Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
File: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json)
Hash identifier: Y0RDok38LBo6+FHWCWlm78hZ+Wr/Fs680T1tpp9jNnw=
Subject key identifier: B5:8F:E0:10:B5:63:FE:27:00:6E:D0:89:6F:16:77:49:DD:EA:D4:D2
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial: 019CD9C41AE3557E7D52F104F68B8470797F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
Manifest number: 1867
Signing time: Tue 10 Mar 2026 22:00:33 +0000
Manifest this update: Tue 10 Mar 2026 22:00:33 +0000
Manifest next update: Wed 11 Mar 2026 22:00:33 +0000
Files and hashes: 1: 1Cy83jCl7kBGDNxqyufm78TXI0c.roa (hash: FaDgiWoM3k5efyXcsEBG7laf/bYAZ1lac2yh8oD/pOo=)
2: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: tKYxpkeU3B14/XDjDBgSgZh1CE35o0Tw90BDH06Nubs=)
3: Gcgb4fKcIntpFBriNxDOmx88O0w.roa (hash: HNBuGy0i9eOtKQLzxEokhQmLu275mcy6wh+QVvZD+oA=)
4: sySDvKNNenjKTqJVkF08wLomsjM.asa (hash: +kidr1/LWB3zdQ+Hae9NW1Zctl0LMXwwKKQuCxYbKjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d9:c4:1a:e3:55:7e:7d:52:f1:04:f6:8b:84:70:79:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
Validity
Not Before: Mar 10 22:00:33 2026 GMT
Not After : Mar 11 22:00:33 2026 GMT
Subject: CN=b58fe010b563fe27006ed0896f167749ddead4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:39:2e:0f:a5:de:b4:56:72:56:93:40:ee:
73:20:dc:ed:f2:24:f0:32:27:99:2b:bc:b2:a4:3a:
79:86:ef:2c:9c:ad:2e:49:ea:c8:ca:9e:fa:2d:8c:
5c:49:d9:be:6c:91:2b:ff:1f:76:8d:10:41:6c:16:
19:cc:16:f9:d4:f3:01:65:ac:cb:e8:63:d2:19:f4:
3f:46:66:2f:11:ff:a5:5b:e0:4a:ce:a6:43:97:6d:
56:8c:d4:a7:79:b9:60:07:29:b6:7d:4a:76:31:3c:
35:06:88:72:aa:73:12:24:6c:9f:bd:79:6c:db:87:
16:76:00:75:7c:d8:36:c1:0d:63:25:ed:50:2a:c8:
d7:97:ed:4e:7c:c2:81:fb:79:7c:1d:75:80:b9:c9:
0f:88:3e:56:b2:9e:83:cd:b9:94:aa:7f:94:02:4f:
3e:fd:2b:a3:cc:83:aa:73:36:b7:2c:a7:10:de:f3:
61:83:17:a9:34:67:1d:73:52:76:88:70:36:05:e4:
41:b3:be:9b:45:9f:7e:17:2f:1b:6f:37:77:d3:ea:
3c:c5:4a:ec:40:94:5e:f3:6c:eb:5d:ae:9b:8a:fc:
82:b6:9f:b8:55:d2:40:79:d5:8a:f5:94:c5:c9:83:
74:e1:e9:d3:46:b1:3f:b2:4d:59:c8:15:ab:7a:7b:
67:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8F:E0:10:B5:63:FE:27:00:6E:D0:89:6F:16:77:49:DD:EA:D4:D2
X509v3 Authority Key Identifier:
keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:81:25:d5:91:dd:fb:e4:88:fb:3e:c9:6d:a8:77:32:73:e7:
55:6a:e7:98:38:98:81:4b:5f:30:2e:a0:f7:22:49:d8:f6:c9:
e8:34:a0:6a:db:47:6c:76:86:b2:0c:42:a7:74:fd:af:e0:45:
80:e6:ab:03:21:92:82:33:6b:48:43:cc:c8:ff:7a:94:32:1d:
20:4d:b2:85:8e:ef:33:58:97:92:31:5e:1e:75:5e:2e:8f:38:
1f:ed:6f:8d:8b:63:fc:05:2d:98:7c:f2:b8:7f:f9:cc:f3:86:
2f:e5:be:e2:cd:94:51:fa:88:a1:53:02:fd:18:bc:09:4d:4d:
9f:c4:bc:a4:7a:60:43:8e:76:e5:5b:8a:32:9c:5a:3b:54:d4:
32:bc:19:b5:33:3f:a3:92:96:6d:06:f2:06:66:95:86:fe:87:
d8:e9:24:69:6e:3f:c5:d7:5f:a1:24:ba:15:47:02:41:d5:6a:
b7:2d:6e:e4:4d:66:5f:79:6b:d5:65:96:8d:67:d6:14:c8:ad:
bf:24:64:7c:65:72:03:d2:2b:6d:b1:47:12:6c:b8:20:61:30:
13:c9:2c:80:00:cc:51:d7:6b:1b:b1:5a:c0:e4:9a:82:7a:56:
66:c0:ff:23:0f:47:2e:fe:21:53:d2:1c:1d:d5:6a:b3:33:ef:
b2:54:d8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 05:34:52 2026 by rpki-client