Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
File: FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft (raw, json)
Hash identifier: N1b75vQJw+J1c1CZQdaoKxQ9CR+IDxSLIWVdwgaOFhc=
Subject key identifier: A9:F2:C9:6D:2F:E7:D0:58:76:2D:64:F3:09:EF:74:74:2C:46:DE:4A
Authority key identifier: 15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
Certificate issuer: /CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Certificate serial: 019FA296C110B45A8648C9BD36490185A69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
Manifest number: 1255
Signing time: Mon 27 Jul 2026 08:00:16 +0000
Manifest this update: Mon 27 Jul 2026 08:00:16 +0000
Manifest next update: Tue 28 Jul 2026 08:00:16 +0000
Files and hashes: 1: 5xVQ4m-jQtcrOWJL2PGZ4M2MWSg.roa (hash: NrK0lUpUnRZszXt8HfAhRL5oVLBur1dwn9mTYD7ns44=)
2: FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl (hash: YA5x17j5fvHGNhkpapEu3A4FZbry9zAXWdiZovOAWX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:96:c1:10:b4:5a:86:48:c9:bd:36:49:01:85:a6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Validity
Not Before: Jul 27 08:00:16 2026 GMT
Not After : Jul 28 08:00:16 2026 GMT
Subject: CN=a9f2c96d2fe7d058762d64f309ef74742c46de4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:a0:cb:0d:ad:55:08:71:9a:af:f6:82:2d:
4e:a8:f2:04:d3:04:8a:96:71:6d:f8:4c:ee:8b:6d:
b7:d3:0a:fa:73:88:89:05:f5:e7:fb:cb:c5:1c:c4:
f8:ed:31:95:69:27:69:ae:2c:ba:45:b3:d7:5a:cb:
b7:5b:5c:f1:7a:65:13:53:61:64:1b:88:c4:1a:93:
c7:2d:ba:ad:69:84:cb:13:6f:5f:ef:ba:2a:b0:63:
0a:48:99:bc:ab:e8:7e:17:38:b9:c8:8a:d3:86:c3:
e4:21:f6:e1:ed:26:85:c6:5c:b5:09:19:90:c8:b2:
59:4f:b3:fa:d0:c4:2d:c2:cf:0e:69:48:19:ce:be:
a6:7f:56:5f:55:cf:70:a4:f0:18:5d:c0:9e:4d:6e:
71:79:aa:14:41:77:54:4d:73:89:8c:a5:99:ca:91:
45:09:d9:05:60:cf:e6:12:b9:90:7e:db:0c:39:ce:
dd:33:bb:fc:db:96:cd:e3:c1:50:89:26:b4:6a:65:
61:7a:06:5c:cf:88:99:9c:7d:31:1a:fb:6e:92:8c:
9d:8e:0e:06:52:ed:cc:21:b3:1f:dc:72:46:30:6e:
3f:cf:eb:25:33:22:55:32:0a:98:a4:42:04:a8:47:
0a:59:6d:68:74:f0:05:59:c9:7d:bd:b1:41:28:64:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F2:C9:6D:2F:E7:D0:58:76:2D:64:F3:09:EF:74:74:2C:46:DE:4A
X509v3 Authority Key Identifier:
keyid:15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:96:91:60:64:27:5a:2b:a0:b1:53:1a:5b:c8:29:b2:0a:4c:
48:54:3f:bb:d4:dd:de:46:0e:2d:b2:a2:ad:2a:99:2b:be:cb:
11:17:c2:3c:43:6c:59:84:81:f1:14:f8:a2:4b:9a:c3:90:d6:
4c:6b:73:ed:a3:bd:25:c0:ce:02:25:70:43:e2:e9:db:cc:69:
81:5b:b7:f7:02:2b:09:b3:5e:ff:7e:7a:bf:7e:49:ff:ee:9a:
ea:0a:a8:85:32:7a:96:49:6e:53:08:fc:ae:c4:9a:52:45:3d:
40:d2:d0:cc:b3:45:f5:b5:43:6d:e5:16:2e:cb:76:49:3a:5b:
0f:88:e4:f6:1f:7e:51:e4:a3:8d:76:21:3a:d5:2a:07:50:d9:
9d:03:85:72:1a:d3:92:b9:a8:69:da:92:d9:a6:51:37:81:20:
f5:f8:35:ae:0c:38:f6:6a:02:86:98:d7:2d:c5:71:3f:c8:bb:
fe:23:03:5b:c2:03:03:d8:e4:0c:10:f3:63:18:eb:2d:42:e6:
cd:77:f0:e8:69:b1:03:dd:c7:f0:91:fe:e6:71:27:2f:c9:49:
7e:67:d4:b6:c1:f2:e6:29:40:42:3e:24:22:37:d8:14:b5:3d:
e2:4f:be:91:e6:fc:01:73:a4:ae:74:d7:e9:93:e0:80:b7:c8:
1e:71:88:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ilsEQtFqGSMm9NkkBhaabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjIxNWFkMjc0ZjM1YjI0YWM2YTA2MGIyZjA5Mzk5NzEx
YmMxN2YwHhcNMjYwNzI3MDgwMDE2WhcNMjYwNzI4MDgwMDE2WjAzMTEwLwYDVQQD
EyhhOWYyYzk2ZDJmZTdkMDU4NzYyZDY0ZjMwOWVmNzQ3NDJjNDZkZTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6agyw2tVQhxmq/2gi1OqPIE0wSK
lnFt+Ezui2230wr6c4iJBfXn+8vFHMT47TGVaSdpriy6RbPXWsu3W1zxemUTU2Fk
G4jEGpPHLbqtaYTLE29f77oqsGMKSJm8q+h+Fzi5yIrThsPkIfbh7SaFxly1CRmQ
yLJZT7P60MQtws8OaUgZzr6mf1ZfVc9wpPAYXcCeTW5xeaoUQXdUTXOJjKWZypFF
CdkFYM/mErmQftsMOc7dM7v825bN48FQiSa0amVhegZcz4iZnH0xGvtukoydjg4G
Uu3MIbMf3HJGMG4/z+slMyJVMgqYpEIEqEcKWW1odPAFWcl9vbFBKGQk/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnyyW0v59BYdi1k8wnvdHQsRt5KMB8GA1UdIwQY
MBaAFBXyFa0nTzWySsagYLLwk5lxG8F/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZJVnJTZFBOYkpLeHFCZ3N2Q1RtWEVid1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS85M2UyMGYtODg3OC00MDU4LThlMDEt
YWQwMWUzMGE2MWIyLzEvRmZJVnJTZFBOYkpLeHFCZ3N2Q1RtWEVid1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS85M2UyMGYtODg3OC00MDU4LThlMDEtYWQwMWUzMGE2MWIy
LzEvRmZJVnJTZFBOYkpLeHFCZ3N2Q1RtWEVid1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspaRYGQn
WiugsVMaW8gpsgpMSFQ/u9Td3kYOLbKirSqZK77LERfCPENsWYSB8RT4okuaw5DW
TGtz7aO9JcDOAiVwQ+Lp28xpgVu39wIrCbNe/356v35J/+6a6gqohTJ6lkluUwj8
rsSaUkU9QNLQzLNF9bVDbeUWLst2STpbD4jk9h9+UeSjjXYhOtUqB1DZnQOFchrT
krmoadqS2aZRN4Eg9fg1rgw49moChpjXLcVxP8i7/iMDW8IDA9jkDBDzYxjrLULm
zXfw6GmxA93H8JH+5nEnL8lJfmfUtsHy5ilAQj4kIjfYFLU94k++keb8AXOkrnTX
6ZPggLfIHnGIQA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:40:18 2026 by rpki-client