Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
File: F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json)
Hash identifier: Xgq8tmcaNiSTkiM+SHu+zLvmsigdRCBDA8c7aPbjmU8=
Subject key identifier: FF:54:99:9A:6A:65:75:A8:92:C6:BE:6C:39:36:BC:1F:17:3D:65:7A
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 01A001DD673A9A45CEBAD8B05A15986F8694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
Manifest number: 1404
Signing time: Fri 14 Aug 2026 20:01:22 +0000
Manifest this update: Fri 14 Aug 2026 20:01:22 +0000
Manifest next update: Sat 15 Aug 2026 20:01:22 +0000
Files and hashes: 1: 1-earsS0WLz1IJKO-WJXouPRRDc.roa (hash: 0PMS6Wj9PBe3RqKaVauppM1NP8rM+o6ZHX9nxGiIcug=)
2: BQMAZ1-GEH5r12U7WPk6XQ_xa2o.roa (hash: hON2VcGx2tnVP3W4DtWqeENmyb4FIH7O20nZquH7iUI=)
3: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: cc6lJIZO+Ojtgu8bKy4tHdy8GQa/OySqOhEMdjTykZo=)
4: Nffyfowdb4DCXyl-CUibDbck5aw.roa (hash: +korLpH5t+ySKaX06qHUvdV0iVtoQyoQxEXvg5jMwS0=)
5: zYExE-CWB4WrYD1j1mlYKlry5zU.roa (hash: aQw4vgQl/XUfRZ1hivO701ANJNV8KUYzIDEJLZE7u/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:67:3a:9a:45:ce:ba:d8:b0:5a:15:98:6f:86:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Aug 14 20:01:22 2026 GMT
Not After : Aug 15 20:01:22 2026 GMT
Subject: CN=ff54999a6a6575a892c6be6c3936bc1f173d657a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:0b:22:a2:05:e7:4d:6b:db:b2:47:e0:f5:
51:38:15:0c:c4:b7:da:f5:26:cc:14:5a:c8:56:ed:
c6:76:35:00:b8:fe:79:25:7c:5b:2c:dd:29:20:17:
4b:33:ed:d2:ac:8f:40:90:c6:0b:60:27:24:7f:6b:
78:36:6c:8a:f8:99:ad:83:82:2a:c0:af:00:10:c6:
68:21:a4:e1:64:0b:64:ad:2e:95:15:73:fd:82:9f:
99:49:3a:05:10:27:bc:a6:e1:54:c3:9d:40:0d:82:
43:44:1b:1a:81:8b:11:48:ab:d1:d2:de:73:ad:c0:
a1:cc:38:54:10:ae:43:d9:c6:bc:b4:03:97:85:fa:
97:ee:d4:5f:82:70:fb:93:93:f3:93:a8:a6:aa:ae:
32:10:3a:80:54:d2:ed:62:3a:2d:98:88:6b:04:fa:
06:c6:51:16:e5:5c:af:48:f3:b0:70:89:ca:99:9c:
0a:74:d4:7a:ff:53:25:a4:2d:38:21:ce:8e:d8:bc:
02:42:11:7b:f5:79:8f:1d:b5:ae:08:87:8d:cc:a5:
95:6a:90:e5:9f:1c:51:d3:bc:82:59:2c:8b:3b:d6:
b3:06:4b:11:3f:62:27:41:1b:d3:db:92:9d:52:2f:
73:60:c0:6f:34:06:18:55:d3:b8:74:09:0c:5e:14:
d8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:54:99:9A:6A:65:75:A8:92:C6:BE:6C:39:36:BC:1F:17:3D:65:7A
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d0:12:71:fc:07:97:5f:77:e8:51:80:75:d6:e4:96:1f:19:
9d:4b:67:7e:87:84:26:5e:2e:1a:c4:ac:3d:39:8e:30:e8:cf:
87:c6:f4:5a:5f:19:e7:e4:f7:83:5b:a3:8f:8c:ef:f4:6d:e8:
12:56:9c:6e:b9:a8:6a:70:c6:a7:d6:fe:e7:fb:76:0c:fa:99:
82:12:20:91:bb:ae:99:a6:a6:5d:bd:1b:17:25:cc:ee:e4:18:
35:84:cd:e1:b7:19:b9:5e:d1:09:c8:b0:0c:10:c3:4d:e2:5a:
84:43:5b:e6:9b:40:a7:d6:fd:a5:77:0c:8d:a2:41:dc:5b:12:
37:49:5d:59:84:60:46:f4:0f:7c:ba:21:f8:97:b8:d8:11:b1:
4a:f9:a9:93:1c:b5:32:1a:8d:e0:1c:30:b6:c9:46:40:b9:9c:
3d:69:16:49:a6:5b:fe:5d:28:02:8b:f3:88:44:23:d1:12:e0:
79:bf:c1:55:0a:eb:79:93:e2:25:15:fb:77:4b:75:48:1e:a0:
af:c7:aa:57:5b:d2:7f:a0:30:80:53:a6:06:b8:30:f8:d3:b2:
93:80:d9:27:33:87:e7:1f:00:f7:3e:34:b7:08:35:80:e4:41:
a4:53:f3:26:bf:30:7b:9a:11:1d:c0:7a:d0:b8:3e:d8:87:99:
eb:ef:25:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:04 2026 by rpki-client