
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File: Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier: ZfeYSVeGM8HNoJwvGLKyiA9saIe8KFoZO4WkCe35OnY=
Subject key identifier: B3:85:4B:15:3B:B6:67:BE:31:05:AE:FF:16:C3:B3:2E:1F:0A:24:23
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 01A00281ABE0ACA7673BD0471B94A972EE15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number: 1A2E
Signing time: Fri 14 Aug 2026 23:00:47 +0000
Manifest this update: Fri 14 Aug 2026 23:00:47 +0000
Manifest next update: Sat 15 Aug 2026 23:00:47 +0000
Files and hashes: 1: 1Yk3wLsSFqIceQz9okyZeYwSmUU.roa (hash: XuNQlAxXibSKzFFM3alxNEJs9SFC+R0bjfD85sz3lps=)
2: 2rNvx3N9jKo76idv1HsGHAcnnwk.roa (hash: eczcKAWkF5L/9LrtvswF4lmskTN97duPXq74deE4ZjY=)
3: 89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa (hash: gJOB7b6DwbK+XopIODXerFY7Dl/1i2NMhMaK+LjT9Lk=)
4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: 6N9j6Mdrpy6ZSQW6/hmyWjnvQMWRO/WiTbEeUm/1NiI=)
5: I50Xdmc2vD7Yx16IjkscqSWGByc.roa (hash: RDUO+YNn3phd3/QIVNJIvwDgBTmufyoyrH3ITgLGClY=)
6: XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa (hash: eJBUNPOd5UiGzU5DENLhYsoGYS/OErO6pyZfCeZ9+DI=)
7: Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa (hash: yIwR/WFk+tPJZkyXjHRduYJCHgmO7w46d3yBhaQ1ujQ=)
8: ZmP2ZObUuyHKnhCp3yW1kDTHCgs.roa (hash: Vxkxt++oIeUph0DYbZ+8qTmMgtiVFmJg9DjiNvyd4sc=)
9: _AlvkImBx9fT_58A-ot68g3ZAWg.roa (hash: msAI/PDOB8nUEhgzHGsqD3SG29keFYFQtvJbuYgfbh4=)
10: wEsor2MQvIFzGGLmwfUZgbYVkto.roa (hash: asdhK4hFtXHqOa5kFwrF3vv+JxQieRNKL69DY1/povE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:ab:e0:ac:a7:67:3b:d0:47:1b:94:a9:72:ee:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Aug 14 23:00:47 2026 GMT
Not After : Aug 15 23:00:47 2026 GMT
Subject: CN=b3854b153bb667be3105aeff16c3b32e1f0a2423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:af:36:01:c4:4e:9a:98:50:44:0b:f8:9f:45:
55:e2:0f:aa:f0:c7:2b:77:51:b1:37:34:62:de:15:
ab:b5:b9:5e:36:05:4a:c5:28:f2:0b:8d:da:b8:55:
36:17:a4:ee:bd:bf:01:0d:65:1c:50:53:0b:20:21:
9e:2c:ed:da:c7:67:54:16:49:1a:98:dd:ab:25:c3:
9e:80:86:e0:f5:e1:e0:95:ce:bf:7b:50:78:17:ec:
3b:35:b1:6a:cd:1b:ef:80:c8:9a:20:ef:f8:2b:e9:
b4:39:92:42:50:93:8c:b6:c2:e0:83:95:f5:dd:6e:
6c:8d:e6:50:62:18:35:cb:dd:18:a6:a8:05:07:61:
ca:8e:f6:0f:e3:75:b6:b1:52:12:bc:ea:3d:44:2b:
3a:d4:91:7d:49:db:3e:bf:6b:bb:d8:40:0b:94:00:
7f:8a:e5:8c:cf:59:62:cd:5b:34:d6:ff:4d:7e:21:
bf:91:85:6a:cc:e1:d3:3d:bf:aa:59:d5:55:ea:9a:
e3:b4:6b:f8:f9:e7:c2:4b:14:93:9c:93:d5:8d:d9:
15:27:42:34:e6:05:ce:72:9b:31:c3:ad:78:d3:3a:
3f:9c:00:34:0b:53:e8:73:f8:7d:b9:dd:5a:77:f5:
91:68:25:00:be:36:70:3e:38:b4:12:de:1f:d9:09:
46:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:85:4B:15:3B:B6:67:BE:31:05:AE:FF:16:C3:B3:2E:1F:0A:24:23
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:42:e8:06:df:8d:36:2b:93:a5:d4:c5:ed:ed:7a:2b:d6:c9:
18:9a:a1:04:f5:99:6c:1e:e5:d2:31:c0:b9:05:1b:c2:e5:b0:
3d:ba:ff:ce:87:1c:f9:e0:3a:40:d9:ba:eb:4a:d2:41:22:57:
7c:7e:21:15:6a:50:09:eb:b0:85:37:e3:78:00:15:9c:16:9c:
3e:b3:9d:fa:a9:1b:49:87:25:bf:92:37:65:56:b5:0b:87:be:
07:f1:89:18:4a:89:e7:c9:6b:c6:f6:d1:03:89:e1:43:2e:d6:
55:0c:f9:29:8a:ba:45:14:cc:d7:05:4b:b1:1a:de:4d:46:5a:
5d:bd:eb:06:41:ac:00:31:7e:8d:3e:00:df:1c:17:9b:5e:10:
1b:d4:e9:53:da:dc:22:f4:6e:62:74:dc:8a:54:d5:86:6e:9b:
6d:12:ea:85:1e:5e:8b:71:f1:63:c6:72:2a:e6:af:82:83:a6:
30:9c:dd:3f:07:00:97:74:c2:77:9a:4e:91:ce:10:7d:57:cb:
71:9f:1d:1c:f9:24:2c:73:c6:e0:69:d8:f6:3d:c3:69:71:70:
74:5f:fe:fd:a5:2f:1d:c4:7b:2b:65:a1:75:55:af:4e:dd:30:
3a:f1:8f:20:f4:60:e6:63:ad:a3:bf:f7:a6:37:6e:20:72:a5:
98:84:54:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:26:36 2026 by rpki-client