
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File: Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier: 4+MWP+bonGSDUjcft/qgn96wdpQle0JYoLRscyoDuik=
Subject key identifier: A0:9F:50:5C:CB:4C:36:F3:55:2F:34:83:99:8C:2F:B0:FD:6A:82:9B
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 019D375225F9AE0E77DCD8B2435F44D858F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number: 18B8
Signing time: Sun 29 Mar 2026 02:00:23 +0000
Manifest this update: Sun 29 Mar 2026 02:00:23 +0000
Manifest next update: Mon 30 Mar 2026 02:00:23 +0000
Files and hashes: 1: 1Yk3wLsSFqIceQz9okyZeYwSmUU.roa (hash: XuNQlAxXibSKzFFM3alxNEJs9SFC+R0bjfD85sz3lps=)
2: 2rNvx3N9jKo76idv1HsGHAcnnwk.roa (hash: eczcKAWkF5L/9LrtvswF4lmskTN97duPXq74deE4ZjY=)
3: 89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa (hash: gJOB7b6DwbK+XopIODXerFY7Dl/1i2NMhMaK+LjT9Lk=)
4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: BUSQJqGc86FJ8s/qN8mdmhJj2wD9qniRgbbrgVsUVf4=)
5: XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa (hash: eJBUNPOd5UiGzU5DENLhYsoGYS/OErO6pyZfCeZ9+DI=)
6: Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa (hash: yIwR/WFk+tPJZkyXjHRduYJCHgmO7w46d3yBhaQ1ujQ=)
7: _AlvkImBx9fT_58A-ot68g3ZAWg.roa (hash: msAI/PDOB8nUEhgzHGsqD3SG29keFYFQtvJbuYgfbh4=)
8: e6E78PhXHpGFjckaurV7HRo45Qc.roa (hash: /P55Uaooj8U1yQTcKMlV6RxlENtuteMc4CS0XE887QU=)
9: pc9jqeFvGm_Ya7ftOHGOywYXqHk.roa (hash: hvmbpnMOx6aLgariBv7H4no6hWJ9AktUdxssOvOvSNs=)
10: wEsor2MQvIFzGGLmwfUZgbYVkto.roa (hash: asdhK4hFtXHqOa5kFwrF3vv+JxQieRNKL69DY1/povE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:25:f9:ae:0e:77:dc:d8:b2:43:5f:44:d8:58:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Mar 29 02:00:23 2026 GMT
Not After : Mar 30 02:00:23 2026 GMT
Subject: CN=a09f505ccb4c36f3552f3483998c2fb0fd6a829b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:de:78:25:72:99:93:71:97:5e:d3:18:4b:5d:
b3:41:8a:26:b7:56:73:ef:62:e0:af:b8:92:37:63:
b4:a7:b4:9f:cf:a5:5e:5c:97:c1:39:52:75:c6:59:
28:5f:6e:86:15:53:7d:86:21:6a:6b:f1:1f:6a:93:
0f:c9:8c:2a:38:9e:52:84:95:19:1c:63:b7:59:7e:
61:a0:0a:7a:ed:84:c9:b0:35:64:0f:33:7f:5e:ed:
e1:cd:47:42:e7:91:bc:05:a0:28:d8:80:c1:6e:9f:
3f:2f:02:81:e9:99:17:14:a2:f6:aa:8b:e6:de:4e:
92:00:4c:34:26:1f:f1:ff:3d:38:c1:94:7d:1c:50:
02:64:05:be:50:19:ad:25:6e:7e:72:39:2c:cc:50:
46:97:d1:5e:19:8a:a9:9a:ae:7f:7d:72:82:4c:f8:
10:96:7e:63:5d:30:98:d7:cb:35:78:50:73:09:a3:
e9:b3:d5:13:70:51:11:bc:31:c3:d1:76:a6:b5:ce:
7a:14:d2:f0:52:b1:97:a0:8e:7e:0e:49:c8:9f:35:
5a:f8:dc:ee:fd:12:98:05:d9:5b:db:29:cb:6b:00:
ce:4f:02:b2:98:86:6b:5a:32:f3:a3:b6:ba:6e:16:
2c:0f:83:4d:47:5d:52:7c:3a:98:d0:f0:4e:e4:63:
b9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9F:50:5C:CB:4C:36:F3:55:2F:34:83:99:8C:2F:B0:FD:6A:82:9B
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:33:a1:6c:f8:ee:e8:97:37:e6:e8:ce:0e:92:3c:6e:cd:ff:
8f:54:41:b2:1f:10:45:8d:1a:43:c0:91:70:25:65:1c:f5:56:
74:9a:c6:9c:9b:31:6f:e3:f7:2c:6e:43:a2:03:e1:12:f7:a0:
75:1b:cf:c5:bf:6a:c9:7e:99:ff:db:9a:5e:55:0e:a2:80:dc:
4f:d1:52:3b:d6:c0:3c:09:49:81:97:70:f1:ea:4a:aa:44:e1:
94:5b:e0:1a:11:5e:e8:b6:57:f8:34:76:21:a2:4e:ed:c0:f3:
9c:9a:84:11:31:f9:04:96:72:22:81:0e:92:09:82:c4:f8:9f:
e2:4c:30:7d:1d:b3:2c:31:27:0f:49:b7:06:92:13:3e:bf:29:
cc:40:54:e6:8d:62:c3:27:f5:35:09:3e:ba:cc:d3:6e:49:6a:
6a:a6:c4:f4:4c:ca:f4:b5:b8:15:3d:c6:47:18:58:56:d8:3d:
d0:e3:95:6b:d6:97:f6:2f:f9:b4:f8:74:28:b8:b5:44:5b:29:
2d:3f:35:43:6d:ce:9b:29:26:c2:3a:c7:93:86:ac:09:85:b1:
50:41:67:db:f9:a8:40:84:96:fb:bd:47:ba:3a:a4:0d:f7:04:
b9:e5:70:49:94:4a:b9:73:66:ef:a3:b2:39:e2:cd:ec:81:9f:
33:25:8d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:18 2026 by rpki-client