Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
File: FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json)
Hash identifier: oVXAb8/Vp+5+A/w5dgSm90iDz35njpJ3TQqRLLycDko=
Subject key identifier: 24:00:0F:B3:2B:BC:9D:A4:B6:11:BA:AA:4F:41:67:BA:99:13:88:1B
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial: 019D99D042E2250CAE7E8C8A545BDBE17BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
Manifest number: 09BD
Signing time: Fri 17 Apr 2026 05:00:55 +0000
Manifest this update: Fri 17 Apr 2026 05:00:55 +0000
Manifest next update: Sat 18 Apr 2026 05:00:55 +0000
Files and hashes: 1: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: n9o7WsyJlHg9qH8JX84PRXXxYJjDwRMuHd/0tQilMGk=)
2: dmlQS2Sd9qDd919b9z3NpsKBzf4.roa (hash: cTIEAwkFVrrLFFu6MkzuxguAlzRRpHYYKaiTprN0Urw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:42:e2:25:0c:ae:7e:8c:8a:54:5b:db:e1:7b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153f24183d6c95185919349e6e92533736437b94
Validity
Not Before: Apr 17 05:00:55 2026 GMT
Not After : Apr 18 05:00:55 2026 GMT
Subject: CN=24000fb32bbc9da4b611baaa4f4167ba9913881b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:bc:47:5e:41:8b:ec:5b:70:af:87:8e:57:
e8:f4:20:81:6e:40:b2:a6:5c:f9:63:71:73:94:16:
a7:60:a6:a4:d8:09:81:e1:9b:47:4e:c8:3c:06:99:
cb:f3:a2:61:e6:a9:d1:fb:85:41:51:cc:e2:e2:f8:
1a:ce:9f:f2:90:ae:ea:fc:fc:8a:76:f2:29:94:ab:
f9:b6:45:72:b6:22:d2:95:2c:99:81:5a:92:7a:71:
54:13:40:5b:20:7e:ce:bb:ae:96:c7:eb:cc:31:ef:
a8:d3:31:2f:5c:49:3d:fa:ab:27:48:01:5b:a5:8d:
6e:76:b4:73:cf:c7:af:33:3c:5e:12:9f:1f:a1:44:
f6:17:e4:7d:14:28:ff:2d:77:6e:1a:4e:e6:4f:6d:
53:4f:09:16:9f:48:35:fd:a1:14:22:52:75:39:0a:
c2:77:7f:17:a4:12:7a:1e:5b:bd:93:c1:49:71:65:
2c:89:32:3e:8a:8d:82:25:f5:71:95:58:05:1d:21:
90:03:4c:91:69:2d:15:86:ce:78:d9:6e:5e:f8:97:
2e:53:99:47:3f:4a:20:0a:15:72:6a:93:44:36:bd:
35:1b:1f:ee:8b:1c:df:93:bb:38:4d:6a:56:ef:ab:
f6:38:fe:2e:ed:e4:07:0a:55:78:65:72:82:f2:89:
fa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:00:0F:B3:2B:BC:9D:A4:B6:11:BA:AA:4F:41:67:BA:99:13:88:1B
X509v3 Authority Key Identifier:
keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:16:8a:83:c0:b4:c1:ed:a9:64:87:6a:a0:e0:93:14:58:b0:
f0:00:c0:57:2b:bf:4a:4a:e8:d6:4a:c1:a6:fd:1a:ed:77:37:
cd:1b:e5:d1:cf:43:b0:56:47:37:1e:dd:41:8a:74:f6:e7:45:
ff:db:17:0f:1c:3b:d4:a2:29:94:a3:34:ce:41:8a:a7:55:2b:
24:06:34:1a:be:0c:d5:9f:86:a0:ea:7e:d3:8e:17:a5:fe:84:
3f:7a:7b:0d:bc:53:c3:91:1f:a2:bb:0c:d7:48:6e:c8:a8:ec:
60:71:6d:3a:ed:3e:ac:72:a4:56:97:7c:92:e2:0d:22:96:2a:
b5:90:9d:6c:75:30:3f:3b:20:97:33:4e:02:2d:0b:09:13:fe:
d8:90:54:f2:d8:5d:af:e1:fb:4c:ea:95:5a:80:7f:f4:27:dd:
d8:eb:5b:1f:84:aa:c7:3c:a4:d9:10:e8:a9:d0:3c:69:55:d4:
b1:3e:30:52:07:2e:12:bb:82:46:d1:9b:4a:72:f6:ed:3c:66:
b3:ce:19:05:24:68:8c:6b:a5:b0:33:09:d5:71:7e:71:bf:26:
6b:b8:18:df:a5:43:10:06:50:74:d1:82:56:f0:fc:6e:df:17:
6f:62:ba:ed:03:26:e4:83:a8:77:2e:0a:14:b3:75:3a:9b:79:
c2:c7:76:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:16 2026 by rpki-client