Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: i4PZEmZHKTG0FlpCV0gIDTFrPkJX4PyKc7gwekBbjFM=
Subject key identifier: A8:59:9A:B7:BD:73:2F:91:87:5B:75:63:CB:BC:D7:A8:93:2E:3F:1B
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 01A0596890F373518DCC77ABFA2E5F633AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 0AEB
Signing time: Mon 31 Aug 2026 20:00:20 +0000
Manifest this update: Mon 31 Aug 2026 20:00:20 +0000
Manifest next update: Tue 01 Sep 2026 20:00:20 +0000
Files and hashes: 1: 1W82at7mSiuchX3iCzO6G2WZfjs.roa (hash: OyjiciJl+n/aBNYiJh6cnpdIClbp0Z2IycUrjNfaQ1s=)
2: 68-hQx0BL9yNTLiWpywtZGc6Its.roa (hash: Z3Os0JQgEmxoIymcS5RKGBl8AXLtnnHEO4L87kfXgsE=)
3: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: UyFnajSuDlCZYJfgC5m2PBgmw+kAPvakn7gTB1Z4itg=)
4: xsaLPUS_EPRPzM8NWjyE1aTWHX4.roa (hash: dBX6NfyeptV43b7aTbE31Dh+/tXWuq6hyAQ37G7Hits=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:68:90:f3:73:51:8d:cc:77:ab:fa:2e:5f:63:3a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Aug 31 20:00:20 2026 GMT
Not After : Sep 1 20:00:20 2026 GMT
Subject: CN=a8599ab7bd732f91875b7563cbbcd7a8932e3f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:1e:bd:0b:8a:49:02:61:17:03:fa:a5:e4:
cd:2f:d2:49:28:d9:cb:d6:c2:6c:b9:6f:26:74:f2:
45:f3:0f:86:ac:99:8b:3e:64:6d:d3:5c:37:83:a7:
51:3e:5c:01:bf:29:6a:49:1c:6a:af:4d:2a:61:40:
2b:ba:d5:06:d4:5d:a4:f4:a9:5a:b9:3c:09:02:25:
a8:8a:81:f2:34:4d:cb:30:c3:dc:d4:88:a9:bc:89:
32:d8:8f:25:9c:68:73:75:b0:3a:54:ad:66:d2:2d:
36:b5:e4:d7:da:83:92:2c:a8:1c:54:8c:b7:30:1d:
ab:2f:af:fa:ff:0b:78:18:b4:c3:86:12:3e:21:6f:
87:ad:73:c6:99:62:be:bf:1b:e8:ca:c1:f3:44:84:
04:6c:16:a0:cf:8e:60:04:d6:5e:03:48:e4:54:5b:
ad:52:a7:3f:41:ef:32:5f:82:03:a6:57:14:16:81:
0e:26:1c:81:3f:1f:b4:85:e1:fc:d3:d6:73:90:05:
c3:6d:f4:07:91:4e:b6:86:1a:3a:d3:e0:e6:75:94:
b4:37:4b:60:dd:6f:9b:9a:8c:f9:96:ab:6f:bc:34:
72:dd:7f:04:10:07:0e:77:15:b7:d4:26:1f:79:ff:
9d:10:f0:b5:9b:6c:91:09:13:ed:27:af:43:41:04:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:59:9A:B7:BD:73:2F:91:87:5B:75:63:CB:BC:D7:A8:93:2E:3F:1B
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0f:5b:f9:1f:bb:9d:27:8e:3f:59:f7:aa:e6:08:64:f3:9a:
5b:b3:68:a1:4c:4e:ad:d5:7e:1a:cf:ed:5e:79:5b:e0:83:ea:
85:8f:55:54:01:68:ab:ee:b4:d0:f0:5f:85:b6:06:02:0d:e8:
41:cf:41:3a:d5:20:6f:c7:0a:29:c1:2e:59:51:6a:a6:41:f7:
86:40:aa:51:14:b5:a4:c3:7a:db:ec:af:42:be:fe:bc:c5:52:
32:98:65:e3:6e:57:32:58:d5:52:b9:6c:e8:77:07:f3:9e:3b:
e8:5e:59:3d:3d:fb:6f:bb:83:7e:01:d4:bf:63:68:c8:02:87:
f7:54:5e:71:53:da:aa:5f:15:41:e8:59:cc:2e:45:30:93:fc:
f4:84:31:18:93:ee:bf:4d:92:b6:d8:53:1f:ef:2b:05:21:65:
e9:b6:6f:0b:37:b0:5c:fb:3e:49:0a:d0:de:c1:14:7d:a1:8e:
d9:c5:84:ae:eb:c7:2f:4f:8a:25:b7:af:0e:33:71:21:b0:9c:
c2:b9:9f:b2:80:f0:cf:4e:79:99:33:96:d3:fe:0f:d4:99:7c:
4a:89:77:87:e3:a9:8c:17:5f:2f:50:ab:98:65:ca:5e:1b:d0:
cc:3a:e0:b2:e2:bd:62:20:79:7b:e6:47:9b:0d:df:ec:cf:53:
7a:c1:b2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:33:22 2026 by rpki-client