
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
File: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft (raw, json)
Hash identifier: z67bQM1OwW5yseZf1/RJ13HSDMrHAB+34bwvG4yWVh0=
Subject key identifier: D8:0D:BD:2A:D6:94:CB:6B:FE:BB:09:15:34:77:A7:A4:36:9A:72:74
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A1871AC657EC5C608B477540AC1EAA36B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
Manifest number: 171A
Signing time: Thu 29 Oct 2026 10:00:41 +0000
Manifest this update: Thu 29 Oct 2026 10:00:41 +0000
Manifest next update: Fri 30 Oct 2026 10:00:41 +0000
Files and hashes: 1: 1-CTT0_CxhciLaRkCJ4DgzsS2sQI.roa (hash: Mn9NJhG5uVMvcY80UVOWe2L3SwusTTL/IyfqCD6b0DM=)
2: 1KNNXZL6ouoopWh_53dd61ybf1A.roa (hash: cq5OwFDQKl5GHE8H8MFFcqH18XWpoUYy00ArlQZuRPE=)
3: 3m3HoU697g1riqEN3srKHe_439M.roa (hash: W+y/B+WZ8ZoxlzmraHW+h6RJwPaH/ClX4IbAIXK6nc4=)
4: 4gNMkZwMrrIrONhxPcj5kIxuYVo.roa (hash: U9OfOqXUmG1mXao3Mm0oiv6aXUXy9X2OeaKROUSRnTs=)
5: AJR3ZjQEw3xNx2603rNxTvz_xuo.roa (hash: ZoHn9/Htdy70PIhm8Yqh59EOA15hHtjIaEGcVEgZgoM=)
6: Ah-yE4HGZ3OirKVOmDu8zAhqZTE.roa (hash: E8yorOIrWxqnVYfsNb5/mw8YbBQarLCAuKuOVYATYpg=)
7: AoBRPXbG5pKu5AAvqVysvx9mLiU.roa (hash: O98GwMh4t71nHe2YCs9Jlw2h9chx4Ly2jC1HdVtt8xs=)
8: AtK_HmjBgTQxL2dvI2bWhaSZhlY.roa (hash: pfhtQVDPYLieoSGMbHBUbh6+wfbqsfaBIqLKNtiv5Zw=)
9: Df8y3BfeVMt5ZLw2xy4aecCtU8A.roa (hash: TwViBdIVRcMSXIqZvXA/oRrkj814XWcrMgErtJhOZ3s=)
10: F0ko9p_dX45_UL03Ktzd4OR6o48.roa (hash: ZDeUYGOkL0wPqfJ87AM7peZBWAW9itv89MZgmrjEPPM=)
11: F7x0aSi2_MLwNaDyYuKaGyc_STQ.roa (hash: LB1+XIiMdPu7FCQlcDxyQXa0f+KM8LZC2AuKanD4uQY=)
12: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl (hash: JUMifEZHmw8160p301i/blXf7R0gnaNzWsun4BzdUuQ=)
13: GeIOKXkutG8FXC6S0uhqDuR2Oyc.roa (hash: L2U7GDQy2AVnBc0bV7pGyVkcsqpiDhD1aFrAWYtZCHA=)
14: HLNsB1T0fEp8sE8QkmRnuIqq2P0.roa (hash: ntuGjaonHQJAiUd1pWH+WmzWne76FiBOK2IOI8INZRA=)
15: Kb5r6kSdEVYykPlUZTI9ro2Sqi4.roa (hash: 0w7m09MypS3A5iD/C8kuw27OA5mZ8qKaPs6ATFK8K1g=)
16: MYkvB2GG4KyUbb9t8wtKuudjcUc.roa (hash: StyOsvY6f49b11bzmUAfdI8EpecZB7kX511O4LoHQ4g=)
17: MZ97w73npIcNECx3xDjjos0_7m0.roa (hash: YZTyLgEvSwRovxtafIUavw8i2rxVY2K9vaeTguqjS08=)
18: Nj8rxyt_f_accK_eeAGjSMOlvxw.roa (hash: wyd8iqzy9iMZZIARf5xU0sgU6at+XN4nnL5cjjHjJ0c=)
19: TlswaEkjGyIFhX9xWdZ6EbegUsU.roa (hash: pzxA5lbFhF5KkSZqcy0U7Lfc21E5mQXr6TmkOaIuhGg=)
20: WFoSqC14BpVH5Cb6k1CJ43Kw9To.roa (hash: JnRiMfd9nwg8jtq238kZzEHpNqXF/fwnpcdjfaQN5R0=)
21: _1agZbDchCwDGrkWbgBDrxVhKeg.roa (hash: Y7QBeAqE66w4+zXwDaoCJTaeXdMPw2WR9F/QcsrFnTE=)
22: _nvRHKvvb_mvanqFMM5V8lm8g8w.roa (hash: RruZ8RVSFy2mwh8xxZXhGWare/JM1CRcpYspOp1Cygk=)
23: fe6u7JDG48jgBf_DPc3asIDwrHA.roa (hash: CXlAGISmvgHV2CDP3YIRVXV9Y0SYEMiW/rQSbievzAc=)
24: gcp8JVoaSaFBYMR0Spw7tSBPycE.roa (hash: EXlX7JSGlYTO8jv6fQCuHBvUsxakUkqSBgk4IVvHb5I=)
25: gf12Uu8Akz7O6ocdD8ZlwFJTd4Q.roa (hash: PyCccM/pMp7WT5yknxMOUGo05NWlo29hqiredCgcI0I=)
26: hzFa5HcRt_SuJXTYDbBlnXBrlms.roa (hash: HYZRCL8yIsfCy/2+UYnMYcElAtbPqegy+2PrFnMr9pY=)
27: iiFfwSof-Ppnt5Jn1VyYe6ltGao.roa (hash: jReOXsdFrikOH9PjdRpSIjaDDshA4y4Yh1LFRBqkSi4=)
28: jFOOiVIJXUplo5sbQn459HQ3ZVg.roa (hash: leW7ID8jgMsQdyPHewYzl9kELPvtbc87rM05EgGaQW0=)
29: l60G9RtGQQ6DxTnY-7uGdBT18E0.roa (hash: 7f3s+Mq0G+/ok4ZNqNp75Xktxw69L98MKsHRcjmDKdA=)
30: m9zjHR2IwuP6M_EqtRtBLVSg0D4.roa (hash: yMwu/UQ3rPUyOJCc3eCtP2GKyWlV3Y6SloIA/fcgLfc=)
31: mYQPII2ilkK1oy0MlW-v6JAxGxk.roa (hash: tyuBwPs2VAbnEW0fWN1peF41+ky+lDL1B9PXSQMox8A=)
32: n56eK2wrfpQJh1WUgYk7UXNHpf8.roa (hash: QM9hkPMKejFTGopGuAo0TpNNNmH+bNsiSe7g4tXyQLg=)
33: nQiqXkgEvGy0Ub5bywiIxfiK-B8.roa (hash: Xvjwpfsbr0oWLkmoWen3GJer1ZgTzw4kmXxrwYKGkNo=)
34: oRGU4dD-wRnhsAeXFhYBTl3ahaY.roa (hash: KwxVldnlFQ7swrf5zJ4tkIkoluJnRIq49ZF/vvuzGEk=)
35: pexkcyVPSICPLZN0RiIg0ALWvjk.roa (hash: 0Kygrrr/4SdNr2ZBGUFGg1GzDhK7GU5H16nbpbesFjA=)
36: vnB0ZCvUzeI9LmFJIT8XX_aRpEY.roa (hash: PwD9rUXHKPRtFfN7AB48A4lXtdzXP/3YnqLj0nuj6qM=)
37: xa9xrZNhkrb1go6zH6OKw-38u0I.roa (hash: 3ps/xuw6rQo0GiTBuWC3tdYfVBGy86dcxldZD3sHZwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:1a:c6:57:ec:5c:60:8b:47:75:40:ac:1e:aa:36:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 29 10:00:41 2026 GMT
Not After : Oct 30 10:00:41 2026 GMT
Subject: CN=d80dbd2ad694cb6bfebb09153477a7a4369a7274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:ea:4f:28:aa:9a:e0:4d:ba:d7:1f:bb:97:
9b:48:3a:5d:4d:88:b3:0d:6d:45:d9:b2:2c:b4:1d:
6c:73:8b:30:8a:68:b2:de:74:fa:22:fa:f9:dc:56:
a4:5b:12:c9:f6:d2:82:93:fa:a2:0f:c3:3a:c8:29:
ff:45:9f:b2:69:0e:c3:02:b0:9c:32:86:25:51:7c:
bd:58:ce:35:b1:c7:d1:a3:8b:1d:77:43:1c:f3:19:
59:1b:3d:7e:29:09:79:1e:77:2f:eb:9e:94:0a:a5:
ec:b4:79:25:51:82:ae:73:b2:53:3e:66:fa:95:1b:
cc:28:20:22:c7:6c:d5:68:b6:4e:95:28:28:cc:2c:
89:7e:53:a7:06:e4:12:42:64:01:e8:f0:0a:8d:80:
7f:95:69:0d:ec:af:c7:c1:bd:cc:d4:7c:35:86:06:
4e:ab:39:af:a3:53:45:81:37:81:15:9d:39:89:55:
ea:d4:30:03:7b:33:67:ef:25:4b:e5:8a:90:a8:94:
ee:81:81:e8:4e:08:7d:d6:cb:db:51:16:57:b6:c7:
24:72:78:ac:1c:9a:92:ff:e6:ca:9d:80:71:68:3d:
e5:2a:83:dc:4d:a0:9f:94:3f:0c:b0:89:23:ce:51:
3d:0f:1f:31:65:bb:56:b7:2d:55:21:5f:13:48:a3:
8c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0D:BD:2A:D6:94:CB:6B:FE:BB:09:15:34:77:A7:A4:36:9A:72:74
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1f:77:c4:50:45:fd:84:b4:01:e1:a5:c4:28:41:fa:69:af:
0f:65:75:73:2f:14:b5:86:5d:08:8a:69:a0:35:6d:fc:ba:d6:
a2:0a:d9:f8:66:7d:d4:dd:35:02:50:21:bb:2e:2e:5d:25:08:
1c:eb:96:db:0d:9d:57:54:80:45:53:d3:b7:fb:76:21:97:39:
25:18:26:5f:e7:e9:6f:ae:64:fa:f8:82:e2:23:3b:0d:0f:88:
b5:40:ec:38:c7:96:97:7c:da:04:79:da:4d:b5:9f:58:a3:2b:
6e:5b:3e:c5:4e:a6:c7:33:30:d4:67:42:e2:fb:d6:aa:03:88:
25:8b:c2:68:d4:f0:fe:e8:d0:02:09:76:49:a4:67:1d:9c:50:
66:30:6d:47:a9:bb:83:97:27:1e:d4:58:a3:83:fa:41:f8:dc:
9c:e6:0b:4b:f3:fb:22:b9:11:19:24:8c:15:9b:ac:ac:16:5b:
08:e0:48:d0:47:ef:f9:be:a6:31:00:01:f8:cf:bc:fc:d1:3e:
d0:d0:89:77:73:a7:a7:4b:29:a2:f5:8b:54:64:7d:a7:a9:bc:
9c:70:37:9e:31:dd:9e:55:d5:55:f6:31:37:8d:57:bb:10:ae:
4e:b2:44:6c:8a:00:ab:ce:1d:9d:21:5e:24:63:05:af:ab:cb:
27:55:30:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGHGsZX7Fxgi0d1QKweqja1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjYxMDI5MTAwMDQxWhcNMjYxMDMwMTAwMDQxWjAzMTEwLwYDVQQD
EyhkODBkYmQyYWQ2OTRjYjZiZmViYjA5MTUzNDc3YTdhNDM2OWE3Mjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWrqTyiqmuBNutcfu5ebSDpdTYiz
DW1F2bIstB1sc4swimiy3nT6Ivr53FakWxLJ9tKCk/qiD8M6yCn/RZ+yaQ7DArCc
MoYlUXy9WM41scfRo4sdd0Mc8xlZGz1+KQl5Hncv656UCqXstHklUYKuc7JTPmb6
lRvMKCAix2zVaLZOlSgozCyJflOnBuQSQmQB6PAKjYB/lWkN7K/Hwb3M1Hw1hgZO
qzmvo1NFgTeBFZ05iVXq1DADezNn7yVL5YqQqJTugYHoTgh91svbURZXtsckcnis
HJqS/+bKnYBxaD3lKoPcTaCflD8MsIkjzlE9Dx8xZbtWty1VIV8TSKOMcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgNvSrWlMtr/rsJFTR3p6Q2mnJ0MB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuR93xFBF
/YS0AeGlxChB+mmvD2V1cy8UtYZdCIppoDVt/LrWogrZ+GZ91N01AlAhuy4uXSUI
HOuW2w2dV1SARVPTt/t2IZc5JRgmX+fpb65k+viC4iM7DQ+ItUDsOMeWl3zaBHna
TbWfWKMrbls+xU6mxzMw1GdC4vvWqgOIJYvCaNTw/ujQAgl2SaRnHZxQZjBtR6m7
g5cnHtRYo4P6QfjcnOYLS/P7IrkRGSSMFZusrBZbCOBI0Efv+b6mMQAB+M+8/NE+
0NCJd3Onp0spovWLVGR9p6m8nHA3njHdnlXVVfYxN41XuxCuTrJEbIoAq84dnSFe
JGMFr6vLJ1Uw0g==
-----END CERTIFICATE-----
Generated at Thu Oct 29 17:07:02 2026 by rpki-client