Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
File: ftUAFk8HOBNbmuwE44_CTLkOD18.mft (raw, json)
Hash identifier: TKL37S4CJzfg0/N2jH47smyV+21XEqzAu7RGnFU3bVI=
Subject key identifier: 2D:5E:3B:BA:A4:08:64:A1:FA:21:EF:15:96:F3:0B:A2:10:F2:EE:0F
Authority key identifier: 7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F
Certificate issuer: /CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
Certificate serial: 019CAB3424734DB6FE5259D927D056DA5BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
Manifest number: 1595
Signing time: Sun 01 Mar 2026 21:00:46 +0000
Manifest this update: Sun 01 Mar 2026 21:00:46 +0000
Manifest next update: Mon 02 Mar 2026 21:00:46 +0000
Files and hashes: 1: 7q9RY1s7bkPLDFf-R4nEhz7s4U0.roa (hash: x5YDeNVEFuW8k3ZnPb/i30Kf2lB0qRZrnVGssw9mKpA=)
2: UQMWeuGBzStaoNEBdqaD6Sfu2QU.roa (hash: A3XBOP0i9HHKEaAgIMvo0xkJ9BA3b3wJo3xMjrp7ITM=)
3: ftUAFk8HOBNbmuwE44_CTLkOD18.crl (hash: j8GsEm0AYjSNliA+4AYcn3N1QF1a569f16X7vAf6n4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:24:73:4d:b6:fe:52:59:d9:27:d0:56:da:5b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
Validity
Not Before: Mar 1 21:00:46 2026 GMT
Not After : Mar 2 21:00:46 2026 GMT
Subject: CN=2d5e3bbaa40864a1fa21ef1596f30ba210f2ee0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:0f:23:79:9c:7b:5a:cc:a3:c2:b5:6e:f2:
8d:42:00:84:1e:d2:5a:da:79:9b:71:73:a9:9c:ba:
82:2a:94:da:c1:97:03:0c:45:4e:80:02:06:e8:e2:
65:b9:05:1b:8e:02:fd:ed:cb:88:66:15:54:22:41:
79:6d:ce:67:60:8e:76:55:6b:83:c4:88:80:3e:10:
73:ba:5b:60:36:e2:92:67:4e:2d:bd:10:98:53:d5:
4e:88:72:1c:ea:5e:c4:59:7e:1e:c4:cd:6a:3a:bc:
1d:d5:b9:bc:9c:09:27:85:bf:9b:48:01:ee:7c:8e:
d6:fa:8f:cd:5d:64:8e:9f:a7:63:dc:d7:9f:4f:28:
d1:76:2c:7f:42:ea:5e:c3:f9:ad:6b:41:eb:34:3e:
b1:a0:73:82:c5:d9:2f:09:8c:a3:84:62:f9:e1:2f:
13:2d:5a:ab:db:97:3b:ee:3a:97:8a:c3:9f:6b:7c:
15:de:7e:1f:77:20:3f:47:78:f0:c0:05:3a:31:10:
40:04:64:07:28:91:ac:ce:3b:8a:c3:e5:c6:91:44:
e1:18:81:15:8a:e2:a8:3e:bd:61:6a:32:29:ed:f2:
ce:7c:61:1f:a3:49:69:61:b8:d0:3a:16:60:44:ad:
49:d9:3c:76:5d:84:09:39:60:02:db:0e:97:d2:d3:
49:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5E:3B:BA:A4:08:64:A1:FA:21:EF:15:96:F3:0B:A2:10:F2:EE:0F
X509v3 Authority Key Identifier:
keyid:7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c9:e8:a8:f1:79:6e:3c:20:17:90:6d:64:2a:51:0d:df:36:
e1:d5:93:67:79:43:0e:56:f0:94:48:98:79:8c:be:a7:e8:7c:
1c:35:5d:6a:53:76:42:9c:1f:93:47:7b:1a:97:56:0c:f7:b4:
16:00:e0:93:42:10:e6:27:4d:a8:aa:39:a0:4b:9f:e8:a7:d8:
3e:40:9c:88:7e:76:a2:9f:13:d7:42:98:d0:02:e3:db:0a:8a:
bd:a3:ad:97:15:10:4c:29:09:c2:4b:00:56:9d:1f:fa:63:32:
08:fa:09:e8:c2:1f:73:36:77:2a:38:72:9c:c8:99:76:b6:7d:
d3:c0:19:d1:32:02:5b:53:3c:29:e9:df:75:0f:82:f8:ff:b8:
1b:fb:26:c6:40:cc:e6:07:a2:cf:97:3c:cc:f8:c3:95:ab:7e:
23:fb:cf:eb:40:08:15:22:ac:d3:2e:78:8f:ad:55:c4:88:22:
61:36:a0:03:7f:b8:3a:73:e0:fe:95:8c:c9:1b:ce:0c:0a:21:
15:32:02:4c:e1:8e:66:0e:28:7e:b8:d9:9e:04:3c:fd:fb:07:
94:39:43:53:8b:68:2e:e1:1f:37:87:57:6f:5b:ec:5e:f5:c8:
f1:7f:e3:9a:b8:ac:8c:43:d2:11:cc:f0:02:66:06:cd:7c:55:
f8:dd:54:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNCRzTbb+UlnZJ9BW2lvcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZDUwMDE2NGYwNzM4MTM1YjlhZWMwNGUzOGZjMjRjYjkw
ZTBmNWYwHhcNMjYwMzAxMjEwMDQ2WhcNMjYwMzAyMjEwMDQ2WjAzMTEwLwYDVQQD
EygyZDVlM2JiYWE0MDg2NGExZmEyMWVmMTU5NmYzMGJhMjEwZjJlZTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPkPI3mce1rMo8K1bvKNQgCEHtJa
2nmbcXOpnLqCKpTawZcDDEVOgAIG6OJluQUbjgL97cuIZhVUIkF5bc5nYI52VWuD
xIiAPhBzultgNuKSZ04tvRCYU9VOiHIc6l7EWX4exM1qOrwd1bm8nAknhb+bSAHu
fI7W+o/NXWSOn6dj3NefTyjRdix/Qupew/mta0HrND6xoHOCxdkvCYyjhGL54S8T
LVqr25c77jqXisOfa3wV3n4fdyA/R3jwwAU6MRBABGQHKJGszjuKw+XGkUThGIEV
iuKoPr1hajIp7fLOfGEfo0lpYbjQOhZgRK1J2Tx2XYQJOWAC2w6X0tNJxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1eO7qkCGSh+iHvFZbzC6IQ8u4PMB8GA1UdIwQY
MBaAFH7VABZPBzgTW5rsBOOPwky5Dg9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YzUzNTktMzQ1Mi00MmYzLTg4MGIt
ODJkOWE5ZWI0MzBjLzEvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85YzUzNTktMzQ1Mi00MmYzLTg4MGItODJkOWE5ZWI0MzBj
LzEvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8noqPF5
bjwgF5BtZCpRDd824dWTZ3lDDlbwlEiYeYy+p+h8HDVdalN2Qpwfk0d7GpdWDPe0
FgDgk0IQ5idNqKo5oEuf6KfYPkCciH52op8T10KY0ALj2wqKvaOtlxUQTCkJwksA
Vp0f+mMyCPoJ6MIfczZ3KjhynMiZdrZ908AZ0TICW1M8KenfdQ+C+P+4G/smxkDM
5geiz5c8zPjDlat+I/vP60AIFSKs0y54j61VxIgiYTagA3+4OnPg/pWMyRvODAoh
FTICTOGOZg4ofrjZngQ8/fsHlDlDU4toLuEfN4dXb1vsXvXI8X/jmrisjEPSEczw
AmYGzXxV+N1UPg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:35 2026 by rpki-client