Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
File: FT0HLM7wC_Rk1mDb0F2todoz0sg.mft (raw, json)
Hash identifier: o8u76YqEWOW+f6wPIIT1De1SrdRmV3x+tZmr6Iz3UMk=
Subject key identifier: C9:92:A8:17:B0:DF:4F:39:37:DA:24:BF:10:DD:0A:E2:2D:90:01:35
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Certificate issuer: /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial: 01A0DA96CBF6F1641D99429704E72B8A592C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
Manifest number: 0C98
Signing time: Fri 25 Sep 2026 22:01:50 +0000
Manifest this update: Fri 25 Sep 2026 22:01:50 +0000
Manifest next update: Sat 26 Sep 2026 22:01:50 +0000
Files and hashes: 1: FT0HLM7wC_Rk1mDb0F2todoz0sg.crl (hash: S2s8rI/SN6i7GUdRd7ggvwmgIrK7NZvbvyNcMTrKyMU=)
2: SGpevAZGETQFuN0tYIFbuVO-oHU.roa (hash: p6/1XP6vhlSrsHHLDARcNdGWShp5rNMH31ibs+saZHQ=)
3: h00EwWS0nwQcNex-PoN4bBKe784.roa (hash: KPJZ49G0RdOibbutyTd80kdxdj+ZbMSn0AFJ4T8Y7D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:cb:f6:f1:64:1d:99:42:97:04:e7:2b:8a:59:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Validity
Not Before: Sep 25 22:01:50 2026 GMT
Not After : Sep 26 22:01:50 2026 GMT
Subject: CN=c992a817b0df4f3937da24bf10dd0ae22d900135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c0:8b:c0:f3:8f:04:dc:c3:6c:75:ec:32:73:
dd:f1:d6:b1:4a:8e:82:d5:55:82:f1:75:4c:ea:05:
d9:03:72:8f:fa:0c:60:0b:fc:a5:db:48:85:fd:ec:
63:90:59:6e:8e:22:9f:24:28:17:60:b1:41:ad:4f:
9e:7a:cd:7e:b4:44:c0:30:63:0a:c1:5b:19:5e:19:
65:bf:c5:1f:a4:de:e8:1d:74:f9:ea:60:61:98:75:
c9:70:1a:8b:2b:9c:b8:a7:c5:0c:fa:8c:e7:e9:63:
0d:59:74:30:9d:02:bd:53:3b:bd:2e:85:49:5f:61:
2c:dc:75:bb:e2:2c:e1:0c:56:cf:f8:db:01:4f:5e:
a3:16:a1:44:ad:5a:8d:d7:5b:3f:6d:8c:d5:62:3a:
c6:b4:31:6d:0f:83:12:cb:b1:ac:2d:aa:4a:6e:da:
7d:7f:a0:7d:55:04:ca:41:26:bc:23:fb:ce:1b:ac:
7c:10:dc:f5:8b:15:41:c8:08:c9:8a:bf:2f:69:cf:
6c:5e:c1:6e:56:f8:7e:10:79:dc:d5:a0:f8:40:4e:
36:9a:aa:61:33:28:89:32:4d:3f:bd:e8:98:b4:61:
92:46:e2:da:db:e9:50:6c:6d:f0:d8:9a:90:68:a0:
f0:c6:d6:93:7f:99:9b:ee:b2:de:e3:78:8a:d1:9d:
ef:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:92:A8:17:B0:DF:4F:39:37:DA:24:BF:10:DD:0A:E2:2D:90:01:35
X509v3 Authority Key Identifier:
keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:00:dc:48:6f:40:64:bd:24:53:cf:b3:25:2b:e2:ed:e0:c5:
03:4f:53:c7:f7:55:7e:2c:fa:8c:6d:5a:ae:c0:70:fd:ac:ec:
d7:22:1e:cb:5f:98:b2:52:02:3a:ff:91:e0:24:9f:75:0f:50:
de:00:df:ba:d6:fe:0f:05:d4:13:42:ed:a9:b9:12:03:06:30:
32:dc:3b:9a:50:17:14:ba:63:eb:8e:5a:c0:53:74:66:99:2f:
af:48:6d:a9:49:44:ed:53:65:88:99:26:0f:63:8f:80:5d:b4:
7a:75:7c:7b:b3:e5:87:6f:73:fc:20:a6:28:1e:08:ca:72:e5:
7a:10:d7:c1:d8:30:1c:19:b6:ce:66:44:11:59:9f:1d:3f:56:
f8:bd:8c:36:8c:75:20:19:1b:a7:41:1c:38:2b:6e:f6:11:90:
49:d1:55:62:27:b3:02:72:7e:a1:b2:dd:8e:ca:d9:93:8b:37:
ae:42:b7:d9:f4:c2:6b:c9:5b:56:44:c6:92:f7:23:67:00:eb:
c0:bd:2e:bc:78:b1:b0:fd:bc:c4:0c:2e:ad:b3:8c:96:c4:3e:
ab:30:9b:6e:d8:45:dd:7d:56:c0:78:a4:6d:77:c5:83:5b:7d:
b2:b6:5e:21:4b:08:54:1f:eb:de:77:89:13:db:8b:b9:b8:19:
86:ea:47:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:49:03 2026 by rpki-client