Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
File: FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json)
Hash identifier: O/9LpGjUPjAU2JuSE3jiOaLt19unWRyDy5CbPKuMizo=
Subject key identifier: E7:31:7C:65:82:89:A0:49:40:83:0F:93:33:5C:35:BA:B7:B4:6C:58
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial: 019CAA8F9A6CA65F71A464E6529599F7AAE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
Manifest number: 0940
Signing time: Sun 01 Mar 2026 18:01:03 +0000
Manifest this update: Sun 01 Mar 2026 18:01:03 +0000
Manifest next update: Mon 02 Mar 2026 18:01:03 +0000
Files and hashes: 1: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: 6DyR4pfD/7Ey4tSa0PReTJ1wMuM20z0K/c7XDOa2t1Q=)
2: aUSEjOq7T5GdB1gJh0wm73gZGVE.roa (hash: I/x2EyeVTVrdNEFq9RRb2OJVpKKmppQFIjO/Hlu4b9k=)
3: sCREUy5oJ9tpm5q7Gzs288OxCwI.roa (hash: YBVHBMqxomYQcf4nO/wlXwSvZkGQdWRYPk635BeFEJM=)
4: z1g6IVNfelVtJ3ruc6v117EmMOM.roa (hash: Nm253NpZatd7RqxMvrinv6oQUpdzhUYrPUnsdn7rdFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:9a:6c:a6:5f:71:a4:64:e6:52:95:99:f7:aa:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153f24183d6c95185919349e6e92533736437b94
Validity
Not Before: Mar 1 18:01:03 2026 GMT
Not After : Mar 2 18:01:03 2026 GMT
Subject: CN=e7317c658289a04940830f93335c35bab7b46c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:bb:0a:15:2d:94:76:9e:e5:0b:43:81:6a:
8e:f8:db:4d:70:71:f6:f3:7c:78:50:d3:20:8b:90:
42:35:c3:2e:16:cc:c0:56:52:4a:49:e3:bd:45:5a:
70:53:d3:6e:4e:98:a6:40:95:fb:e3:7f:0c:5b:7c:
ae:89:f7:5b:af:c0:3c:6e:58:77:58:d6:62:1f:98:
33:29:64:12:a6:33:d3:64:ea:66:30:df:3d:95:61:
a0:1c:c8:b9:c6:5d:e2:50:90:90:ab:87:56:3a:d9:
7c:57:ba:b9:9d:a0:51:e5:1f:4b:41:f8:e5:7b:84:
55:e1:11:91:33:09:06:b6:e9:25:44:30:1c:79:4f:
6c:47:69:f8:97:d8:de:28:41:68:46:ba:2b:6c:ee:
66:d6:c9:7b:1b:d9:52:99:a6:02:9f:41:71:02:f7:
48:d9:e7:01:52:20:4f:d9:29:98:ae:a0:43:7d:cb:
f3:db:42:34:6f:24:01:45:dd:6a:b9:ae:58:d0:0f:
46:9b:34:8b:81:1c:ae:84:62:91:95:01:63:71:c4:
be:d2:62:f7:ae:ce:52:15:e5:ca:15:f6:04:37:c1:
b3:ae:28:ca:9f:de:42:2e:4f:7a:6e:a9:e5:d9:a9:
1f:63:46:8c:8a:93:b3:ad:64:cc:c7:ef:98:d7:a2:
34:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:31:7C:65:82:89:A0:49:40:83:0F:93:33:5C:35:BA:B7:B4:6C:58
X509v3 Authority Key Identifier:
keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f9:d5:a1:e1:d2:b2:a7:d5:a0:9d:4b:7c:ca:ca:b8:24:e2:
70:21:77:c7:52:63:eb:10:92:81:1b:d1:52:f5:8f:22:22:66:
75:cd:95:2e:4a:3d:12:9b:1f:b1:7e:39:26:58:68:e7:76:33:
02:32:33:43:97:69:80:4a:44:5e:98:e9:4e:ee:0f:82:8f:83:
2d:a7:e5:66:6e:58:bf:a2:ea:c6:b6:04:7d:3e:e9:eb:e4:16:
52:95:67:55:1a:d8:90:d5:ab:9b:37:8e:73:9a:08:c4:64:42:
0a:1d:61:d9:9e:50:8a:f3:dc:a3:92:41:c9:4e:36:67:bc:59:
a8:31:c6:52:fa:61:bf:8e:78:d5:d3:3e:bb:72:83:35:11:d7:
4d:88:56:20:f6:58:09:5e:8a:73:87:2d:6a:ed:f3:7c:8c:73:
5d:4b:6e:6e:05:ec:3e:58:cf:ec:b6:8f:a4:d8:35:eb:85:ad:
e3:f3:76:26:37:26:e5:e6:d9:0d:ff:57:2a:e4:6d:c2:60:91:
08:7c:94:ae:9b:00:13:d1:a7:a9:9e:d4:31:1a:9c:3b:a2:c1:
dc:46:cb:9f:5f:4e:79:ad:11:21:3c:10:f1:6a:7c:a8:76:d2:
42:17:51:23:c9:cd:02:8a:32:ff:59:29:7d:a5:d2:cb:db:87:
d7:b4:6d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:01 2026 by rpki-client