Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
File: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json)
Hash identifier: NCJ+fQnhpeARAci8ypotsnx8P2SQZBcxaUL+Oh0i3pw=
Subject key identifier: F5:7B:8A:CE:DA:63:B7:5A:2B:F2:38:1A:44:46:11:7B:86:83:69:46
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial: 019DD087BA93C9B813EBAE23013A31061A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
Manifest number: 18E7
Signing time: Mon 27 Apr 2026 20:00:49 +0000
Manifest this update: Mon 27 Apr 2026 20:00:49 +0000
Manifest next update: Tue 28 Apr 2026 20:00:49 +0000
Files and hashes: 1: 1Cy83jCl7kBGDNxqyufm78TXI0c.roa (hash: FaDgiWoM3k5efyXcsEBG7laf/bYAZ1lac2yh8oD/pOo=)
2: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: mAZW1b7SkQwAvSeprs9lafhOBrqTG8G6svZA/A4pqJ0=)
3: Gcgb4fKcIntpFBriNxDOmx88O0w.roa (hash: HNBuGy0i9eOtKQLzxEokhQmLu275mcy6wh+QVvZD+oA=)
4: JGYsNj9H1c_XLokkyRvioL1Icvs.asa (hash: FsSg7M51c+/dkmTYhVW+tHhpAYi4anL4jcOUSvzQsF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:ba:93:c9:b8:13:eb:ae:23:01:3a:31:06:1a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
Validity
Not Before: Apr 27 20:00:49 2026 GMT
Not After : Apr 28 20:00:49 2026 GMT
Subject: CN=f57b8aceda63b75a2bf2381a4446117b86836946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4a:e2:02:d1:6c:71:4c:c0:ea:76:0c:85:21:
c7:7c:d6:fc:95:a2:8a:b6:ea:de:ae:9b:41:7e:b8:
6f:85:df:94:f9:38:62:cb:0f:af:4d:b1:62:a8:ac:
7d:bf:21:69:80:ce:43:09:c6:48:bd:98:fa:43:1e:
90:ce:4f:c3:aa:e9:ea:96:a0:73:f9:ad:c6:bc:ca:
36:15:33:82:5c:a3:9c:6a:b6:d2:41:93:3c:04:b4:
57:f8:94:60:bf:50:5e:aa:9e:6b:e1:3f:fb:f1:ba:
63:fd:86:95:08:fd:27:ce:a7:e0:09:35:c8:ab:bb:
bb:66:5e:5f:b6:9b:71:ad:4a:7f:c0:95:5a:27:0d:
3b:1a:22:e2:da:38:17:90:c8:99:28:61:ff:d4:d6:
d1:ca:97:91:c0:35:79:f9:4d:07:0b:8a:ff:c9:2f:
ba:81:d3:95:d1:1c:66:60:a8:0b:9b:a8:5c:aa:73:
f1:2e:a4:80:c0:e0:60:c7:bc:ef:d5:2d:0e:f3:5a:
79:2f:bb:ca:cd:98:f1:4f:35:ae:d5:6c:35:c6:ef:
7c:c3:76:49:8f:e8:bd:4d:7f:02:a1:8f:e9:5d:61:
e9:5f:a6:52:f9:d4:0b:98:63:e2:b2:bf:81:98:d4:
99:42:ea:23:ca:5a:3f:0c:9c:dc:5e:83:d8:36:a8:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7B:8A:CE:DA:63:B7:5A:2B:F2:38:1A:44:46:11:7B:86:83:69:46
X509v3 Authority Key Identifier:
keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d5:47:35:63:e4:7b:23:7d:ce:23:7b:4f:8b:66:50:af:67:
d1:17:8d:e7:cc:ad:12:2b:4f:e4:a3:78:48:40:99:ab:c1:d2:
a8:27:1f:76:37:5a:10:e4:1c:7f:9e:74:c5:16:08:9d:40:0c:
61:56:aa:9d:04:04:d4:da:36:cd:5c:e2:ca:6f:8d:e6:33:f7:
d9:97:c8:08:c9:8f:aa:dc:a9:7e:db:ad:3f:b3:03:88:79:e2:
b3:ba:96:9b:4d:2b:92:98:82:0d:0c:39:d4:c4:80:c4:d2:8b:
db:f5:69:d8:94:20:57:90:d6:5e:05:a0:d6:f1:22:18:f6:57:
95:21:72:41:15:a0:6b:75:60:0c:c2:78:dd:92:5a:c9:cf:ea:
4e:ae:5a:f8:c2:82:57:df:c3:83:4b:d1:ed:59:61:90:e4:0f:
5e:a0:ab:b7:e1:3d:b8:30:2e:94:77:5f:05:48:1b:88:d4:7c:
d0:16:8c:14:db:5c:72:83:64:a7:46:9b:b4:93:03:15:96:92:
3e:cb:87:6b:6c:4a:2a:0b:f3:e4:28:4f:2d:a8:62:0a:2f:83:
bd:25:63:a3:b7:8d:88:b1:cb:72:1d:6f:b0:72:15:21:bb:ab:
89:2f:1e:bf:8d:cd:82:4a:3e:14:18:12:2e:cc:29:31:ee:a5:
62:72:b5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 05:26:36 2026 by rpki-client