Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
File: FT0HLM7wC_Rk1mDb0F2todoz0sg.mft (raw, json)
Hash identifier: WhL14GxwM6ne1fyjK4wxf7cEFB0FE5dG1Qb6H/HJ0x0=
Subject key identifier: A5:10:DA:49:DB:F1:0E:E9:C1:08:88:0A:87:6F:05:40:8E:5D:C1:F9
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Certificate issuer: /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial: 019FA974DE9B6554239220F1D8C23132D372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
Manifest number: 0BFA
Signing time: Tue 28 Jul 2026 16:00:36 +0000
Manifest this update: Tue 28 Jul 2026 16:00:36 +0000
Manifest next update: Wed 29 Jul 2026 16:00:36 +0000
Files and hashes: 1: FT0HLM7wC_Rk1mDb0F2todoz0sg.crl (hash: TJ5S321+D8lN8KWrBeaGzynbb/7dOkEYHcP0aYJX2nU=)
2: SGpevAZGETQFuN0tYIFbuVO-oHU.roa (hash: p6/1XP6vhlSrsHHLDARcNdGWShp5rNMH31ibs+saZHQ=)
3: h00EwWS0nwQcNex-PoN4bBKe784.roa (hash: KPJZ49G0RdOibbutyTd80kdxdj+ZbMSn0AFJ4T8Y7D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:de:9b:65:54:23:92:20:f1:d8:c2:31:32:d3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Validity
Not Before: Jul 28 16:00:36 2026 GMT
Not After : Jul 29 16:00:36 2026 GMT
Subject: CN=a510da49dbf10ee9c108880a876f05408e5dc1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:12:60:b3:35:07:be:3a:71:34:40:bc:c1:6e:
77:82:13:e3:ac:79:97:e3:36:f5:24:51:6b:05:f2:
b0:89:1d:cb:c4:6d:db:aa:91:35:6e:e9:8e:86:99:
3a:e1:6d:2a:2a:cd:15:f1:cd:2e:45:87:25:87:89:
f8:8f:fc:ce:d2:e8:40:bf:19:1b:d5:cb:86:f6:c9:
da:f7:19:de:13:0d:cd:67:b3:80:6a:43:fa:98:9e:
69:b5:45:60:bb:2f:a1:c5:c6:56:8a:29:ec:81:1a:
a4:94:7d:9e:c2:96:20:bf:3c:ea:02:0f:01:72:45:
30:4a:b0:f6:f9:6d:77:e9:d8:12:44:f5:91:b5:d7:
76:db:a4:d0:00:69:d6:a5:a7:1a:24:6d:87:ff:26:
f8:da:89:1c:86:8b:02:3f:43:50:69:9e:76:d4:bc:
f0:bd:31:69:83:6b:bf:bb:84:f6:07:fd:b8:ac:47:
ac:95:c5:c7:4a:73:e2:4c:b0:33:a7:3b:fc:32:87:
d4:48:6c:a3:a1:b1:73:85:c1:23:4f:91:2f:c3:b3:
83:f6:43:f5:08:5b:ae:8a:07:fa:21:85:9f:15:e6:
a5:8b:09:7f:71:66:b1:1c:0e:48:cf:3e:f3:5c:c9:
da:70:ab:7f:d6:f7:ae:36:a0:34:dc:89:02:6b:d2:
bf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:10:DA:49:DB:F1:0E:E9:C1:08:88:0A:87:6F:05:40:8E:5D:C1:F9
X509v3 Authority Key Identifier:
keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:21:be:bf:63:46:99:5d:72:25:23:9f:c8:ce:18:ca:fb:d9:
17:46:02:42:c2:f3:bb:30:27:9b:1b:97:13:73:65:5a:8e:66:
87:d7:6a:ed:e4:0a:fd:77:1d:f4:af:d7:62:f5:d6:c7:39:3e:
b5:ac:75:d8:c5:38:68:8c:83:2b:7f:41:2b:4e:f7:2a:76:64:
98:91:48:e5:67:f3:73:8b:59:77:2e:18:41:36:87:a3:14:14:
53:db:4a:24:5e:4b:d7:6d:86:72:5e:f6:9b:45:c0:6c:c8:ef:
95:e3:58:a2:10:88:cc:6f:9f:6c:93:37:5f:35:9a:d1:91:85:
76:ef:82:9d:49:de:51:97:86:f6:13:3d:ac:1d:4c:c4:54:5d:
13:73:7a:46:26:08:1d:01:90:2d:7d:14:f2:30:66:e2:90:82:
22:f1:97:5d:a0:17:ce:53:02:2b:cf:b9:e9:df:f1:7d:0d:ef:
22:7a:14:f3:39:39:4f:1c:5b:64:ac:2d:ee:e3:ba:31:d8:c9:
72:d9:e3:44:81:d6:6d:e2:d3:42:f7:9e:33:35:3f:87:c4:77:
75:72:2a:ba:ef:18:98:75:39:4a:75:e4:fa:3a:d2:a9:d0:76:
b0:7f:54:94:94:7d:5b:1f:9f:65:3c:90:02:21:16:ae:94:3f:
e5:ae:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:26:02 2026 by rpki-client