
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
File: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft (raw, json)
Hash identifier: Fyaa1+vGY2aXtQK4ggixsD3fnd1jrI1Hgvi30lXBj/Q=
Subject key identifier: CA:46:50:86:14:22:30:41:70:96:9C:0C:F2:B7:32:3A:68:77:69:2B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A14B3D2B1A8FEA55788D6F7B4D2A8C3969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
Manifest number: 16FB
Signing time: Sat 17 Oct 2026 19:01:02 +0000
Manifest this update: Sat 17 Oct 2026 19:01:02 +0000
Manifest next update: Sun 18 Oct 2026 19:01:02 +0000
Files and hashes: 1: 1-CTT0_CxhciLaRkCJ4DgzsS2sQI.roa (hash: Mn9NJhG5uVMvcY80UVOWe2L3SwusTTL/IyfqCD6b0DM=)
2: 1KNNXZL6ouoopWh_53dd61ybf1A.roa (hash: cq5OwFDQKl5GHE8H8MFFcqH18XWpoUYy00ArlQZuRPE=)
3: 3m3HoU697g1riqEN3srKHe_439M.roa (hash: W+y/B+WZ8ZoxlzmraHW+h6RJwPaH/ClX4IbAIXK6nc4=)
4: 4gNMkZwMrrIrONhxPcj5kIxuYVo.roa (hash: U9OfOqXUmG1mXao3Mm0oiv6aXUXy9X2OeaKROUSRnTs=)
5: AJR3ZjQEw3xNx2603rNxTvz_xuo.roa (hash: ZoHn9/Htdy70PIhm8Yqh59EOA15hHtjIaEGcVEgZgoM=)
6: Ah-yE4HGZ3OirKVOmDu8zAhqZTE.roa (hash: E8yorOIrWxqnVYfsNb5/mw8YbBQarLCAuKuOVYATYpg=)
7: AoBRPXbG5pKu5AAvqVysvx9mLiU.roa (hash: O98GwMh4t71nHe2YCs9Jlw2h9chx4Ly2jC1HdVtt8xs=)
8: AtK_HmjBgTQxL2dvI2bWhaSZhlY.roa (hash: pfhtQVDPYLieoSGMbHBUbh6+wfbqsfaBIqLKNtiv5Zw=)
9: Df8y3BfeVMt5ZLw2xy4aecCtU8A.roa (hash: TwViBdIVRcMSXIqZvXA/oRrkj814XWcrMgErtJhOZ3s=)
10: F0ko9p_dX45_UL03Ktzd4OR6o48.roa (hash: ZDeUYGOkL0wPqfJ87AM7peZBWAW9itv89MZgmrjEPPM=)
11: F7x0aSi2_MLwNaDyYuKaGyc_STQ.roa (hash: LB1+XIiMdPu7FCQlcDxyQXa0f+KM8LZC2AuKanD4uQY=)
12: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl (hash: dM/jliPgm8NsuGj1mzoQzdtKo1/OfRLZEqMYSY4Yz4E=)
13: GeIOKXkutG8FXC6S0uhqDuR2Oyc.roa (hash: L2U7GDQy2AVnBc0bV7pGyVkcsqpiDhD1aFrAWYtZCHA=)
14: HLNsB1T0fEp8sE8QkmRnuIqq2P0.roa (hash: ntuGjaonHQJAiUd1pWH+WmzWne76FiBOK2IOI8INZRA=)
15: Kb5r6kSdEVYykPlUZTI9ro2Sqi4.roa (hash: 0w7m09MypS3A5iD/C8kuw27OA5mZ8qKaPs6ATFK8K1g=)
16: MYkvB2GG4KyUbb9t8wtKuudjcUc.roa (hash: StyOsvY6f49b11bzmUAfdI8EpecZB7kX511O4LoHQ4g=)
17: MZ97w73npIcNECx3xDjjos0_7m0.roa (hash: YZTyLgEvSwRovxtafIUavw8i2rxVY2K9vaeTguqjS08=)
18: Nj8rxyt_f_accK_eeAGjSMOlvxw.roa (hash: wyd8iqzy9iMZZIARf5xU0sgU6at+XN4nnL5cjjHjJ0c=)
19: TlswaEkjGyIFhX9xWdZ6EbegUsU.roa (hash: pzxA5lbFhF5KkSZqcy0U7Lfc21E5mQXr6TmkOaIuhGg=)
20: WFoSqC14BpVH5Cb6k1CJ43Kw9To.roa (hash: JnRiMfd9nwg8jtq238kZzEHpNqXF/fwnpcdjfaQN5R0=)
21: _1agZbDchCwDGrkWbgBDrxVhKeg.roa (hash: Y7QBeAqE66w4+zXwDaoCJTaeXdMPw2WR9F/QcsrFnTE=)
22: _nvRHKvvb_mvanqFMM5V8lm8g8w.roa (hash: RruZ8RVSFy2mwh8xxZXhGWare/JM1CRcpYspOp1Cygk=)
23: fe6u7JDG48jgBf_DPc3asIDwrHA.roa (hash: CXlAGISmvgHV2CDP3YIRVXV9Y0SYEMiW/rQSbievzAc=)
24: gcp8JVoaSaFBYMR0Spw7tSBPycE.roa (hash: EXlX7JSGlYTO8jv6fQCuHBvUsxakUkqSBgk4IVvHb5I=)
25: gf12Uu8Akz7O6ocdD8ZlwFJTd4Q.roa (hash: PyCccM/pMp7WT5yknxMOUGo05NWlo29hqiredCgcI0I=)
26: hzFa5HcRt_SuJXTYDbBlnXBrlms.roa (hash: HYZRCL8yIsfCy/2+UYnMYcElAtbPqegy+2PrFnMr9pY=)
27: iiFfwSof-Ppnt5Jn1VyYe6ltGao.roa (hash: jReOXsdFrikOH9PjdRpSIjaDDshA4y4Yh1LFRBqkSi4=)
28: jFOOiVIJXUplo5sbQn459HQ3ZVg.roa (hash: leW7ID8jgMsQdyPHewYzl9kELPvtbc87rM05EgGaQW0=)
29: l60G9RtGQQ6DxTnY-7uGdBT18E0.roa (hash: 7f3s+Mq0G+/ok4ZNqNp75Xktxw69L98MKsHRcjmDKdA=)
30: m9zjHR2IwuP6M_EqtRtBLVSg0D4.roa (hash: yMwu/UQ3rPUyOJCc3eCtP2GKyWlV3Y6SloIA/fcgLfc=)
31: mYQPII2ilkK1oy0MlW-v6JAxGxk.roa (hash: tyuBwPs2VAbnEW0fWN1peF41+ky+lDL1B9PXSQMox8A=)
32: n56eK2wrfpQJh1WUgYk7UXNHpf8.roa (hash: QM9hkPMKejFTGopGuAo0TpNNNmH+bNsiSe7g4tXyQLg=)
33: nQiqXkgEvGy0Ub5bywiIxfiK-B8.roa (hash: Xvjwpfsbr0oWLkmoWen3GJer1ZgTzw4kmXxrwYKGkNo=)
34: oRGU4dD-wRnhsAeXFhYBTl3ahaY.roa (hash: KwxVldnlFQ7swrf5zJ4tkIkoluJnRIq49ZF/vvuzGEk=)
35: pexkcyVPSICPLZN0RiIg0ALWvjk.roa (hash: 0Kygrrr/4SdNr2ZBGUFGg1GzDhK7GU5H16nbpbesFjA=)
36: vnB0ZCvUzeI9LmFJIT8XX_aRpEY.roa (hash: PwD9rUXHKPRtFfN7AB48A4lXtdzXP/3YnqLj0nuj6qM=)
37: xa9xrZNhkrb1go6zH6OKw-38u0I.roa (hash: 3ps/xuw6rQo0GiTBuWC3tdYfVBGy86dcxldZD3sHZwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:3d:2b:1a:8f:ea:55:78:8d:6f:7b:4d:2a:8c:39:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 17 19:01:02 2026 GMT
Not After : Oct 18 19:01:02 2026 GMT
Subject: CN=ca4650861422304170969c0cf2b7323a6877692b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:96:06:9b:da:07:de:1c:46:41:d3:cb:c6:
12:02:75:33:04:c9:b2:80:61:28:92:3e:cb:a7:f9:
00:26:92:d4:b5:28:7c:6f:53:07:b6:24:db:3b:64:
81:63:2c:78:da:de:32:c0:26:5f:98:7c:7e:33:57:
0f:11:75:75:0e:a3:5c:a8:ef:41:e9:63:2f:e9:76:
d5:7c:73:9a:fd:03:9a:c8:68:25:7b:c7:80:d5:ab:
5f:2b:9e:6a:0c:fb:06:5d:4f:49:fc:3c:e4:ec:da:
f2:2d:f6:93:04:cd:de:c5:80:4c:9e:81:52:67:7c:
b8:33:47:81:1f:a9:a0:6e:38:70:bc:86:12:2f:4b:
81:33:61:30:4b:1d:49:82:49:ca:53:c5:dc:2e:86:
5f:c7:8f:12:64:6f:65:98:b6:0e:36:8c:3d:fa:5a:
5d:48:02:34:eb:d9:90:7b:69:9e:c3:4b:36:98:58:
e9:97:e8:65:56:ea:2b:66:f2:c6:ed:4a:3b:69:a2:
68:41:b9:b5:d9:33:33:0b:d1:b8:b6:3b:4a:35:39:
fa:ec:a5:b7:ea:99:3b:68:c1:c5:60:8f:e3:f3:40:
cd:70:eb:e5:f6:d8:8c:29:f5:e9:8e:41:11:ff:2f:
00:d9:55:e0:7a:50:bd:73:77:6d:0c:c6:03:a1:3e:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:46:50:86:14:22:30:41:70:96:9C:0C:F2:B7:32:3A:68:77:69:2B
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:17:25:be:b1:15:d7:b2:db:dd:71:14:c1:69:8d:d6:91:a9:
ff:8b:9c:77:4d:67:ea:e1:6f:be:78:bc:53:80:67:4e:6d:c8:
ac:c5:3a:f7:4e:13:2f:82:ee:de:41:8c:93:d6:f9:7a:9b:87:
d5:59:71:17:5a:df:49:5a:b2:4c:ed:53:69:6f:cb:a0:f6:c8:
72:0f:62:62:f6:6b:90:57:5e:a6:ac:b1:87:0a:e0:73:02:0f:
83:06:a8:ff:43:84:92:1a:e2:8d:2d:19:4c:4f:0e:9e:56:03:
d0:35:32:0c:7a:98:c5:a5:b5:62:ec:ed:ad:19:d5:f0:3e:b2:
b8:80:ec:fd:fa:a3:5f:bc:b9:29:41:20:8e:c7:b9:cd:e7:c0:
b0:7c:2e:e6:48:61:2d:19:c2:00:53:04:ce:ee:e4:6c:25:35:
f7:f3:ba:f9:d0:49:0e:17:bd:b2:87:38:04:58:73:d8:2d:e8:
8f:dc:72:90:3a:2c:fd:42:10:e5:89:b9:a1:c4:3f:89:87:e9:
ec:2d:ec:a0:df:80:e6:2c:38:3d:b0:8b:e1:55:80:ff:00:30:
96:25:ef:33:d9:a2:7b:91:60:1e:9a:97:a0:fc:3e:af:35:c9:
93:f6:8b:20:a2:f8:f7:e5:67:5d:ef:5d:c4:3a:3e:a7:7d:e6:
4b:8f:e1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:48:58 2026 by rpki-client