
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
File: FT0HLM7wC_Rk1mDb0F2todoz0sg.mft (raw, json)
Hash identifier: I1c80i53QjL3kf9lOfVdgOQZxk5V36naL7h+phyUTxA=
Subject key identifier: E0:27:17:8E:7F:83:B6:D9:F4:00:DF:8D:EF:D2:77:07:1D:A0:C0:01
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Certificate issuer: /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial: 019DA3E6EB2C5CC7402F10E1ECD28974410B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
Manifest number: 0AEE
Signing time: Sun 19 Apr 2026 04:01:52 +0000
Manifest this update: Sun 19 Apr 2026 04:01:52 +0000
Manifest next update: Mon 20 Apr 2026 04:01:52 +0000
Files and hashes: 1: FT0HLM7wC_Rk1mDb0F2todoz0sg.crl (hash: Y2cKCCOKb+PAsQ4hFysyTOGOOZEN4gx2myGHF9/cpJo=)
2: SGpevAZGETQFuN0tYIFbuVO-oHU.roa (hash: p6/1XP6vhlSrsHHLDARcNdGWShp5rNMH31ibs+saZHQ=)
3: h00EwWS0nwQcNex-PoN4bBKe784.roa (hash: KPJZ49G0RdOibbutyTd80kdxdj+ZbMSn0AFJ4T8Y7D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:eb:2c:5c:c7:40:2f:10:e1:ec:d2:89:74:41:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Validity
Not Before: Apr 19 04:01:52 2026 GMT
Not After : Apr 20 04:01:52 2026 GMT
Subject: CN=e027178e7f83b6d9f400df8defd277071da0c001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:1e:bd:12:8f:d4:e6:c0:b7:69:ed:ba:0c:
71:82:f2:b2:d8:6c:a7:c7:02:30:b3:e1:79:09:c2:
69:21:1f:cc:6a:31:d7:33:f4:9a:f7:53:c1:d3:a0:
75:f2:5c:08:f9:0b:56:4d:ab:a9:c9:3f:6c:89:03:
3f:b3:03:06:3d:7b:11:41:76:5e:88:a5:f3:ef:fc:
bc:42:f8:8f:a7:47:26:87:3c:ed:61:c3:44:37:2b:
7f:aa:63:90:7c:e6:6f:e8:4e:84:89:43:7c:86:8c:
0f:b2:9d:eb:22:a6:73:33:71:e4:0b:ee:ad:8b:da:
97:15:d8:00:77:9b:69:74:a7:5f:4b:3a:98:7a:07:
cc:24:4c:de:0a:f6:7e:96:67:5c:c7:df:2c:39:24:
c4:f7:63:c0:99:b4:b1:1b:77:c3:07:6f:e3:2d:ce:
bc:1f:ab:50:76:fe:49:a2:c2:95:8a:46:10:ae:ae:
83:da:f1:65:81:c7:ef:81:89:57:71:52:9c:99:9d:
f0:9b:c0:a8:a4:6f:07:5c:0c:c0:af:65:72:32:82:
b8:c4:00:72:f5:65:f8:e3:bb:be:18:52:94:bd:a8:
82:2c:c5:63:02:b9:79:58:55:03:2a:7f:a4:1b:50:
79:66:4f:37:c1:bf:27:42:3d:a0:65:63:bc:f7:df:
40:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:27:17:8E:7F:83:B6:D9:F4:00:DF:8D:EF:D2:77:07:1D:A0:C0:01
X509v3 Authority Key Identifier:
keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:47:09:9f:1c:53:e1:3f:3d:57:fa:1a:cf:9a:b6:46:09:2a:
32:d4:dd:96:51:af:58:a9:75:46:9d:c0:ee:59:0f:a6:7f:a9:
e0:85:a6:96:38:ea:0f:00:47:19:d4:f1:3e:e5:ac:36:4b:87:
53:22:8b:31:c2:53:e3:cd:d4:6d:44:bf:06:b4:b9:de:84:51:
5f:ec:60:28:d2:05:58:2e:de:32:fe:8b:2e:3e:f4:74:d7:f9:
da:e7:5d:54:67:a0:c7:d7:a3:92:cd:92:dd:18:5d:57:39:9e:
20:cc:6a:14:4d:6c:f9:d2:b3:00:c0:6d:c9:29:0e:7b:5b:59:
32:a9:1c:4a:15:52:73:90:05:ea:b1:38:d9:de:95:e2:92:42:
2b:6b:b5:a1:fd:40:7c:3c:2d:fa:1f:4c:38:1f:f6:7d:ec:fd:
8a:af:4c:51:f9:54:d9:8d:31:5e:4d:13:f2:71:3f:a5:5f:4d:
7c:a6:fd:df:4d:02:f8:3d:2a:36:13:82:6b:dd:7f:ba:9e:db:
53:a4:2a:13:25:67:fb:1f:51:83:ac:70:76:7b:e4:ef:5f:b2:
85:81:11:e4:6b:74:fa:5b:05:ae:d8:d8:ca:7d:3d:21:cd:34:
85:41:a8:bf:db:40:b8:90:fe:9c:0e:60:42:b0:7f:a3:f5:1c:
a3:0f:1c:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5ussXMdALxDh7NKJdEELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1M2QwNzJjY2VmMDBiZjQ2NGQ2NjBkYmQwNWRhZGExZGEz
M2QyYzgwHhcNMjYwNDE5MDQwMTUyWhcNMjYwNDIwMDQwMTUyWjAzMTEwLwYDVQQD
EyhlMDI3MTc4ZTdmODNiNmQ5ZjQwMGRmOGRlZmQyNzcwNzFkYTBjMDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulIevRKP1ObAt2ntugxxgvKy2Gyn
xwIws+F5CcJpIR/MajHXM/Sa91PB06B18lwI+QtWTaupyT9siQM/swMGPXsRQXZe
iKXz7/y8QviPp0cmhzztYcNENyt/qmOQfOZv6E6EiUN8howPsp3rIqZzM3HkC+6t
i9qXFdgAd5tpdKdfSzqYegfMJEzeCvZ+lmdcx98sOSTE92PAmbSxG3fDB2/jLc68
H6tQdv5JosKVikYQrq6D2vFlgcfvgYlXcVKcmZ3wm8CopG8HXAzAr2VyMoK4xABy
9WX447u+GFKUvaiCLMVjArl5WFUDKn+kG1B5Zk83wb8nQj2gZWO8999AewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAnF45/g7bZ9ADfje/SdwcdoMABMB8GA1UdIwQY
MBaAFBU9ByzO8Av0ZNZg29BdraHaM9LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlQwSExNN3dDX1JrMW1EYjBGMnRvZG96MHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82NGIxZTYtMGExZi00MGVjLTk0Mzct
MDRhNGMyYzQxYzM0LzEvRlQwSExNN3dDX1JrMW1EYjBGMnRvZG96MHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82NGIxZTYtMGExZi00MGVjLTk0MzctMDRhNGMyYzQxYzM0
LzEvRlQwSExNN3dDX1JrMW1EYjBGMnRvZG96MHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUcJnxxT
4T89V/oaz5q2RgkqMtTdllGvWKl1Rp3A7lkPpn+p4IWmljjqDwBHGdTxPuWsNkuH
UyKLMcJT483UbUS/BrS53oRRX+xgKNIFWC7eMv6LLj70dNf52uddVGegx9ejks2S
3RhdVzmeIMxqFE1s+dKzAMBtySkOe1tZMqkcShVSc5AF6rE42d6V4pJCK2u1of1A
fDwt+h9MOB/2fez9iq9MUflU2Y0xXk0T8nE/pV9NfKb9300C+D0qNhOCa91/up7b
U6QqEyVn+x9Rg6xwdnvk71+yhYER5Gt0+lsFrtjYyn09Ic00hUGov9tAuJD+nA5g
QrB/o/Ucow8ckQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:16 2026 by rpki-client