Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
File: FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft (raw, json)
Hash identifier: 6xLSnjI0kFS3ZV+hFpHqX6aQsAnLZjZYThUdhAFHuyk=
Subject key identifier: 24:60:F9:E6:73:28:D2:2F:F5:13:1A:8A:EF:5C:AF:82:EE:AD:88:B1
Authority key identifier: 15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
Certificate issuer: /CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Certificate serial: 019D9850D556E7D7E5A12FDEAEE216E38BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
Manifest number: 1533
Signing time: Thu 16 Apr 2026 22:02:07 +0000
Manifest this update: Thu 16 Apr 2026 22:02:07 +0000
Manifest next update: Fri 17 Apr 2026 22:02:07 +0000
Files and hashes: 1: FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl (hash: J4mT9kCc7ACjkZjfi0pM30FeTB/luy53qtYug7i9mKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:d5:56:e7:d7:e5:a1:2f:de:ae:e2:16:e3:8b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Validity
Not Before: Apr 16 22:02:07 2026 GMT
Not After : Apr 17 22:02:07 2026 GMT
Subject: CN=2460f9e67328d22ff5131a8aef5caf82eead88b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:ec:07:89:43:b6:41:61:b5:f8:9f:0e:0d:
98:3f:e8:54:83:99:24:98:c7:1a:ab:09:1f:a6:30:
18:b9:6a:0a:8c:e2:3d:70:2c:4a:81:1e:16:62:b8:
9a:a6:be:6a:d2:93:cc:dd:12:15:7a:f6:1f:54:ff:
6f:ec:67:50:d4:85:9e:40:e2:6d:05:4d:86:23:4e:
35:6a:90:52:bc:74:57:77:a6:b1:dd:54:70:d7:85:
42:85:bc:1f:f0:18:46:2c:8c:99:e6:3e:c5:26:9f:
fa:de:38:9b:ee:aa:2c:d3:15:c6:0d:16:74:00:f0:
4c:ba:a7:bb:e8:a7:70:2b:99:ae:74:65:72:32:75:
c2:15:ea:0f:84:b4:83:25:7a:f0:d4:9d:95:27:9e:
ec:fa:05:32:ec:41:25:f6:ad:f4:df:5b:3f:06:86:
1c:03:ae:b4:a2:b5:aa:00:95:65:33:74:77:53:6c:
a2:e4:44:70:14:90:49:61:94:14:e6:71:2a:16:8b:
8e:68:21:83:45:37:0f:81:88:c4:78:db:78:c1:60:
64:80:a6:4d:7f:3a:d9:72:7f:52:f8:d9:e7:42:ff:
51:fc:c6:2b:16:14:fb:37:56:47:0b:99:e1:d1:c5:
17:0a:d3:3f:1f:ae:13:69:06:7c:5f:9c:a1:9e:a1:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:60:F9:E6:73:28:D2:2F:F5:13:1A:8A:EF:5C:AF:82:EE:AD:88:B1
X509v3 Authority Key Identifier:
keyid:15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0f:f3:f5:c8:1f:ef:ca:08:92:2b:21:e1:42:d9:86:d8:cf:
3a:79:46:bb:ce:12:ef:44:7e:15:4e:21:c0:d7:25:55:08:66:
1a:2b:20:01:7a:89:54:0b:ac:98:a6:79:28:70:bc:75:c5:ef:
79:25:b8:e2:c7:64:3b:12:6d:e9:a6:5b:f8:ae:0b:fe:47:cb:
7c:22:81:6c:55:a1:35:62:86:72:40:6b:63:2a:08:3f:c2:94:
cc:2b:22:8c:94:66:fa:81:6c:db:6b:1e:01:9f:85:69:1f:65:
fc:73:e6:57:6d:6e:4f:31:7a:84:0f:57:b6:a4:f1:fd:7b:cc:
16:73:1e:9d:af:06:8a:22:95:79:9c:d0:65:ee:9e:ab:f2:b5:
97:a3:de:43:2c:3e:67:77:7d:8e:e4:a2:8d:45:12:2b:ec:ac:
f2:00:fe:23:39:74:a5:5a:b7:d7:d9:db:05:79:c8:c7:66:14:
99:84:12:88:6a:35:2a:e8:40:8a:92:c6:2c:e7:a8:45:5d:1b:
af:39:7b:16:ae:11:ea:12:a2:e9:84:ba:ee:c0:d1:27:12:df:
e8:a1:30:ce:29:25:94:da:3f:01:8d:21:4f:00:e8:fd:e8:24:
b9:ee:eb:1f:dc:d3:ef:c6:04:55:37:0c:86:cd:0a:9c:62:ee:
34:7a:86:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUNVW59floS/eruIW44vzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzgzMWMxNjYzNTE2MWM0ZGJkMThlYzVhNzJiOTljNGVl
NTE5ZTMwHhcNMjYwNDE2MjIwMjA3WhcNMjYwNDE3MjIwMjA3WjAzMTEwLwYDVQQD
EygyNDYwZjllNjczMjhkMjJmZjUxMzFhOGFlZjVjYWY4MmVlYWQ4OGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydHsB4lDtkFhtfifDg2YP+hUg5kk
mMcaqwkfpjAYuWoKjOI9cCxKgR4WYriapr5q0pPM3RIVevYfVP9v7GdQ1IWeQOJt
BU2GI041apBSvHRXd6ax3VRw14VChbwf8BhGLIyZ5j7FJp/63jib7qos0xXGDRZ0
APBMuqe76KdwK5mudGVyMnXCFeoPhLSDJXrw1J2VJ57s+gUy7EEl9q3031s/BoYc
A660orWqAJVlM3R3U2yi5ERwFJBJYZQU5nEqFouOaCGDRTcPgYjEeNt4wWBkgKZN
fzrZcn9S+NnnQv9R/MYrFhT7N1ZHC5nh0cUXCtM/H64TaQZ8X5yhnqGXywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRg+eZzKNIv9RMaiu9cr4LurYixMB8GA1UdIwQY
MBaAFBU4McFmNRYcTb0Y7FpyuZxO5RnjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85NTQ1NTctMmE1Zi00ODI2LWFiMTYt
Y2Q1MTdiMTY5Zjg5LzEvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85NTQ1NTctMmE1Zi00ODI2LWFiMTYtY2Q1MTdiMTY5Zjg5
LzEvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjA/z9cgf
78oIkish4ULZhtjPOnlGu84S70R+FU4hwNclVQhmGisgAXqJVAusmKZ5KHC8dcXv
eSW44sdkOxJt6aZb+K4L/kfLfCKBbFWhNWKGckBrYyoIP8KUzCsijJRm+oFs22se
AZ+FaR9l/HPmV21uTzF6hA9XtqTx/XvMFnMena8GiiKVeZzQZe6eq/K1l6PeQyw+
Z3d9juSijUUSK+ys8gD+Izl0pVq319nbBXnIx2YUmYQSiGo1KuhAipLGLOeoRV0b
rzl7Fq4R6hKi6YS67sDRJxLf6KEwzikllNo/AY0hTwDo/egkue7rH9zT78YEVTcM
hs0KnGLuNHqGDw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:56:23 2026 by rpki-client