Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: IwyO6/+6Ac19oWRSrdNVED0wKzlIn8SMOHBOiAUeHC4=
Subject key identifier: 9A:92:2C:40:4B:30:CC:EC:BD:95:C4:09:11:81:F7:63:D8:0F:45:94
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 019D390A360CFEB146BDFC0CADA966A6E5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 094A
Signing time: Sun 29 Mar 2026 10:01:03 +0000
Manifest this update: Sun 29 Mar 2026 10:01:03 +0000
Manifest next update: Mon 30 Mar 2026 10:01:03 +0000
Files and hashes: 1: 1W82at7mSiuchX3iCzO6G2WZfjs.roa (hash: OyjiciJl+n/aBNYiJh6cnpdIClbp0Z2IycUrjNfaQ1s=)
2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: h8Jb4vN4MKVz0sUKSPZdA9ytLl75NDevVdLXzzXE3KQ=)
3: xsaLPUS_EPRPzM8NWjyE1aTWHX4.roa (hash: dBX6NfyeptV43b7aTbE31Dh+/tXWuq6hyAQ37G7Hits=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:36:0c:fe:b1:46:bd:fc:0c:ad:a9:66:a6:e5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Mar 29 10:01:03 2026 GMT
Not After : Mar 30 10:01:03 2026 GMT
Subject: CN=9a922c404b30ccecbd95c4091181f763d80f4594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:90:7a:6d:a5:77:a1:2d:ad:20:4e:8c:88:51:
4e:e9:d1:44:9b:6a:21:54:70:8d:7e:de:0a:d0:ed:
9b:e0:2c:57:65:fe:75:5b:1f:5c:07:83:33:ec:72:
e8:f9:86:54:59:25:82:db:28:e6:fa:21:cc:3c:d9:
8c:90:2f:d2:3a:55:ce:dd:84:8d:a9:03:07:27:22:
04:83:ff:b2:d8:35:5d:ae:6d:fe:3a:e1:83:68:9b:
8d:a5:02:37:3c:d4:ea:fc:2a:6f:24:5e:b0:b9:69:
fc:4d:83:c8:b7:1c:8b:15:07:e4:1e:1e:24:b0:41:
01:ab:43:cf:a2:d9:0e:57:fd:83:dd:41:97:80:7c:
3d:02:6c:b2:84:14:12:86:7d:b4:e3:20:07:35:a6:
6c:2b:db:c0:f8:f8:37:27:17:00:ac:aa:1b:0d:6b:
22:2c:01:14:8c:ec:c4:a0:3c:2c:e6:0f:58:48:8d:
2c:8c:1f:eb:17:6b:bc:54:b1:d6:8f:e5:ff:18:01:
2a:22:d3:f4:5e:1a:1d:07:6b:f0:3c:06:11:24:bc:
47:46:d8:87:24:77:39:8c:2f:5e:c4:1b:87:ca:d2:
e4:0a:07:2c:ba:f9:b9:72:ba:1e:1c:a8:5c:be:af:
b7:af:6a:24:e5:0f:45:52:9a:ee:68:6e:76:99:b5:
f1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:92:2C:40:4B:30:CC:EC:BD:95:C4:09:11:81:F7:63:D8:0F:45:94
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ec:cd:55:58:c9:b5:f6:7a:09:f3:4c:e1:a1:a8:2e:71:e9:
0f:94:5c:27:4a:c5:f5:c8:be:1b:f1:81:c4:ff:99:b0:7d:e0:
8f:b0:df:17:03:e1:e1:30:d1:a0:5b:08:ca:b4:49:fd:a0:87:
7b:95:10:a4:12:23:47:8e:c4:f3:c8:58:09:5a:51:93:45:7f:
6c:44:3d:5b:6b:e4:e6:7e:fd:0d:5c:6a:58:b8:9e:23:3c:ef:
6d:4f:7c:b7:9c:24:52:77:41:62:27:9a:fd:5a:31:85:1d:22:
29:05:42:0b:a1:45:b0:84:2b:36:19:7b:dd:74:a5:e1:f2:7b:
6e:c9:1f:88:bf:61:a5:42:38:5e:1d:16:83:8f:d7:68:be:6c:
0f:cc:52:c9:a6:0b:2b:24:68:2b:b8:09:8a:9b:f6:42:d5:77:
4e:6b:1e:36:48:8d:3b:dc:06:f0:2a:bd:a1:79:29:db:bf:e7:
7f:5d:89:64:b7:71:14:82:4f:62:09:ad:4a:10:a9:ff:d1:4d:
b3:ce:af:39:7d:5b:fb:90:90:8f:e1:2a:f1:6a:9d:62:2f:92:
88:07:70:f6:d3:e0:4b:5e:32:21:55:43:b2:17:13:0d:c2:3a:
e9:5c:bf:c3:35:e7:e2:46:cf:50:a1:55:97:ed:f6:47:12:be:
b0:50:93:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:09 2026 by rpki-client