Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: SM+KFIdpFG+7NOO8ZDr3QUCebgR+fOvYWEVlaUNIK14=
Subject key identifier: 58:AA:B5:4F:1B:EB:E4:87:4E:12:16:A4:94:EE:D4:33:CF:B4:49:D0
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 019F71AAA9ED52FAE96DF48B1CFEDEFFA0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 0A73
Signing time: Fri 17 Jul 2026 20:00:37 +0000
Manifest this update: Fri 17 Jul 2026 20:00:37 +0000
Manifest next update: Sat 18 Jul 2026 20:00:37 +0000
Files and hashes: 1: 1W82at7mSiuchX3iCzO6G2WZfjs.roa (hash: OyjiciJl+n/aBNYiJh6cnpdIClbp0Z2IycUrjNfaQ1s=)
2: 68-hQx0BL9yNTLiWpywtZGc6Its.roa (hash: Z3Os0JQgEmxoIymcS5RKGBl8AXLtnnHEO4L87kfXgsE=)
3: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: JOTiJ3BdwbxddpqwP38CGjrZzkcZQsAaghq5KsI5rOk=)
4: xsaLPUS_EPRPzM8NWjyE1aTWHX4.roa (hash: dBX6NfyeptV43b7aTbE31Dh+/tXWuq6hyAQ37G7Hits=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:aa:a9:ed:52:fa:e9:6d:f4:8b:1c:fe:de:ff:a0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Jul 17 20:00:37 2026 GMT
Not After : Jul 18 20:00:37 2026 GMT
Subject: CN=58aab54f1bebe4874e1216a494eed433cfb449d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:d7:b7:4d:3e:ca:88:0f:1b:b7:a5:6f:e8:
cf:8c:05:c2:63:7e:7a:2f:37:1c:10:44:5b:e1:49:
83:ab:b9:f4:57:a6:5e:a6:aa:28:25:c8:c7:a4:9f:
09:b6:39:09:e3:9b:90:32:8b:2f:42:56:66:a8:62:
af:c2:90:db:cd:6f:db:7b:0b:b5:77:bb:b6:c8:7b:
cc:b2:96:72:d9:aa:93:99:7d:1f:5b:ec:e3:5c:42:
1a:54:a7:71:6c:22:c8:1b:6f:7b:df:30:39:83:5e:
d7:0b:ea:bd:bd:87:60:ef:ab:57:67:d7:3a:e1:8a:
49:b3:31:30:23:93:de:fc:b6:71:d1:03:7f:22:cb:
63:6e:7d:97:f1:59:29:1c:13:1d:0e:2c:d2:84:f4:
a1:4b:24:40:c6:75:36:96:44:b9:fd:21:ad:4b:e2:
2c:02:f3:55:09:55:f3:20:45:b4:32:0f:3a:26:c4:
b8:ea:92:1e:a5:d2:34:97:10:f7:73:ee:33:f5:0e:
8b:89:75:f4:6d:22:c6:c7:6d:d6:0c:a3:0b:a7:12:
f8:34:77:13:7f:18:dc:6e:c7:75:c6:a0:3d:5e:09:
5d:00:6c:0f:b4:8d:86:17:76:d6:be:7f:8b:3f:50:
d1:26:cc:18:77:a2:63:73:02:8d:5d:32:95:f3:a3:
15:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AA:B5:4F:1B:EB:E4:87:4E:12:16:A4:94:EE:D4:33:CF:B4:49:D0
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:14:b1:e2:4c:44:91:41:82:1c:7a:72:d9:5c:c1:a4:50:ff:
d5:e9:1a:8d:92:a7:61:d6:d6:ae:fe:ce:e6:1b:d8:65:7b:99:
4b:cf:b3:69:1c:48:b4:d3:d1:87:fc:8a:be:46:9c:9c:0d:2d:
d1:fd:b3:c6:07:17:74:b9:ec:2d:23:07:f1:2f:ca:52:7a:a7:
c8:99:5c:cf:ea:7b:54:36:66:fc:52:b5:3a:84:0f:d6:b1:c0:
26:8c:86:24:e2:10:1f:3d:f3:fd:93:53:e8:e2:d6:7c:fe:be:
a8:25:a1:05:47:f0:ed:48:d2:54:ec:86:8e:a9:9e:06:23:48:
a4:bb:62:61:0b:fd:2e:fc:81:c5:ad:81:dc:6c:d0:c0:c4:73:
a0:7a:bc:87:80:d6:0f:82:54:7d:fe:de:ec:8d:e9:95:bc:64:
8c:50:0c:08:ca:b4:05:ad:45:c6:58:d0:16:93:04:e9:05:0d:
30:f7:39:8a:b9:9a:42:14:d7:5b:c4:2e:1a:81:05:47:63:6b:
57:b5:3e:73:d6:ea:93:c5:44:20:1b:4f:05:d9:72:6c:b2:44:
88:0c:6a:54:67:12:a6:59:87:eb:18:e9:31:57:43:66:52:03:
fd:62:12:57:45:ae:1e:30:25:e6:c9:c4:57:37:2e:f8:0d:38:
bb:28:47:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:50:22 2026 by rpki-client