Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
File: FFAQ3dLG97ZEpQAsseTuFixj0dc.mft (raw, json)
Hash identifier: UHfCNo+u5UGECxjUsEpV25L5Q84v5atMBXehMW4MGA4=
Subject key identifier: B2:18:C4:E7:B3:88:D8:04:12:17:E7:17:19:59:65:81:AD:F6:F7:11
Authority key identifier: 14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
Certificate issuer: /CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Certificate serial: 019F83E8FFF12BF846E3BC49054DF0147DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
Manifest number: 01C6
Signing time: Tue 21 Jul 2026 09:01:52 +0000
Manifest this update: Tue 21 Jul 2026 09:01:52 +0000
Manifest next update: Wed 22 Jul 2026 09:01:52 +0000
Files and hashes: 1: 8-KHbyQ_KYn0snvY9x30CBtJw18.roa (hash: 80kk3Ul4i3TWv/R5PMNMesb+6kDgT0CnH8s73ujvE20=)
2: FFAQ3dLG97ZEpQAsseTuFixj0dc.crl (hash: NAO4sprB58pyjgz4P6hpNugM6xMt10oFjrA26z/rs1E=)
3: YGtlZnWeERw8AsqsnIvt3Avrp8g.roa (hash: wjBYM93Z9LSZQjBjOvD3I1KwuCypmMdncWxGSLsNk2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e8:ff:f1:2b:f8:46:e3:bc:49:05:4d:f0:14:7d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Validity
Not Before: Jul 21 09:01:52 2026 GMT
Not After : Jul 22 09:01:52 2026 GMT
Subject: CN=b218c4e7b388d8041217e71719596581adf6f711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:00:65:01:85:04:3f:49:18:d8:1a:06:6d:
15:b0:7e:c0:1c:f0:20:da:1a:f8:f6:3e:8a:37:ae:
5c:94:a1:1c:3c:9b:71:51:ec:ad:ed:18:44:87:34:
ff:cb:2f:bd:27:89:73:15:c0:ba:5a:2a:d3:00:63:
b4:50:77:6a:a4:76:60:91:46:15:bd:91:54:99:c4:
5a:8c:b1:aa:b0:24:95:09:12:ed:5f:0c:4f:7b:d7:
c7:31:2a:3d:29:b5:f1:5e:20:61:64:c7:a1:76:15:
c0:ec:c5:7c:bf:95:ff:0e:46:28:f3:b5:32:56:31:
bb:9c:de:b7:8e:1f:eb:e7:7e:f4:41:9b:47:cf:d3:
c5:57:fe:9e:a4:2d:cc:5b:a6:5b:31:65:91:8e:ab:
75:62:44:b4:56:6e:66:58:2f:1b:e1:33:02:fd:3c:
1c:5c:81:6f:e8:6d:69:aa:ad:48:e0:a8:94:a0:20:
e1:07:31:8d:c2:55:c6:1b:71:cd:92:35:34:f2:a4:
48:00:45:ca:79:af:35:1c:e3:fc:d4:71:84:6f:ff:
08:3b:a4:65:68:52:e2:28:c6:97:4f:f2:7c:cd:78:
3f:e7:db:a1:2e:50:9e:eb:ff:7e:09:eb:b6:d7:c5:
db:19:ab:1b:f9:84:a2:3e:e1:59:5d:77:f0:87:69:
64:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:18:C4:E7:B3:88:D8:04:12:17:E7:17:19:59:65:81:AD:F6:F7:11
X509v3 Authority Key Identifier:
keyid:14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:81:8a:ca:ec:22:16:1d:26:56:2e:7b:39:93:6d:a5:41:79:
76:3b:f8:9b:4d:bb:85:e7:b7:b8:14:6b:58:3e:87:ca:aa:bd:
5f:11:f2:9b:b7:5e:e8:e6:b1:1c:05:61:3d:66:6b:a3:98:ec:
6b:8d:16:2b:f1:ee:f0:e0:c3:19:fc:95:c0:a5:af:ba:85:34:
ba:7a:72:f0:e5:6e:86:93:4c:52:aa:fd:f0:1a:7c:e0:b6:da:
20:ca:ba:2a:f1:b4:4b:c3:d3:73:90:f0:72:cc:40:e9:b1:6d:
57:3f:61:af:fd:cc:40:9a:1e:c2:77:3d:da:c2:fc:57:84:5b:
38:1e:fb:8f:72:2b:93:f4:ec:2b:7a:6a:61:19:fc:0c:85:8b:
0e:f8:e6:61:52:7b:33:9e:5f:a4:b9:44:7b:7a:fb:27:d8:b5:
d4:a8:98:fd:b1:6c:38:fb:a8:5e:46:54:6d:4a:19:0a:ee:29:
09:79:7f:55:fe:44:bf:f6:75:e1:53:5b:7d:57:01:fe:c8:4f:
50:d5:c7:b9:cb:d6:e6:61:3a:bc:ac:f0:2e:95:a2:d5:aa:48:
27:5b:29:53:ae:55:9e:df:4d:7c:47:e9:01:27:ea:7b:ab:91:
cf:6d:d8:47:23:e2:e9:e7:b1:a2:e1:6b:3e:2b:ae:a5:f3:e5:
50:db:32:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:33:42 2026 by rpki-client