Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier: uENNdUoGlXkpIwpopTNAoDJMfkJt5R98wBpKVJ4I2TE=
Subject key identifier: D3:F7:E6:0F:40:17:46:07:67:94:5D:BB:F8:28:8C:66:A1:31:05:08
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial: 01A08E3284F126868D49E16B557D42A6B66B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number: 1A4A
Signing time: Fri 11 Sep 2026 02:01:10 +0000
Manifest this update: Fri 11 Sep 2026 02:01:10 +0000
Manifest next update: Sat 12 Sep 2026 02:01:10 +0000
Files and hashes: 1: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: BMwNQzEoz5nVUYJreWlZEwrSkC7XLhsljlK8aBWaqHk=)
2: ZWBJxYdw0yqefP_6w5hTElTjn_w.roa (hash: ka3/3w04e1WBZfQiP+cb8ld/BzE1PNW9ESTV22owMjY=)
3: nQOGLsDTu8U8pFDRgHktBs12LXo.asa (hash: fwzFvF5IHbE+z4rN1nerwJCzmr6g02nn5C2pFL2CM0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:32:84:f1:26:86:8d:49:e1:6b:55:7d:42:a6:b6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
Validity
Not Before: Sep 11 02:01:10 2026 GMT
Not After : Sep 12 02:01:10 2026 GMT
Subject: CN=d3f7e60f4017460767945dbbf8288c66a1310508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:a9:1e:c1:c0:a2:b4:90:4c:0a:db:e0:29:
44:09:e6:6e:e0:b7:84:75:eb:9c:70:2e:b4:bb:32:
67:b5:cb:3b:06:eb:20:f1:27:4e:81:62:a5:63:92:
be:c2:07:cc:71:86:9e:50:50:1a:01:63:5c:d7:a3:
87:f0:1f:d2:c8:94:a2:99:f0:9f:ef:da:bf:bf:7b:
3a:65:10:32:db:db:22:97:b8:18:d1:d0:83:35:38:
ed:16:0d:31:a7:24:37:5c:9e:43:45:5f:47:cc:7f:
0e:b7:67:ec:69:b8:2e:61:7f:5f:68:03:c3:5c:03:
f2:8a:73:c5:16:b3:18:09:0b:66:eb:c5:d0:96:f1:
96:3f:c0:67:2d:d0:bf:aa:20:f4:ba:60:3e:c1:92:
02:85:f4:06:e9:ac:7d:73:ba:6e:49:f3:fe:b1:55:
26:5d:15:6a:c2:a7:59:ab:d4:75:b2:af:5d:aa:21:
e3:1e:16:a1:fe:6b:f9:cf:9e:05:f0:41:23:51:b9:
16:fa:2f:36:dd:e6:f3:e9:6c:ae:00:50:26:46:61:
1b:73:75:4c:d4:bd:ca:05:a4:1a:e5:66:cd:a7:3f:
4e:0b:e6:bd:8f:73:3a:5f:0c:dc:f5:16:e6:5a:c6:
42:b4:f4:09:8c:e9:c1:51:3e:16:d4:cb:9a:bc:2d:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F7:E6:0F:40:17:46:07:67:94:5D:BB:F8:28:8C:66:A1:31:05:08
X509v3 Authority Key Identifier:
keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:1a:31:b4:e2:01:2f:d0:4c:cd:8b:dc:03:3f:db:db:37:08:
ab:aa:6a:89:d6:c8:60:89:80:54:10:5c:0f:35:b5:43:f4:ed:
ea:09:e3:e2:96:8a:b6:f3:8e:bb:15:b2:ab:8b:3b:c1:5b:c1:
29:72:17:9e:1c:ec:51:59:31:3b:70:c8:33:d9:c2:4e:c8:73:
52:f7:4e:75:86:47:4c:a5:96:84:92:f0:64:2c:ec:97:fa:34:
d2:f9:eb:9c:38:76:6e:53:70:62:61:d5:f7:40:58:e7:f6:cb:
9a:58:f7:0a:0e:0e:40:2f:a8:ca:a6:ea:38:c1:9f:a0:b6:83:
ce:6a:93:70:d4:69:38:eb:a2:07:75:4c:7e:54:95:28:a7:c2:
66:ba:e1:7d:d3:37:8e:2c:af:81:bb:c2:5e:bf:03:3a:43:e1:
e6:cc:0f:69:a5:39:6c:f3:58:b3:83:c1:6d:0c:50:a1:9a:e9:
40:40:3c:b1:1d:e5:bb:87:28:62:17:7a:27:d9:b0:8f:6b:b8:
fb:f8:71:dd:12:3e:93:48:c1:90:73:b1:c2:01:50:9d:a0:44:
59:bf:86:2d:83:55:58:de:12:3b:63:9d:d3:2d:16:b3:f2:95:
e1:fb:19:a1:1b:26:b7:35:e2:5e:f4:54:f2:a9:cc:40:46:c2:
8a:31:0d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:32:26 2026 by rpki-client