Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
File: FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft (raw, json)
Hash identifier: Y0/W7JANwXyM83Oe8soFK0T4V1gCVB7MYgoydRz/50c=
Subject key identifier: C5:C2:BE:D7:C1:F6:A0:43:C1:A2:B2:8F:4C:46:D1:90:41:7A:A8:6D
Authority key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
Certificate issuer: /CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Certificate serial: 019CABD9ED823EC22B22D2F5C92DF597919C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
Manifest number: 0B67
Signing time: Mon 02 Mar 2026 00:01:51 +0000
Manifest this update: Mon 02 Mar 2026 00:01:51 +0000
Manifest next update: Tue 03 Mar 2026 00:01:51 +0000
Files and hashes: 1: FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl (hash: JoKaQkRk2Y/0xM1TBHNSMerWiasoKpwVbMXaGWKcK7Y=)
2: nZ2dtzLbRNK4kvMX3dm8jkXAeCw.roa (hash: o/RSJuyZGLHYsPriUa/ugWwYnH5mecTKfBjhXcICjvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ed:82:3e:c2:2b:22:d2:f5:c9:2d:f5:97:91:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Validity
Not Before: Mar 2 00:01:51 2026 GMT
Not After : Mar 3 00:01:51 2026 GMT
Subject: CN=c5c2bed7c1f6a043c1a2b28f4c46d190417aa86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:64:71:cd:fe:f2:9b:92:ab:f1:e2:e3:c5:
e9:90:3c:af:9f:39:c9:56:4d:96:9c:73:15:19:f8:
7a:52:82:f6:1d:95:ee:df:f8:ba:5a:c1:b2:0f:6b:
36:29:55:dd:1c:2b:e9:e7:55:03:f8:79:10:35:f6:
05:27:d0:27:4f:d1:3f:c4:fb:f9:e2:ea:49:60:12:
35:f1:d8:a6:f1:09:22:f9:3e:41:24:b3:36:f8:f5:
1e:1c:3b:92:64:66:6b:f9:09:b2:68:6f:91:76:f5:
8e:3d:80:63:c7:c8:34:db:a2:3a:4d:a4:fe:33:0f:
52:48:c1:e0:01:96:79:35:7e:6c:69:99:df:05:30:
ca:89:af:17:44:0b:d0:ae:02:61:4b:f7:37:82:38:
24:18:bf:0e:91:35:30:b4:02:42:7a:25:2f:c1:c5:
e2:b2:92:dc:de:d9:ac:28:9a:d1:52:48:8f:7d:0c:
e4:d7:3d:96:82:7c:07:f5:c2:0a:54:d1:ff:b8:bf:
9f:f3:8c:38:ef:7f:a8:f0:82:ed:99:ff:b7:ff:95:
61:fe:78:e2:0f:63:da:ad:24:72:10:a9:cf:4d:10:
69:19:d1:48:d4:a4:7b:bf:e0:d7:b1:49:85:eb:c9:
b7:9e:3f:69:27:c3:88:2f:0a:cd:9c:f5:8c:db:57:
b5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C2:BE:D7:C1:F6:A0:43:C1:A2:B2:8F:4C:46:D1:90:41:7A:A8:6D
X509v3 Authority Key Identifier:
keyid:16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4a:b0:66:8f:60:2c:bd:25:82:eb:4a:a1:18:b5:3f:4b:16:
b7:11:9b:67:d6:ea:6e:f9:93:f7:9e:42:2f:30:42:9a:e2:42:
01:bd:2a:33:ec:2e:08:14:89:e1:b4:e6:17:45:e4:d5:21:42:
55:66:4d:c3:cd:a9:d2:43:69:47:ca:1f:e4:81:fe:83:69:22:
e5:cc:46:a2:f8:f0:f3:b6:70:02:2a:27:78:85:7c:c4:f8:68:
61:6b:fa:be:62:19:41:55:f3:fc:a2:8d:e7:62:15:b9:3c:a6:
0b:a6:3f:a5:36:c5:d4:65:e8:f4:e3:1a:b6:3c:dc:67:16:ca:
21:82:12:d5:4a:fb:c6:c1:c4:4e:d8:82:5f:34:a1:d4:2b:81:
26:69:73:c4:b2:d2:04:f8:cf:98:ef:cf:64:75:e5:b6:ca:1f:
7c:94:4f:33:7b:17:cc:b7:bc:e0:16:54:2e:72:c3:ca:b1:3f:
d9:a3:0f:c2:ef:b8:76:20:e5:0d:27:1d:f3:97:34:3d:c2:b9:
82:b7:d0:49:d5:32:44:07:b8:70:dc:d2:eb:5c:7e:1b:d2:7b:
b8:1a:fa:74:c4:16:4a:6f:dc:5d:e4:07:68:69:f7:8e:03:41:
a2:6e:30:86:e0:f4:51:e2:dc:79:8d:45:4a:74:66:03:96:b3:
36:5c:3f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:39 2026 by rpki-client