Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
File: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json)
Hash identifier: ObGMFKYYyx90NKe1F+o+RrUA2QcwrMxgEvZb5LAvoLY=
Subject key identifier: 16:0F:50:5E:87:7B:FB:4B:EA:6A:AF:20:E3:A2:DE:1B:27:66:12:18
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial: 01A08D8DC630153CB3D6FFAFC65426758EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
Manifest number: 1A52
Signing time: Thu 10 Sep 2026 23:01:13 +0000
Manifest this update: Thu 10 Sep 2026 23:01:13 +0000
Manifest next update: Fri 11 Sep 2026 23:01:13 +0000
Files and hashes: 1: 1Cy83jCl7kBGDNxqyufm78TXI0c.roa (hash: FaDgiWoM3k5efyXcsEBG7laf/bYAZ1lac2yh8oD/pOo=)
2: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: sZd75Gd7Jir7AWxUIjDksNv2TRlA/FmUp8noW1dPc88=)
3: Gcgb4fKcIntpFBriNxDOmx88O0w.roa (hash: HNBuGy0i9eOtKQLzxEokhQmLu275mcy6wh+QVvZD+oA=)
4: JGYsNj9H1c_XLokkyRvioL1Icvs.asa (hash: FsSg7M51c+/dkmTYhVW+tHhpAYi4anL4jcOUSvzQsF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:c6:30:15:3c:b3:d6:ff:af:c6:54:26:75:8e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
Validity
Not Before: Sep 10 23:01:13 2026 GMT
Not After : Sep 11 23:01:13 2026 GMT
Subject: CN=160f505e877bfb4bea6aaf20e3a2de1b27661218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:94:a9:f0:3e:53:e7:83:59:cb:7f:8c:f6:6a:
56:63:56:50:b9:31:f5:5f:e8:24:e9:17:cc:28:c4:
4c:40:09:99:b9:dd:af:84:46:36:e0:78:c7:47:6b:
fc:cd:d8:6b:93:d6:9b:d8:f7:8a:98:4a:30:95:a4:
26:82:55:e7:12:c8:c1:f1:d4:e8:f4:b9:27:9a:9c:
78:dd:44:2b:7f:b9:c7:6a:cd:00:c4:54:f0:e7:ec:
5f:a8:5b:a3:4c:0d:fd:78:61:24:c8:88:90:7f:1e:
5d:2e:be:1b:bf:74:05:b4:a1:4e:3c:d3:4c:0f:cb:
f7:cd:44:cd:9e:db:a1:ae:91:c4:04:9c:6f:69:44:
b1:83:ae:18:e0:81:d1:5f:3b:64:5b:fa:9a:db:63:
4f:47:09:20:ee:05:66:a6:eb:f4:bd:74:a0:f4:d4:
22:e4:d2:70:00:f2:b5:1e:1f:3b:27:cd:57:09:ab:
c6:0b:1d:bf:8c:64:86:e2:6d:77:3e:61:5c:06:af:
b1:b3:fd:65:50:0a:bb:d0:fc:6d:a9:f7:0f:63:73:
56:43:48:88:62:50:70:15:d4:f8:4f:1f:7d:01:6f:
cb:f7:20:9d:16:74:a4:e2:30:0f:cd:83:a5:3d:f8:
a6:23:63:c4:e5:b6:c3:bb:b9:a8:a2:75:64:6c:b8:
24:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0F:50:5E:87:7B:FB:4B:EA:6A:AF:20:E3:A2:DE:1B:27:66:12:18
X509v3 Authority Key Identifier:
keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e9:28:1a:a2:0f:27:38:78:2c:a8:d1:a7:fc:91:ee:07:3b:
f7:0f:1c:65:a6:b6:df:af:27:20:75:6a:0e:3f:00:49:dc:da:
f6:99:45:77:c9:88:46:57:d8:ed:f9:31:6a:45:80:71:1c:10:
8c:01:61:fc:b6:2e:6c:8f:19:44:e2:37:b9:5f:bc:d7:a5:db:
c7:03:17:8e:bc:83:61:3b:49:d4:c1:52:5a:00:20:a8:bc:41:
09:13:6a:b2:ce:75:d3:a9:35:30:f6:3d:ed:85:b1:a8:ad:55:
8a:5c:f7:b4:6f:df:43:83:9d:16:08:32:a4:81:7a:14:28:63:
5f:c2:f9:d3:21:92:40:e8:22:88:c6:3a:4b:bf:94:07:1d:2a:
4f:82:43:21:bf:08:7f:9b:8b:d5:79:8c:32:1e:65:a5:ef:64:
20:e9:ed:e1:06:60:1d:2e:9b:30:a2:da:db:02:a8:d5:23:03:
1b:aa:d2:81:c1:95:a4:c1:d6:47:50:8a:97:f0:ed:48:7d:78:
ef:f7:af:20:a5:4a:04:11:3b:da:10:ba:18:64:30:3f:0e:f3:
f6:85:eb:1e:22:83:e8:9a:1d:19:a9:4b:ef:db:cb:ed:f6:23:
5f:d0:94:42:a9:8a:38:d3:47:f5:9f:bb:4d:b6:af:68:dc:36:
bb:06:90:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:58:50 2026 by rpki-client