80:37:31:70:53:69:1b:17:6d:08:bd:2b:60:94:4d:20:
7f:a3:90:2e:7d:be:e1:62:0f:6d:a1:8c:4e:da:e2:86:af:8f:
92:b6:1f:5c:bd:4a:38:f1:56:20:99:9b:5c:f3:49:15:b9:c6:
98:dd:2e:d2:22:ec:69:22:a2:80:d9:a5:a0:ab:ac:17:d4:1f:
07:b9:d1:98:0e:21:f8:17:4c:35:ad:e6:71:47:ac:69:6f:56:
83:a0:2f:3c:69:35:e0:78:ff:8d:6b:5c:c5:25:d5:68:69:0e:
96:c7:7a:31:6a:8e:90:3c:1f:0b:2a:ce:5d:0b:e4:a6:54:5a:
68:76:fa:a1:3b:75:b7:bd:40:c1:67:46:48:46:e7:99:c5:8a:
d9:2a:d0:04:27:4a:98:fc:5d:c7:1a:67:cc:6f:9f:0b:db:71:
e3:1b:53:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:37:01 2026 by rpki-client