Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
File: FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft (raw, json)
Hash identifier: IetnC0tRcvqIqP93xsc0K+q4ZppcTvPlsfm/G+Gia3E=
Subject key identifier: DD:93:A9:33:2F:18:4C:33:07:FA:7A:FD:11:D4:E6:96:41:C2:85:F9
Authority key identifier: 15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
Certificate issuer: /CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Certificate serial: 019CADFEB0AD56214B60F0EF3EAFA9FE2172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 10:01:15 +0000
Manifest this update: Mon 02 Mar 2026 10:01:15 +0000
Manifest next update: Tue 03 Mar 2026 10:01:15 +0000
Files and hashes: 1: FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl (hash: jrSnXqidvXbSyggW2G+qp6n2TUccs/1QM8PVCE3/59U=)
2: gwu-BJ3nFsQR4A2sjavYqIImEU4.roa (hash: SzyZF8veJPj3xDoLq44v4XCelHoO3kDWlC5lKDw8f44=)
3: hXykEKACOboZCO5aeEWdMYeE0Lc.roa (hash: 7DfJrK0FEAGJWDjTUJ6JpGF4NCoaruD7Zg59w8fqoFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:b0:ad:56:21:4b:60:f0:ef:3e:af:a9:fe:21:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Validity
Not Before: Mar 2 10:01:15 2026 GMT
Not After : Mar 3 10:01:15 2026 GMT
Subject: CN=dd93a9332f184c3307fa7afd11d4e69641c285f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:04:90:6e:ea:57:49:5d:21:2b:3f:d1:7e:
ac:14:e0:64:1f:e4:be:4c:db:e6:9d:ca:b4:be:01:
bf:5c:1d:95:a3:63:47:9a:31:ce:ce:df:68:d2:0c:
4d:c0:98:67:44:c2:c4:2c:13:81:b3:06:2d:a7:5a:
67:d0:c5:cf:12:9d:2b:31:fe:95:ad:c6:de:5d:4f:
57:08:07:a0:f5:b3:53:5f:b4:2c:ee:8b:a3:4e:85:
14:40:d6:28:54:8f:cc:e3:63:34:da:02:c4:4c:e1:
8b:54:ba:2b:ee:0e:08:c5:93:04:15:d7:7c:b7:aa:
b2:f7:39:14:d2:15:c0:13:c8:bd:39:15:a7:6b:cc:
79:3d:c1:3c:69:46:3a:bf:13:53:83:9c:60:12:74:
ef:43:1c:81:ec:ca:1c:9a:64:65:7f:ad:c3:a4:f7:
3f:49:7d:d4:27:0a:89:2f:eb:63:12:8e:3a:c0:f2:
3e:18:7f:b1:44:c7:8a:92:0d:ab:eb:b8:35:2e:17:
d5:9c:d8:2b:91:2a:c4:b7:39:7a:1d:a6:62:95:15:
b8:9d:9a:39:b4:07:3e:d5:8f:6b:21:de:1c:f5:15:
22:2a:2b:6d:03:ec:35:73:93:09:3b:99:2f:87:f4:
88:f8:81:7e:a9:51:3c:0a:5c:aa:12:78:29:37:f8:
b4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:93:A9:33:2F:18:4C:33:07:FA:7A:FD:11:D4:E6:96:41:C2:85:F9
X509v3 Authority Key Identifier:
keyid:15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:41:fc:3a:53:ec:95:36:c3:12:9e:fd:bd:01:08:58:fa:4e:
ec:2b:92:67:fe:c7:f2:8f:61:e3:c5:83:28:56:23:42:31:fe:
6f:60:bf:8b:99:3a:f1:fc:df:79:4c:dd:93:60:3a:ee:ff:19:
3b:4d:bd:68:ed:5f:a4:a0:24:00:96:f6:4d:ee:58:44:fd:26:
79:b7:bd:06:45:91:94:b1:71:65:35:54:94:a5:a4:52:17:35:
53:d1:8a:57:e4:3e:af:3a:9b:fa:21:57:92:25:93:06:21:d1:
1f:e1:1e:9e:da:ea:23:c3:1e:76:21:28:0d:3d:ef:15:fc:75:
fe:f5:68:4a:f1:c9:cd:d8:db:c3:d3:c7:49:00:19:21:85:19:
f2:b4:12:1a:8f:87:b2:d2:18:f8:de:08:b8:96:92:1e:94:d5:
19:ff:78:17:a7:49:b0:0b:7e:af:56:05:bf:7c:52:30:8b:c9:
eb:47:06:60:bf:79:fb:0f:64:f8:33:47:1f:c4:7b:4a:7f:27:
5c:cb:a6:1d:6a:73:4b:d9:bf:0e:53:2d:48:40:fd:b4:06:4f:
bb:cf:61:f0:f0:7b:7b:8c:27:79:04:60:ff:21:ef:cc:f9:b7:
b5:02:75:f6:1c:05:f5:cd:da:43:2e:ff:67:87:ef:8c:ce:5d:
19:8e:78:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/rCtViFLYPDvPq+p/iFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzNjZDJkMWY2ZGNmMWVlYzk3ZTg2OTQzYzRlNTNiMGM4
OGVhYWUwHhcNMjYwMzAyMTAwMTE1WhcNMjYwMzAzMTAwMTE1WjAzMTEwLwYDVQQD
EyhkZDkzYTkzMzJmMTg0YzMzMDdmYTdhZmQxMWQ0ZTY5NjQxYzI4NWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEoEkG7qV0ldISs/0X6sFOBkH+S+
TNvmncq0vgG/XB2Vo2NHmjHOzt9o0gxNwJhnRMLELBOBswYtp1pn0MXPEp0rMf6V
rcbeXU9XCAeg9bNTX7Qs7oujToUUQNYoVI/M42M02gLETOGLVLor7g4IxZMEFdd8
t6qy9zkU0hXAE8i9ORWna8x5PcE8aUY6vxNTg5xgEnTvQxyB7MocmmRlf63DpPc/
SX3UJwqJL+tjEo46wPI+GH+xRMeKkg2r67g1LhfVnNgrkSrEtzl6HaZilRW4nZo5
tAc+1Y9rId4c9RUiKittA+w1c5MJO5kvh/SI+IF+qVE8ClyqEngpN/i0xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2TqTMvGEwzB/p6/RHU5pZBwoX5MB8GA1UdIwQY
MBaAFBUzzS0fbc8e7JfoaUPE5TsMiOquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRQTkxSOXR6eDdzbC1ocFE4VGxPd3lJNnE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC81NjUxOTEtZDk4MS00MWU1LTk2MWMt
OWZlNTViMTcxNjgzLzEvRlRQTkxSOXR6eDdzbC1ocFE4VGxPd3lJNnE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC81NjUxOTEtZDk4MS00MWU1LTk2MWMtOWZlNTViMTcxNjgz
LzEvRlRQTkxSOXR6eDdzbC1ocFE4VGxPd3lJNnE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0H8OlPs
lTbDEp79vQEIWPpO7CuSZ/7H8o9h48WDKFYjQjH+b2C/i5k68fzfeUzdk2A67v8Z
O029aO1fpKAkAJb2Te5YRP0mebe9BkWRlLFxZTVUlKWkUhc1U9GKV+Q+rzqb+iFX
kiWTBiHRH+EentrqI8MediEoDT3vFfx1/vVoSvHJzdjbw9PHSQAZIYUZ8rQSGo+H
stIY+N4IuJaSHpTVGf94F6dJsAt+r1YFv3xSMIvJ60cGYL95+w9k+DNHH8R7Sn8n
XMumHWpzS9m/DlMtSED9tAZPu89h8PB7e4wneQRg/yHvzPm3tQJ19hwF9c3aQy7/
Z4fvjM5dGY54ag==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:55:56 2026 by rpki-client