Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier: jeP0LLRlagMmfB0J+bXbt+V0hsVLNkLkclmNFsf0X3g=
Subject key identifier: A2:26:92:02:57:5D:BA:71:6F:51:42:C1:1C:05:61:3F:B3:66:FA:5E
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial: 019DD08774809975D221C5C5A5A91C34F80E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 20:00:31 +0000
Manifest this update: Mon 27 Apr 2026 20:00:31 +0000
Manifest next update: Tue 28 Apr 2026 20:00:31 +0000
Files and hashes: 1: AIp9_RM31K0wW6st5d3M-6Aj0t0.asa (hash: 1ayURs+KBoPQdd0mGltNGGJP12vnONErmbl882xqTKs=)
2: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: BbcdAwMceBvYeenmHQ+pjQH17XRWSY5zXgF3IYsDnUI=)
3: Y9TvfDZhPUnmvz8oc1zE1QlM5Js.roa (hash: LtiAP0I3hFV4EJMfOTIDWfqdKu5nKxB9W4yPTHv9hdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:74:80:99:75:d2:21:c5:c5:a5:a9:1c:34:f8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
Validity
Not Before: Apr 27 20:00:31 2026 GMT
Not After : Apr 28 20:00:31 2026 GMT
Subject: CN=a2269202575dba716f5142c11c05613fb366fa5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:08:ae:32:61:db:bf:52:4f:ea:42:de:58:94:
ad:04:9d:89:b1:2f:74:b1:5c:f2:38:fb:31:70:cc:
73:0c:6e:6f:31:dc:53:cd:19:7c:63:a9:c8:e3:0d:
90:72:bb:98:2c:f5:d5:57:2a:61:b7:e6:d9:17:17:
93:24:e9:d7:a6:74:cf:ba:f2:3e:c9:65:5f:e9:17:
a3:be:41:0a:11:94:42:99:50:b0:82:9d:7d:73:d2:
63:57:00:8d:ef:b2:78:f6:2c:fa:81:4d:c0:f3:9d:
e3:d7:08:0f:8f:ba:d8:4b:47:dc:47:12:09:26:db:
40:a1:98:0a:fe:16:86:e1:5c:e4:32:98:9e:55:0a:
b1:06:b6:7e:16:37:d4:e6:37:14:52:d8:9d:aa:8d:
be:36:01:79:3a:d1:b7:33:54:ed:ec:3f:7f:5b:46:
b8:b7:0a:89:13:df:41:b2:9c:fb:55:6c:6c:3f:10:
27:7e:ce:fb:62:11:b0:d6:60:c4:fe:be:5a:1d:a0:
3f:ba:7f:24:c6:4b:9e:c4:3f:47:ef:61:15:34:0f:
e8:76:9d:24:19:e8:f8:ca:38:aa:65:10:62:8e:b4:
4e:be:01:8b:50:fa:1a:1b:17:5f:bf:5f:4a:65:95:
26:6d:a3:74:e2:db:79:67:ca:68:d8:09:50:8d:df:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:26:92:02:57:5D:BA:71:6F:51:42:C1:1C:05:61:3F:B3:66:FA:5E
X509v3 Authority Key Identifier:
keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ca:ef:1f:85:e9:48:f6:58:9a:20:96:08:37:99:e6:e5:7b:
dc:3e:5d:7e:10:19:06:39:c3:15:62:e4:e1:b4:32:ad:80:e1:
c4:95:ee:e1:2b:95:f5:66:2d:4f:99:65:5e:3e:f2:b4:e0:7f:
00:6a:34:b7:c3:ae:6a:46:24:37:41:28:c6:be:35:a9:a4:e5:
ac:7d:e6:42:b2:39:4d:2a:36:71:4f:3f:92:59:6d:c1:07:89:
57:4f:38:f9:e4:4e:65:37:9d:5c:a8:6d:bb:2f:b0:71:ad:97:
1c:cb:19:b0:14:77:17:b4:62:78:c1:f0:e5:db:43:d8:60:36:
e2:7b:bb:5d:75:ec:a7:ce:99:5a:24:1c:89:80:93:f4:e5:7e:
cf:12:44:14:64:b7:95:64:ee:25:e7:a4:e5:d6:00:b6:64:ab:
57:1d:27:17:13:cc:67:e1:c1:ad:af:f6:60:1a:1b:8c:56:b4:
5b:06:69:d2:9a:e1:b6:6b:15:ba:91:a2:ac:63:f3:e6:06:5e:
41:4c:67:0f:d8:94:71:b7:c6:d6:a6:a1:59:8e:1d:36:99:cc:
ac:33:af:d9:aa:e7:16:fb:83:a1:0c:96:88:50:d6:ba:0d:f0:
9f:d1:a1:43:a9:31:55:53:4f:c3:d8:9d:c2:01:5b:de:48:79:
d8:cb:6b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:53:04 2026 by rpki-client