
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
File: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft (raw, json)
Hash identifier: rK1Mnik5c2g5TJnqqi3JfEKEzjPIRJ5s7aOmZp2bum8=
Subject key identifier: B9:F7:DC:94:A8:E6:16:E6:66:57:E1:28:F9:9F:95:68:DC:38:42:13
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A12843BFDD27B7B24FCC96D6A190EAACF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
Manifest number: 16E7
Signing time: Sun 11 Oct 2026 00:01:31 +0000
Manifest this update: Sun 11 Oct 2026 00:01:31 +0000
Manifest next update: Mon 12 Oct 2026 00:01:31 +0000
Files and hashes: 1: 1-CTT0_CxhciLaRkCJ4DgzsS2sQI.roa (hash: Mn9NJhG5uVMvcY80UVOWe2L3SwusTTL/IyfqCD6b0DM=)
2: 1xo9uRwazGPExjT15gHLTmOfVnY.roa (hash: alhQ3MkblKkYV6C77axeZ7FdHmqDD77jedDHF6Ew1Xo=)
3: 3m3HoU697g1riqEN3srKHe_439M.roa (hash: W+y/B+WZ8ZoxlzmraHW+h6RJwPaH/ClX4IbAIXK6nc4=)
4: 4gNMkZwMrrIrONhxPcj5kIxuYVo.roa (hash: U9OfOqXUmG1mXao3Mm0oiv6aXUXy9X2OeaKROUSRnTs=)
5: AJR3ZjQEw3xNx2603rNxTvz_xuo.roa (hash: ZoHn9/Htdy70PIhm8Yqh59EOA15hHtjIaEGcVEgZgoM=)
6: Ah-yE4HGZ3OirKVOmDu8zAhqZTE.roa (hash: E8yorOIrWxqnVYfsNb5/mw8YbBQarLCAuKuOVYATYpg=)
7: AoBRPXbG5pKu5AAvqVysvx9mLiU.roa (hash: O98GwMh4t71nHe2YCs9Jlw2h9chx4Ly2jC1HdVtt8xs=)
8: AtK_HmjBgTQxL2dvI2bWhaSZhlY.roa (hash: pfhtQVDPYLieoSGMbHBUbh6+wfbqsfaBIqLKNtiv5Zw=)
9: Df8y3BfeVMt5ZLw2xy4aecCtU8A.roa (hash: TwViBdIVRcMSXIqZvXA/oRrkj814XWcrMgErtJhOZ3s=)
10: F0ko9p_dX45_UL03Ktzd4OR6o48.roa (hash: ZDeUYGOkL0wPqfJ87AM7peZBWAW9itv89MZgmrjEPPM=)
11: F7x0aSi2_MLwNaDyYuKaGyc_STQ.roa (hash: LB1+XIiMdPu7FCQlcDxyQXa0f+KM8LZC2AuKanD4uQY=)
12: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl (hash: 5u9Ixb5M5uzXtbzYvb4JrdCi88Xcd7z6liCsJ654DqI=)
13: GeIOKXkutG8FXC6S0uhqDuR2Oyc.roa (hash: L2U7GDQy2AVnBc0bV7pGyVkcsqpiDhD1aFrAWYtZCHA=)
14: GxIHXjt6YycYTUa0XRCVghpAj-k.roa (hash: HhhKZCdKN9/SlwUoWfOdsnSeB0lEPNK2Xjfhma7psx4=)
15: HLNsB1T0fEp8sE8QkmRnuIqq2P0.roa (hash: ntuGjaonHQJAiUd1pWH+WmzWne76FiBOK2IOI8INZRA=)
16: Kb5r6kSdEVYykPlUZTI9ro2Sqi4.roa (hash: 0w7m09MypS3A5iD/C8kuw27OA5mZ8qKaPs6ATFK8K1g=)
17: MYkvB2GG4KyUbb9t8wtKuudjcUc.roa (hash: StyOsvY6f49b11bzmUAfdI8EpecZB7kX511O4LoHQ4g=)
18: MZ97w73npIcNECx3xDjjos0_7m0.roa (hash: YZTyLgEvSwRovxtafIUavw8i2rxVY2K9vaeTguqjS08=)
19: Nj8rxyt_f_accK_eeAGjSMOlvxw.roa (hash: wyd8iqzy9iMZZIARf5xU0sgU6at+XN4nnL5cjjHjJ0c=)
20: PYCVbJ1vffPW_TvvIq_XI2iZ0N0.roa (hash: 7eoowYLymhOX2Fm9X0fOsfGTIcRqtUS7w/PgW47/j14=)
21: TlswaEkjGyIFhX9xWdZ6EbegUsU.roa (hash: pzxA5lbFhF5KkSZqcy0U7Lfc21E5mQXr6TmkOaIuhGg=)
22: WFoSqC14BpVH5Cb6k1CJ43Kw9To.roa (hash: JnRiMfd9nwg8jtq238kZzEHpNqXF/fwnpcdjfaQN5R0=)
23: _1agZbDchCwDGrkWbgBDrxVhKeg.roa (hash: Y7QBeAqE66w4+zXwDaoCJTaeXdMPw2WR9F/QcsrFnTE=)
24: _nvRHKvvb_mvanqFMM5V8lm8g8w.roa (hash: RruZ8RVSFy2mwh8xxZXhGWare/JM1CRcpYspOp1Cygk=)
25: fe6u7JDG48jgBf_DPc3asIDwrHA.roa (hash: CXlAGISmvgHV2CDP3YIRVXV9Y0SYEMiW/rQSbievzAc=)
26: gcp8JVoaSaFBYMR0Spw7tSBPycE.roa (hash: EXlX7JSGlYTO8jv6fQCuHBvUsxakUkqSBgk4IVvHb5I=)
27: gf12Uu8Akz7O6ocdD8ZlwFJTd4Q.roa (hash: PyCccM/pMp7WT5yknxMOUGo05NWlo29hqiredCgcI0I=)
28: hzFa5HcRt_SuJXTYDbBlnXBrlms.roa (hash: HYZRCL8yIsfCy/2+UYnMYcElAtbPqegy+2PrFnMr9pY=)
29: iiFfwSof-Ppnt5Jn1VyYe6ltGao.roa (hash: jReOXsdFrikOH9PjdRpSIjaDDshA4y4Yh1LFRBqkSi4=)
30: l60G9RtGQQ6DxTnY-7uGdBT18E0.roa (hash: 7f3s+Mq0G+/ok4ZNqNp75Xktxw69L98MKsHRcjmDKdA=)
31: m9zjHR2IwuP6M_EqtRtBLVSg0D4.roa (hash: yMwu/UQ3rPUyOJCc3eCtP2GKyWlV3Y6SloIA/fcgLfc=)
32: mYQPII2ilkK1oy0MlW-v6JAxGxk.roa (hash: tyuBwPs2VAbnEW0fWN1peF41+ky+lDL1B9PXSQMox8A=)
33: n56eK2wrfpQJh1WUgYk7UXNHpf8.roa (hash: QM9hkPMKejFTGopGuAo0TpNNNmH+bNsiSe7g4tXyQLg=)
34: nQiqXkgEvGy0Ub5bywiIxfiK-B8.roa (hash: Xvjwpfsbr0oWLkmoWen3GJer1ZgTzw4kmXxrwYKGkNo=)
35: oRGU4dD-wRnhsAeXFhYBTl3ahaY.roa (hash: KwxVldnlFQ7swrf5zJ4tkIkoluJnRIq49ZF/vvuzGEk=)
36: pexkcyVPSICPLZN0RiIg0ALWvjk.roa (hash: 0Kygrrr/4SdNr2ZBGUFGg1GzDhK7GU5H16nbpbesFjA=)
37: vnB0ZCvUzeI9LmFJIT8XX_aRpEY.roa (hash: PwD9rUXHKPRtFfN7AB48A4lXtdzXP/3YnqLj0nuj6qM=)
38: xa9xrZNhkrb1go6zH6OKw-38u0I.roa (hash: 3ps/xuw6rQo0GiTBuWC3tdYfVBGy86dcxldZD3sHZwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 00:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:43:bf:dd:27:b7:b2:4f:cc:96:d6:a1:90:ea:ac:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 11 00:01:31 2026 GMT
Not After : Oct 12 00:01:31 2026 GMT
Subject: CN=b9f7dc94a8e616e66657e128f99f9568dc384213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:67:40:27:f8:39:54:c8:24:40:c9:9e:d2:3d:
9e:51:a4:56:4c:4a:4d:cb:1c:3e:b2:74:6a:8a:75:
84:c9:3c:37:f9:be:54:ba:a7:f4:51:da:e1:78:37:
73:ea:92:06:6a:59:7e:ec:ff:3a:33:8a:71:98:6d:
b1:9b:23:01:c5:f7:3e:57:59:53:f1:27:ef:4f:fc:
4a:71:57:33:66:b0:cd:96:17:ca:6e:bf:c7:11:46:
0b:8c:ac:fd:4c:a4:6e:a3:e7:f8:36:27:5e:89:92:
08:b3:b6:0a:fe:f4:4c:bf:7c:49:97:e5:3c:5b:ee:
55:c9:25:55:21:6d:f9:40:30:9e:70:c6:b5:49:d5:
24:c1:14:12:f5:8b:69:b4:54:13:64:76:23:ad:b6:
e9:4b:ae:19:61:c8:e3:4a:01:e3:37:1b:ab:70:37:
a5:f3:75:e4:a6:a5:42:82:fa:07:27:c9:dd:73:d5:
c2:67:da:c4:21:76:4e:89:61:ce:cd:00:ca:82:ac:
78:52:a0:cc:f6:34:29:5d:22:52:f8:1a:d6:0f:bc:
5d:de:ae:b7:2e:3d:c7:1a:40:2b:39:1a:3e:7e:74:
4b:cd:ae:ac:d5:96:fe:d9:e4:c2:f1:37:9d:61:0e:
1e:87:9b:16:b1:68:d7:37:a7:d6:2a:34:49:c4:69:
38:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F7:DC:94:A8:E6:16:E6:66:57:E1:28:F9:9F:95:68:DC:38:42:13
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:23:2b:dc:59:e7:bd:52:e8:fe:d1:65:77:1c:d5:1a:58:8a:
7d:f7:e8:a8:d1:8d:50:b2:4e:14:d2:9e:a0:41:05:b7:f9:bc:
0d:f5:6c:d1:d8:52:85:0a:f3:3e:53:2b:37:b9:ec:94:9b:28:
48:82:02:b3:b2:b5:73:b6:18:c1:e3:a5:06:6c:40:89:7c:21:
ec:7e:9c:c9:c6:39:ab:3a:6a:ee:6e:e6:22:3a:6f:25:ef:5f:
e7:fa:84:41:55:a2:bf:e8:16:93:fa:f8:a5:f0:dc:c5:dc:16:
f1:8c:a8:0d:7d:00:4e:b7:7c:b3:28:f6:19:57:40:2a:8f:17:
13:87:f1:34:96:13:6f:af:57:5f:3d:9a:85:7c:1d:1c:43:ba:
b2:ad:5e:29:81:a6:41:d0:18:04:f5:36:77:df:50:85:cf:5a:
d0:9e:c7:15:61:22:a2:fb:4b:aa:0b:e1:36:c8:72:18:16:3b:
b1:92:d5:74:32:c3:84:7e:33:dd:3a:11:67:82:a0:a0:d3:94:
2e:cd:9f:f5:11:d6:93:23:1a:6b:fa:b9:20:b0:c7:9c:69:41:
ce:75:6b:46:c9:59:66:ba:3e:74:9e:64:41:ff:43:27:e3:a5:
40:6a:c0:00:8f:34:47:dc:15:08:05:d6:12:65:80:c3:23:5e:
df:ba:9a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:56:46 2026 by rpki-client