
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File: Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier: JGfbgQfLfjEYzbp/NpiQ70nqQAMUTUsoPMTad8vzIP8=
Subject key identifier: 3D:71:04:77:9C:92:94:99:F9:34:B5:82:3F:AD:D4:4E:EC:99:C0:9A
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 01A114BCE89D8E5EAC08789CD783C24738D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number: 1ABC
Signing time: Wed 07 Oct 2026 05:01:26 +0000
Manifest this update: Wed 07 Oct 2026 05:01:26 +0000
Manifest next update: Thu 08 Oct 2026 05:01:26 +0000
Files and hashes: 1: 1Yk3wLsSFqIceQz9okyZeYwSmUU.roa (hash: XuNQlAxXibSKzFFM3alxNEJs9SFC+R0bjfD85sz3lps=)
2: 2rNvx3N9jKo76idv1HsGHAcnnwk.roa (hash: eczcKAWkF5L/9LrtvswF4lmskTN97duPXq74deE4ZjY=)
3: 89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa (hash: gJOB7b6DwbK+XopIODXerFY7Dl/1i2NMhMaK+LjT9Lk=)
4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: HXF9NQXlvGIUCJHaday+J2WXnLAD7DnoRMxiMv820U4=)
5: I50Xdmc2vD7Yx16IjkscqSWGByc.roa (hash: RDUO+YNn3phd3/QIVNJIvwDgBTmufyoyrH3ITgLGClY=)
6: XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa (hash: eJBUNPOd5UiGzU5DENLhYsoGYS/OErO6pyZfCeZ9+DI=)
7: Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa (hash: yIwR/WFk+tPJZkyXjHRduYJCHgmO7w46d3yBhaQ1ujQ=)
8: ZmP2ZObUuyHKnhCp3yW1kDTHCgs.roa (hash: Vxkxt++oIeUph0DYbZ+8qTmMgtiVFmJg9DjiNvyd4sc=)
9: _AlvkImBx9fT_58A-ot68g3ZAWg.roa (hash: msAI/PDOB8nUEhgzHGsqD3SG29keFYFQtvJbuYgfbh4=)
10: wEsor2MQvIFzGGLmwfUZgbYVkto.roa (hash: asdhK4hFtXHqOa5kFwrF3vv+JxQieRNKL69DY1/povE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:bc:e8:9d:8e:5e:ac:08:78:9c:d7:83:c2:47:38:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Oct 7 05:01:26 2026 GMT
Not After : Oct 8 05:01:26 2026 GMT
Subject: CN=3d7104779c929499f934b5823fadd44eec99c09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:33:33:81:52:d1:d8:15:79:be:dd:b3:0c:
3c:6f:15:cc:5b:21:ad:18:bf:27:ca:56:99:fb:dc:
1f:ce:dc:9c:22:e1:d9:32:5e:46:a4:ff:51:da:b9:
7c:3e:66:6f:7b:7d:fa:e5:6e:f4:5c:b4:1b:cb:ed:
2d:70:f1:e3:69:9f:6b:a9:02:ca:f9:32:41:6b:de:
9b:23:21:80:e6:79:a3:eb:1a:53:8a:c1:90:cc:18:
5b:be:2a:90:98:19:bf:3c:a8:8a:90:00:36:6f:3f:
68:3f:1d:8f:5c:1c:3e:72:ef:ba:35:2d:1e:ae:43:
7d:d3:ad:3e:a2:6e:bc:bc:c8:1e:b9:ee:c9:cc:1e:
1f:d9:19:63:be:09:e3:76:72:ff:e6:3b:1b:ac:ee:
37:1a:03:75:c6:35:b0:f5:61:8f:40:6e:5e:f7:5f:
5b:f8:c1:26:40:23:d2:56:9e:0d:24:06:02:b7:80:
97:a9:08:f4:22:97:fb:2f:4f:0a:9e:f1:2a:f6:5d:
e8:a2:f6:58:80:2c:b2:b1:64:35:00:33:83:25:57:
66:50:0c:2d:32:f7:b9:a0:d1:72:89:4c:b2:0a:df:
b5:76:c4:eb:ab:a9:75:f7:ae:53:31:13:57:70:31:
b5:32:bd:8a:51:92:04:e9:1a:45:65:7a:b4:07:fd:
9f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:71:04:77:9C:92:94:99:F9:34:B5:82:3F:AD:D4:4E:EC:99:C0:9A
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c1:26:b3:92:f7:90:9e:7e:c3:db:23:78:10:1e:3a:60:e8:
32:96:7c:90:ae:73:18:a7:d0:a8:24:d0:0f:56:3b:00:5a:fb:
b4:44:e5:95:ef:3e:c1:ea:92:5d:dd:bb:bf:25:cc:07:dd:dc:
34:3b:66:85:77:8e:ce:3a:e7:76:73:83:2c:a8:c5:19:11:78:
ed:30:79:8a:e8:bd:10:16:97:dd:bb:3e:98:4a:0c:70:64:64:
96:73:16:49:54:f5:a8:ee:e0:2d:7b:68:4c:64:ed:ee:de:d3:
62:81:b2:ed:b7:54:51:f5:ae:e5:9d:bc:7b:da:47:58:3f:66:
82:c6:ea:8d:9f:0f:34:27:66:5e:55:ad:98:7d:4a:65:27:9d:
33:81:66:d8:3d:84:61:a3:38:f8:fe:cb:9d:4b:1a:49:f0:66:
3a:4c:6b:ed:4b:53:cf:63:37:dc:31:1a:9b:75:27:2c:fe:a2:
e7:ec:62:25:eb:0c:1f:da:17:4c:47:e5:82:71:3e:9f:92:7a:
8d:4b:de:79:e1:bf:0f:0b:0e:d5:93:7a:09:03:f3:e1:49:3e:
be:2e:cc:c2:98:96:5f:a6:2c:35:46:de:aa:03:a0:2c:5a:df:
2b:d6:29:12:d1:18:e0:5d:ea:44:cb:2e:28:16:7f:cd:4e:dd:
e2:d7:80:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEUvOidjl6sCHic14PCRzjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmZhMDQyMTE0MzAxMzY4YjQwNjlhYmQ2OGExZWZiYWM0
N2ZkY2UwHhcNMjYxMDA3MDUwMTI2WhcNMjYxMDA4MDUwMTI2WjAzMTEwLwYDVQQD
EygzZDcxMDQ3NzljOTI5NDk5ZjkzNGI1ODIzZmFkZDQ0ZWVjOTljMDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstszM4FS0dgVeb7dsww8bxXMWyGt
GL8nylaZ+9wfztycIuHZMl5GpP9R2rl8PmZve3365W70XLQby+0tcPHjaZ9rqQLK
+TJBa96bIyGA5nmj6xpTisGQzBhbviqQmBm/PKiKkAA2bz9oPx2PXBw+cu+6NS0e
rkN9060+om68vMgeue7JzB4f2RljvgnjdnL/5jsbrO43GgN1xjWw9WGPQG5e919b
+MEmQCPSVp4NJAYCt4CXqQj0Ipf7L08KnvEq9l3oovZYgCyysWQ1ADODJVdmUAwt
Mve5oNFyiUyyCt+1dsTrq6l1965TMRNXcDG1Mr2KUZIE6RpFZXq0B/2f/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1xBHeckpSZ+TS1gj+t1E7smcCaMB8GA1UdIwQY
MBaAFBX/oEIRQwE2i0Bpq9aKHvusR/3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMt
YjczYTM2ZDkzOWIyLzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMtYjczYTM2ZDkzOWIy
LzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8Ems5L3
kJ5+w9sjeBAeOmDoMpZ8kK5zGKfQqCTQD1Y7AFr7tETlle8+weqSXd27vyXMB93c
NDtmhXeOzjrndnODLKjFGRF47TB5iui9EBaX3bs+mEoMcGRklnMWSVT1qO7gLXto
TGTt7t7TYoGy7bdUUfWu5Z28e9pHWD9mgsbqjZ8PNCdmXlWtmH1KZSedM4Fm2D2E
YaM4+P7LnUsaSfBmOkxr7UtTz2M33DEam3UnLP6i5+xiJesMH9oXTEflgnE+n5J6
jUveeeG/DwsO1ZN6CQPz4Uk+vi7MwpiWX6YsNUbeqgOgLFrfK9YpEtEY4F3qRMsu
KBZ/zU7d4teAlQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 08:12:13 2026 by rpki-client