Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
File: FT0HLM7wC_Rk1mDb0F2todoz0sg.mft (raw, json)
Hash identifier: LmQFNufAKzMjfPvm5FbFVJ1By5WyyD8n/PyJwFFM52o=
Subject key identifier: DF:3A:A2:61:B9:AD:CA:64:B7:34:37:06:A0:86:85:5F:2A:23:0F:FE
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Certificate issuer: /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial: 019FAB637E943F6F620EADF82ED02AD69C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
Manifest number: 0BFB
Signing time: Wed 29 Jul 2026 01:00:52 +0000
Manifest this update: Wed 29 Jul 2026 01:00:52 +0000
Manifest next update: Thu 30 Jul 2026 01:00:52 +0000
Files and hashes: 1: FT0HLM7wC_Rk1mDb0F2todoz0sg.crl (hash: 9gLa6Kp8Qh1bW6w5KbI2UCMxj+ajYLZUHMqY/36WFnQ=)
2: SGpevAZGETQFuN0tYIFbuVO-oHU.roa (hash: p6/1XP6vhlSrsHHLDARcNdGWShp5rNMH31ibs+saZHQ=)
3: h00EwWS0nwQcNex-PoN4bBKe784.roa (hash: KPJZ49G0RdOibbutyTd80kdxdj+ZbMSn0AFJ4T8Y7D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:7e:94:3f:6f:62:0e:ad:f8:2e:d0:2a:d6:9c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Validity
Not Before: Jul 29 01:00:52 2026 GMT
Not After : Jul 30 01:00:52 2026 GMT
Subject: CN=df3aa261b9adca64b7343706a086855f2a230ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:a4:83:24:64:74:71:97:bd:1f:75:75:35:
e5:8b:c4:d5:a5:52:01:31:9b:9b:d6:a6:54:94:38:
df:6e:f3:b7:e2:17:ac:d4:1d:e6:6e:c3:a0:ec:f3:
9e:ab:ff:5d:42:d5:df:2d:09:2c:eb:21:ac:ad:d2:
d8:82:fa:af:20:c6:5b:16:84:9f:f3:44:10:62:ad:
7e:e7:58:dc:f6:a3:6e:4c:40:59:d3:b8:bd:ae:ae:
75:6b:18:cc:c6:9e:37:50:8b:70:e7:c9:fc:7c:83:
3b:10:35:47:fc:bf:81:b9:3b:0f:80:6a:81:5c:cb:
d2:99:0a:f5:48:4d:5f:e9:b1:10:11:68:9d:4a:02:
d9:27:99:3c:68:a8:17:ae:a2:d4:3f:fd:d2:5c:61:
21:40:25:db:c4:86:e6:29:4b:a6:72:fa:e3:5d:51:
d8:44:fc:70:2d:f9:33:d8:0b:86:9c:ba:dc:7e:9f:
7c:51:5d:be:d0:a3:44:94:20:0e:00:e3:57:05:58:
84:8a:ad:d9:f9:21:55:d4:30:f3:60:ed:4a:74:34:
af:54:de:a5:26:e2:db:0f:95:73:71:92:b7:a0:80:
ea:06:b8:e7:f2:fa:73:d2:2c:a9:91:0e:67:e8:81:
bc:f1:e9:f8:0e:3f:b3:83:f3:b8:e7:d8:cb:15:0e:
70:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3A:A2:61:B9:AD:CA:64:B7:34:37:06:A0:86:85:5F:2A:23:0F:FE
X509v3 Authority Key Identifier:
keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b2:70:27:eb:6a:5c:1f:49:c5:05:30:3f:6f:fc:3d:5e:74:
37:57:28:9d:1e:5a:2d:ea:ac:a0:fe:8a:40:88:6f:48:0b:ec:
10:9e:6e:f2:41:7d:c4:98:bc:51:06:83:1e:6c:c0:ad:bf:75:
ef:9b:1b:98:be:6d:e5:d6:a4:25:58:72:85:fd:90:22:b2:39:
95:1b:8f:a2:28:fd:b0:1b:ce:a3:4f:fc:97:e8:91:b6:10:7a:
f4:3f:f7:53:ae:06:c9:ab:7d:d1:f3:5b:9e:66:96:61:ea:4b:
d8:e6:d4:d2:0a:27:23:8d:0f:75:fe:ac:92:5d:42:56:d4:2f:
66:07:dc:0e:14:be:4d:8d:55:c3:80:57:d8:59:45:24:a7:81:
c1:3d:15:36:23:e4:7f:aa:c3:4b:25:99:7f:e9:1d:21:17:8b:
a0:41:00:a7:15:f8:a0:9b:49:cd:ce:12:da:b2:22:75:4a:a0:
23:b6:8a:f8:f8:91:d7:2c:00:23:fc:a4:13:e5:7f:d4:59:c2:
aa:96:77:50:cb:1c:20:ab:79:4a:b3:70:a1:55:f4:1e:2d:84:
cc:d6:43:04:50:db:4b:12:34:b3:ac:fe:8b:72:df:09:7d:32:
f7:74:f5:b4:35:09:4d:fd:cc:50:20:2a:ee:0e:4e:75:46:3b:
32:b5:53:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:53:59 2026 by rpki-client