Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
File: FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft (raw, json)
Hash identifier: 18vqYJHeO/QaOXycPdknhvZmds7lS1w1Y5wRZPGPC8I=
Subject key identifier: AB:38:0E:26:7D:F8:BC:21:DE:32:C4:D3:97:D7:52:27:A4:B0:96:F0
Authority key identifier: 15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
Certificate issuer: /CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Certificate serial: 019CACB4D2991B2DAFA03EA44CED4751621B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
Manifest number: 14B9
Signing time: Mon 02 Mar 2026 04:00:57 +0000
Manifest this update: Mon 02 Mar 2026 04:00:57 +0000
Manifest next update: Tue 03 Mar 2026 04:00:57 +0000
Files and hashes: 1: FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl (hash: 8lxR0zKDv1njEgg6cHOMMuXKA1WkVm4VXLH8X/oSdIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:d2:99:1b:2d:af:a0:3e:a4:4c:ed:47:51:62:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Validity
Not Before: Mar 2 04:00:57 2026 GMT
Not After : Mar 3 04:00:57 2026 GMT
Subject: CN=ab380e267df8bc21de32c4d397d75227a4b096f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:08:44:9c:c4:f9:df:10:ac:a0:83:02:3c:
6d:28:cc:39:2b:4d:86:47:e6:92:6d:c6:ab:48:fe:
96:1e:4f:0d:61:af:91:cf:47:6a:69:62:ab:14:2f:
d3:73:ad:ce:90:b6:06:45:0e:a2:96:c9:aa:d6:41:
92:ab:19:50:7c:0b:c5:70:1a:57:8a:bb:b6:1c:7b:
12:d0:9c:4c:b9:b7:2f:2c:ca:c4:c5:76:c2:a0:73:
7f:92:14:10:f5:92:e0:26:65:27:5f:8d:67:30:2a:
f5:7f:44:51:15:1b:2a:d4:ca:17:e6:d0:4a:5b:09:
2a:88:7d:06:49:df:4d:21:4b:f7:cc:45:83:61:9c:
6a:c1:e0:87:6b:33:4e:b3:91:67:21:a1:d6:e5:9f:
44:ca:7c:f4:1a:80:3e:84:61:5a:b5:fd:2f:2e:c3:
0a:68:6c:70:d8:52:99:d6:b2:5e:f1:89:64:ab:20:
64:ba:6d:bf:9c:dd:0d:f1:dc:8c:1c:10:19:fe:00:
23:e4:c2:93:e2:03:d4:0b:06:95:a7:89:5f:23:c3:
e7:d2:18:59:b9:df:52:be:77:6b:6c:a5:4e:55:bb:
92:15:6d:2e:06:0c:0f:fc:1f:5c:bd:41:1f:2c:39:
60:59:38:bc:db:5d:9a:ce:85:15:03:81:6a:26:82:
6f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:38:0E:26:7D:F8:BC:21:DE:32:C4:D3:97:D7:52:27:A4:B0:96:F0
X509v3 Authority Key Identifier:
keyid:15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0e:e6:05:a8:c8:28:e9:f7:3a:a7:59:ea:2a:f9:60:f5:b0:
63:5a:5c:7e:d0:b2:eb:98:12:22:90:d7:54:5e:b0:58:1a:4f:
c0:12:c7:32:ea:ab:9a:9d:8e:29:a5:50:b2:d2:85:3e:a1:68:
fd:59:74:17:5d:fd:f6:c5:42:e8:db:99:cc:d7:80:a3:dc:9c:
81:ff:39:4f:8a:d6:bd:60:ca:01:c3:1c:cb:03:7e:8a:50:02:
01:85:f2:ca:c6:73:52:2b:56:6a:df:ed:89:a0:6c:5e:29:1f:
ed:a1:d6:15:e8:65:48:e3:c5:03:ef:4d:55:d1:32:08:74:12:
bd:bf:4f:b7:e1:ff:33:75:d8:c2:07:d7:4e:b2:dc:91:f6:0f:
30:61:b3:4e:c0:84:6f:a1:44:ed:58:bf:76:5c:d3:50:d3:5c:
23:a7:f8:ed:0c:2b:bc:ba:0a:a4:e7:78:04:bc:93:22:59:a2:
36:10:15:be:eb:67:13:0b:2b:ef:5c:28:76:c2:f4:06:b3:a0:
70:97:4a:e5:58:ee:04:57:ff:88:77:10:73:fa:37:70:75:e0:
aa:c6:31:79:df:17:45:38:b5:2e:27:f1:2e:2f:8c:6a:83:48:
d7:7b:60:96:8a:6f:41:9c:8e:e8:9f:14:c9:5a:d2:7d:79:9f:
55:1b:55:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystNKZGy2voD6kTO1HUWIbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzgzMWMxNjYzNTE2MWM0ZGJkMThlYzVhNzJiOTljNGVl
NTE5ZTMwHhcNMjYwMzAyMDQwMDU3WhcNMjYwMzAzMDQwMDU3WjAzMTEwLwYDVQQD
EyhhYjM4MGUyNjdkZjhiYzIxZGUzMmM0ZDM5N2Q3NTIyN2E0YjA5NmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYsIRJzE+d8QrKCDAjxtKMw5K02G
R+aSbcarSP6WHk8NYa+Rz0dqaWKrFC/Tc63OkLYGRQ6ilsmq1kGSqxlQfAvFcBpX
iru2HHsS0JxMubcvLMrExXbCoHN/khQQ9ZLgJmUnX41nMCr1f0RRFRsq1MoX5tBK
WwkqiH0GSd9NIUv3zEWDYZxqweCHazNOs5FnIaHW5Z9Eynz0GoA+hGFatf0vLsMK
aGxw2FKZ1rJe8YlkqyBkum2/nN0N8dyMHBAZ/gAj5MKT4gPUCwaVp4lfI8Pn0hhZ
ud9SvndrbKVOVbuSFW0uBgwP/B9cvUEfLDlgWTi8212azoUVA4FqJoJvewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKs4DiZ9+Lwh3jLE05fXUieksJbwMB8GA1UdIwQY
MBaAFBU4McFmNRYcTb0Y7FpyuZxO5RnjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85NTQ1NTctMmE1Zi00ODI2LWFiMTYt
Y2Q1MTdiMTY5Zjg5LzEvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85NTQ1NTctMmE1Zi00ODI2LWFiMTYtY2Q1MTdiMTY5Zjg5
LzEvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWA7mBajI
KOn3OqdZ6ir5YPWwY1pcftCy65gSIpDXVF6wWBpPwBLHMuqrmp2OKaVQstKFPqFo
/Vl0F1399sVC6NuZzNeAo9ycgf85T4rWvWDKAcMcywN+ilACAYXyysZzUitWat/t
iaBsXikf7aHWFehlSOPFA+9NVdEyCHQSvb9Pt+H/M3XYwgfXTrLckfYPMGGzTsCE
b6FE7Vi/dlzTUNNcI6f47QwrvLoKpOd4BLyTIlmiNhAVvutnEwsr71wodsL0BrOg
cJdK5VjuBFf/iHcQc/o3cHXgqsYxed8XRTi1LifxLi+MaoNI13tglopvQZyO6J8U
yVrSfXmfVRtVlA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:08 2026 by rpki-client