Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: EHbcHUCWpnZT+VyIKmxCylcTyX8L5CaV66o+C3t2i8E=
Subject key identifier: A7:41:A7:33:72:2F:2E:3B:44:7A:5C:4F:B7:D9:5C:1F:FC:3A:15:EF
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 019E6E3EF8487D904291CA8D25E569CD9CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 09EB
Signing time: Thu 28 May 2026 11:01:20 +0000
Manifest this update: Thu 28 May 2026 11:01:20 +0000
Manifest next update: Fri 29 May 2026 11:01:20 +0000
Files and hashes: 1: 1W82at7mSiuchX3iCzO6G2WZfjs.roa (hash: OyjiciJl+n/aBNYiJh6cnpdIClbp0Z2IycUrjNfaQ1s=)
2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: HMPPTCnAiv6KL7s3tvdNvW3Nr11TUfqjYvClm54mkw4=)
3: qk4P-ShbIUszUZ3eawMDtsRg7tc.roa (hash: +N2IDtopIma7I39gXcMi4uOgHoRzGLXkf14n2SLetxs=)
4: xsaLPUS_EPRPzM8NWjyE1aTWHX4.roa (hash: dBX6NfyeptV43b7aTbE31Dh+/tXWuq6hyAQ37G7Hits=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:3e:f8:48:7d:90:42:91:ca:8d:25:e5:69:cd:9c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: May 28 11:01:20 2026 GMT
Not After : May 29 11:01:20 2026 GMT
Subject: CN=a741a733722f2e3b447a5c4fb7d95c1ffc3a15ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:c4:e0:1c:88:60:1c:1a:0b:c1:7c:cd:09:
20:f5:6a:82:e8:a7:df:e5:7f:38:6c:e5:25:e5:ad:
1d:ed:bb:88:af:9b:17:d1:33:4d:5c:bd:38:b8:90:
2e:2a:cd:00:02:72:da:4d:5d:8c:a2:5f:30:b3:db:
e8:10:f9:05:23:5f:65:5f:fc:2a:5d:fa:8a:be:2e:
d4:3c:4a:ed:4f:c8:4a:95:29:08:ef:81:73:47:eb:
da:ed:d1:b6:bf:c6:97:33:97:e7:83:f4:d7:de:32:
8d:e3:05:0f:be:ac:fa:15:56:d4:70:41:cd:9d:8a:
47:78:dd:35:dc:28:41:fe:96:87:d1:37:d4:ba:c1:
50:7d:b0:fa:3f:5b:69:b7:32:d9:82:d2:b2:c6:b2:
c7:8c:0d:b0:a1:90:15:b3:34:e8:26:51:84:01:88:
ef:34:cd:32:f1:be:eb:f3:32:b3:6e:51:ab:0d:a6:
d7:6b:58:5c:05:59:d5:48:3d:38:76:ed:56:15:9f:
c3:5d:95:da:c9:fa:e6:78:2b:48:a4:a5:ef:dd:23:
e7:a2:e2:04:32:ae:b0:dc:06:bd:a7:0f:97:4f:11:
7a:42:27:56:d1:3a:3f:93:2f:8c:29:3f:8c:6f:1f:
e8:53:b1:a6:16:ff:51:bd:42:b6:35:1f:a2:cf:d2:
16:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:41:A7:33:72:2F:2E:3B:44:7A:5C:4F:B7:D9:5C:1F:FC:3A:15:EF
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fc:0c:59:fb:f0:39:40:69:4f:89:2d:1a:0f:42:45:d8:c6:
fb:19:8b:61:2b:60:62:c0:fc:d0:4e:eb:c6:ff:91:36:75:81:
1b:93:32:65:32:cf:c1:21:11:d0:9b:f6:40:27:3f:61:58:ae:
bc:9a:16:5b:20:86:91:9b:e9:3e:36:19:12:94:e7:d4:95:05:
77:91:a1:4b:c4:45:35:47:33:3a:a0:63:14:93:7a:cd:73:7c:
0c:4b:7e:74:58:d6:23:49:3d:fb:0d:f7:6d:cf:97:6c:7e:5d:
98:95:6a:a4:e3:7e:85:f7:b2:68:3d:5c:e6:26:1d:77:b3:25:
cc:44:1e:9a:21:44:56:ef:84:32:a7:9d:25:3a:a5:1f:9e:69:
3a:ce:1d:49:63:d3:56:15:2a:33:ec:9e:a3:29:08:2d:45:e5:
67:68:01:35:cf:c8:07:df:61:90:cc:a6:a6:0c:a4:fd:fd:79:
d8:63:85:d0:c2:83:ee:5f:e5:d5:2c:9d:3a:45:c6:5e:20:90:
0e:00:3d:f8:08:0b:84:b9:ac:22:ed:28:b8:c1:d6:b7:94:b3:
4b:f9:a2:90:d3:eb:19:14:85:cd:0d:17:94:a4:14:0b:e3:5a:
8a:90:2d:5f:e6:6b:57:95:9b:6b:87:e9:ee:18:78:f4:8e:c7:
b0:b4:ae:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 19:21:08 2026 by rpki-client