Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier: LT84P0dhmyvphLjld/lMIvd/GFrbLms6hmzfLs4PhUY=
Subject key identifier: 40:1D:22:8B:86:60:64:FE:1B:9D:F4:DC:97:97:D3:D9:74:C6:34:2D
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial: 019CE4EC69E592A828C583C9C2C25D3DA0B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number: 1864
Signing time: Fri 13 Mar 2026 02:00:24 +0000
Manifest this update: Fri 13 Mar 2026 02:00:24 +0000
Manifest next update: Sat 14 Mar 2026 02:00:24 +0000
Files and hashes: 1: AIp9_RM31K0wW6st5d3M-6Aj0t0.asa (hash: 1ayURs+KBoPQdd0mGltNGGJP12vnONErmbl882xqTKs=)
2: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: mB8Phl1m5vB1DPptG/mG7tdcT3NHERuPHz3XD5jF3ro=)
3: Y9TvfDZhPUnmvz8oc1zE1QlM5Js.roa (hash: LtiAP0I3hFV4EJMfOTIDWfqdKu5nKxB9W4yPTHv9hdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:69:e5:92:a8:28:c5:83:c9:c2:c2:5d:3d:a0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
Validity
Not Before: Mar 13 02:00:24 2026 GMT
Not After : Mar 14 02:00:24 2026 GMT
Subject: CN=401d228b866064fe1b9df4dc9797d3d974c6342d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:80:53:14:6f:1e:e2:6a:fb:ea:4f:8f:cd:
7b:45:84:d9:8e:9e:2a:1d:36:c1:12:ec:e1:c6:7f:
2b:c1:3f:4f:ce:8d:a0:e3:68:d3:3f:fd:cb:07:fb:
99:6d:aa:4c:8b:05:b0:47:ac:d5:ed:a7:13:3e:09:
a0:0a:e7:38:96:85:a2:04:db:34:d8:70:b1:c7:00:
6a:c9:1d:7d:49:5d:c5:d1:ab:e6:48:4c:ab:49:0c:
0b:06:a3:f0:7d:22:0a:fb:0b:2a:3b:21:4a:4c:d7:
54:c7:d7:b7:9c:32:88:cd:12:46:b0:73:b1:de:d6:
14:8e:00:f2:4c:ca:a9:8d:79:15:72:70:f1:66:d0:
95:d3:a9:48:41:f6:6f:46:4e:91:0c:d6:95:5c:6b:
09:d9:2c:f2:6f:1f:06:47:0d:93:9b:dd:5b:b6:78:
57:5b:4c:e6:c3:fe:5d:25:4c:27:88:a7:13:c4:5e:
31:72:0c:34:36:65:e3:46:e4:f5:3c:33:51:03:6b:
f2:8b:45:30:d6:75:21:24:17:c0:e2:f9:2d:30:73:
34:50:49:0d:93:15:a1:4b:64:1c:54:33:7d:44:62:
49:50:c9:ab:63:31:7d:85:34:a0:b3:95:a7:37:d1:
e3:c4:be:c3:fe:86:d1:e7:06:07:61:6a:6c:6b:c5:
14:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1D:22:8B:86:60:64:FE:1B:9D:F4:DC:97:97:D3:D9:74:C6:34:2D
X509v3 Authority Key Identifier:
keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f3:c6:9e:f9:8e:88:ce:ac:65:c1:55:81:0a:4b:5b:23:fc:
fe:05:59:f1:80:df:5e:ad:f2:81:58:bc:5a:ed:24:3a:7b:1d:
41:ac:00:fc:fb:40:df:28:c1:8e:61:3f:68:6b:12:30:f6:cc:
a1:57:16:d8:c5:0e:ea:9d:1a:63:62:a6:5f:4d:45:2a:e9:97:
9f:b2:db:b0:21:79:21:a5:ad:7a:7f:41:27:46:b7:87:4e:bf:
f4:5a:d9:2a:09:2c:81:b5:49:d3:a1:ae:fe:49:d4:d0:77:90:
3d:00:30:14:fa:be:30:a3:d6:2f:ca:6a:04:e2:dc:ee:8f:a6:
80:b0:9a:9d:74:1e:db:9c:ac:3d:dd:14:4c:57:98:82:04:e5:
a2:a0:d9:09:2c:48:7d:f8:07:d2:01:06:a6:2d:2a:29:26:0a:
d7:38:2a:9d:8d:59:04:6e:21:f4:11:7e:cd:0a:28:b2:8f:03:
42:30:d9:ce:3f:f7:cf:ab:90:e1:f4:56:cd:55:23:59:f4:7b:
c1:1c:f8:06:27:66:d6:17:b5:79:30:cd:fe:28:c1:ef:6c:00:
37:c8:95:98:92:63:1c:49:59:87:35:ee:83:dd:d8:ba:85:f9:
ee:cf:5d:0b:ee:6c:c9:ec:52:fc:ba:94:ab:48:aa:3d:2d:07:
61:f4:86:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:46:01 2026 by rpki-client