Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
File: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft (raw, json)
Hash identifier: 6Fk+ivP510+Bm3jp6jZFVQ5uHIodnOMF3JygevfSo6s=
Subject key identifier: DB:48:71:79:69:37:A8:13:E4:DB:60:83:9F:98:F3:E7:E1:99:F7:44
Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
Certificate issuer: /CN=15fdb088e98e4e6415d944142212448369005b48
Certificate serial: 019D37C0EF6AC80D5A90A210402C3D7FB234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
Manifest number: 03A1
Signing time: Sun 29 Mar 2026 04:01:24 +0000
Manifest this update: Sun 29 Mar 2026 04:01:24 +0000
Manifest next update: Mon 30 Mar 2026 04:01:24 +0000
Files and hashes: 1: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl (hash: UCsU+pxoY5mJUZlzHk5NJZjTAEt6a+ra0O/chLNy1cs=)
2: UWFOafME42L6O6C8tCsylQ1qM5Y.roa (hash: kTp8dPuulE0KVt0WY/U+hGiw2jKgDTK8kmDYSbikY3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ef:6a:c8:0d:5a:90:a2:10:40:2c:3d:7f:b2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fdb088e98e4e6415d944142212448369005b48
Validity
Not Before: Mar 29 04:01:24 2026 GMT
Not After : Mar 30 04:01:24 2026 GMT
Subject: CN=db4871796937a813e4db60839f98f3e7e199f744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7e:07:cb:01:08:94:7c:d1:fa:33:8b:c8:29:
09:ee:ba:1f:2c:b3:20:ba:58:9c:0e:82:7d:0c:06:
81:71:1a:eb:4f:39:d5:b1:83:61:e9:ff:71:ae:98:
c3:06:42:f3:99:ac:c9:05:f3:ba:1f:f2:b9:08:83:
85:72:42:80:ae:5e:4c:dc:1e:b6:9b:4b:f2:ef:8d:
f4:e9:78:5c:9a:77:f7:4c:4c:75:10:a2:18:ed:1c:
cb:2e:6f:64:88:65:4d:13:21:02:7d:fd:48:88:55:
2a:bf:4c:b5:a4:88:73:e2:48:61:8d:9e:b5:32:9c:
81:04:4f:6b:7b:ba:5c:bf:ff:dc:4d:42:23:5b:fc:
b3:55:e2:e9:f7:38:90:3f:b7:2e:69:c8:f9:84:a7:
da:77:d2:b1:a2:51:67:62:bb:a6:18:b9:67:db:1b:
76:38:d2:7d:29:9d:0a:5e:29:05:1d:aa:ce:c2:19:
31:de:69:aa:81:82:05:f2:6a:43:a5:d4:da:e5:5b:
40:c4:be:d9:80:d7:90:91:c4:20:19:49:63:bb:e9:
30:84:61:0b:74:e1:c8:87:b5:96:79:64:bc:a8:1d:
81:c3:c2:c8:67:84:67:8d:36:60:1a:8e:84:d1:50:
7d:e7:70:31:03:60:af:3a:25:58:bc:55:5e:f2:62:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:48:71:79:69:37:A8:13:E4:DB:60:83:9F:98:F3:E7:E1:99:F7:44
X509v3 Authority Key Identifier:
keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:9a:8d:26:98:c9:0b:ec:c3:65:9b:3b:d8:06:fe:c7:64:67:
26:2b:c3:9c:aa:ac:38:5f:23:86:1e:1c:b5:8c:aa:de:8f:63:
86:1e:26:3c:52:ca:06:fc:33:7a:5a:f1:77:4a:fb:1d:a3:10:
77:b6:7e:16:05:a3:ab:d0:1f:96:c4:0a:0e:5a:06:75:d8:6a:
a1:5f:a0:4d:fc:57:3b:98:0e:99:5d:d3:a4:9b:0a:f2:32:00:
f8:e5:fc:13:f0:c4:6d:43:ae:d6:24:c6:d5:4f:50:17:2a:15:
7e:da:b9:c0:60:7d:65:f3:cf:30:85:b5:ce:87:4d:71:13:58:
5f:c3:89:47:6a:f0:1f:eb:59:ab:e9:da:7a:d1:b1:77:2c:40:
3c:ac:26:b7:fe:6c:76:6d:dd:90:77:7d:7b:4c:7a:a4:6c:04:
b6:cc:0e:ab:72:c7:5f:c6:f5:cf:b2:1e:6e:76:c9:f9:3a:b8:
2b:0d:04:8e:e7:e1:04:59:e3:5d:c7:36:ac:23:c6:83:05:2d:
d3:dc:fd:51:f1:11:cb:6c:1a:43:ee:f3:62:f8:f8:88:1b:27:
57:e4:79:3e:b5:98:16:ff:5b:98:3b:72:9f:61:6a:af:3d:05:
d9:01:bc:bc:3f:e5:7b:d3:28:6a:01:59:8e:cb:b4:7a:88:fd:
47:da:82:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:45 2026 by rpki-client