Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
File: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft (raw, json)
Hash identifier: ceAGDw0uAAhKBOUc6JpKiwR/pEpRv6iAEhQkIpEXGUo=
Subject key identifier: 4F:57:6C:FB:BD:80:77:7D:14:6B:85:7E:63:4C:27:BD:CB:FB:E9:9A
Authority key identifier: 7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
Certificate issuer: /CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Certificate serial: 019D9BBEAA935C186C8F266DF9681718ADBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
Manifest number: 0229
Signing time: Fri 17 Apr 2026 14:00:57 +0000
Manifest this update: Fri 17 Apr 2026 14:00:57 +0000
Manifest next update: Sat 18 Apr 2026 14:00:57 +0000
Files and hashes: 1: 5pQj7qkmBcSMfaLVfZDv-7kT9DI.roa (hash: Rd6vx0quono9MPD1F0vpd55eYapHMtF51xcO/Hw6eew=)
2: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl (hash: I7LqkN1RYN0jr4h/aNf0YyVuRw6QTlrmqLP4QXva+js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:aa:93:5c:18:6c:8f:26:6d:f9:68:17:18:ad:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Validity
Not Before: Apr 17 14:00:57 2026 GMT
Not After : Apr 18 14:00:57 2026 GMT
Subject: CN=4f576cfbbd80777d146b857e634c27bdcbfbe99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:84:48:93:eb:f9:9a:73:36:48:46:f1:fc:
31:80:bf:0d:85:31:71:25:f2:39:c6:e8:b4:1d:d2:
1a:2e:be:1c:3b:dc:2b:7c:55:a2:07:b4:79:4a:1a:
06:7e:fe:3a:e2:b9:76:67:b4:ff:90:00:da:b4:52:
12:05:d5:b4:63:f4:06:a5:f2:19:b2:d9:9d:0a:36:
24:28:46:57:ef:9b:5d:0e:69:9e:a7:69:60:60:7b:
40:16:06:79:8e:df:f0:10:25:62:02:07:4e:57:1e:
d0:80:6a:ec:bd:d6:4d:66:3b:06:08:aa:cd:7c:71:
a4:34:7d:1b:a9:06:89:6f:ca:76:3f:e3:ef:ab:26:
d5:3e:85:b9:2a:3f:e2:b2:7b:d3:9f:a3:cd:9c:3f:
67:31:ef:40:5f:64:f8:9f:c3:53:46:4c:9e:f1:f9:
4d:99:3b:78:fa:35:e2:6c:0b:8a:b9:9e:a0:94:ba:
62:2e:e5:e2:26:13:32:48:06:b6:80:b0:ec:82:5c:
5a:4d:fd:87:f6:4a:e2:ff:a6:e7:1b:27:83:10:f9:
51:b0:cf:8e:a3:8c:9c:db:20:cd:40:e3:db:ee:24:
0d:20:c1:30:7a:67:ed:bc:43:17:3f:0f:6d:76:15:
8e:84:ce:b7:a4:8a:4b:67:87:6c:7f:9b:29:52:6b:
e3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:57:6C:FB:BD:80:77:7D:14:6B:85:7E:63:4C:27:BD:CB:FB:E9:9A
X509v3 Authority Key Identifier:
keyid:7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:38:ad:d7:65:89:fb:07:13:d5:56:15:0a:73:d4:df:a5:9f:
39:35:41:f1:6e:e2:7e:a0:3d:b7:dc:9a:4e:fe:c2:52:e8:da:
f7:3e:26:a5:fd:b6:2b:8d:a5:45:29:16:f6:34:2a:5e:11:4d:
fc:7b:cd:13:45:f0:19:3d:18:22:a3:68:2e:f2:87:ae:7f:cf:
e9:b9:67:4e:3e:b3:2a:a9:8a:3e:fa:c8:62:70:c3:1e:0c:35:
e8:49:09:86:a5:ac:de:9e:18:a6:13:e2:52:cd:55:a0:5c:b2:
86:26:84:b1:6f:46:e6:5a:c9:33:bc:2d:4d:3d:40:aa:b2:13:
79:05:3e:80:d7:2e:d6:b8:3a:2a:6c:96:da:3f:d6:ad:5a:d6:
3b:68:be:20:2f:30:6c:0d:cf:52:ab:05:75:08:fa:75:1b:69:
54:2b:37:23:83:30:b0:f5:92:dc:c3:45:68:8d:53:c2:99:c3:
dd:9b:0d:54:54:04:56:a4:58:fb:2a:0d:ca:37:45:8d:01:52:
2d:62:02:20:c9:f6:79:c8:64:4e:91:57:1c:5a:be:05:cd:f6:
6e:4f:07:98:39:de:c8:7d:c4:11:0c:29:70:9f:0b:8b:1d:54:
dd:f3:c2:2f:aa:19:32:b9:0c:25:00:49:85:8d:46:10:a3:33:
8b:86:22:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:43:05 2026 by rpki-client