Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
File: FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft (raw, json)
Hash identifier: VBeWJnGewY5Rukez3SuXt1VHjXRL5hTAHRIlTWZii9g=
Subject key identifier: C0:6F:DF:1F:87:36:77:74:72:52:85:5A:2E:06:F9:A0:19:83:37:87
Authority key identifier: 15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
Certificate issuer: /CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Certificate serial: 01A08A55D945A7C8CD7AF0E15BE179FE7BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
Manifest number: 12CD
Signing time: Thu 10 Sep 2026 08:01:16 +0000
Manifest this update: Thu 10 Sep 2026 08:01:16 +0000
Manifest next update: Fri 11 Sep 2026 08:01:16 +0000
Files and hashes: 1: 5xVQ4m-jQtcrOWJL2PGZ4M2MWSg.roa (hash: NrK0lUpUnRZszXt8HfAhRL5oVLBur1dwn9mTYD7ns44=)
2: FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl (hash: 2GIdN6M+KIE5IRudR/JTuud5RbA/43lfUK31R8Jmatw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:d9:45:a7:c8:cd:7a:f0:e1:5b:e1:79:fe:7b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Validity
Not Before: Sep 10 08:01:16 2026 GMT
Not After : Sep 11 08:01:16 2026 GMT
Subject: CN=c06fdf1f873677747252855a2e06f9a019833787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b1:66:38:b5:d7:d5:64:70:11:58:ce:ee:b5:
62:ba:31:f1:e9:3d:e7:62:ff:75:b3:e6:38:58:17:
c3:a6:a9:dc:d9:56:e6:cc:38:d4:d3:d8:da:c9:22:
f4:58:6c:39:e1:df:98:9a:ef:42:6e:31:0d:c9:d7:
66:a9:a3:26:19:26:57:a9:c1:d2:b1:ea:e6:ba:59:
38:1a:46:10:c2:49:1b:a3:60:19:7e:67:15:18:22:
be:ea:9a:e3:c5:f3:bf:cc:1f:1a:ae:b9:1f:f1:cd:
a8:b5:da:06:ff:10:e5:d7:da:95:e1:fa:28:44:5c:
cf:19:db:c4:5d:28:d0:cd:9b:0f:07:a6:3e:5f:78:
93:77:15:d6:55:42:8f:cc:b1:17:ce:96:ce:f6:41:
b9:cb:5b:6d:de:62:4a:53:3f:8b:d7:fe:75:c0:21:
e8:43:81:de:b6:26:73:cc:0e:d6:da:6d:3e:ca:0c:
28:ad:43:c2:77:8a:45:b1:1a:ca:30:0c:3b:aa:91:
e7:d6:d3:11:df:95:7d:d0:74:af:7c:2e:b4:e7:ba:
e0:61:78:4e:b5:3f:4e:b5:a3:fd:3f:2a:31:76:b7:
21:15:8c:18:c0:f4:b2:9c:43:cb:87:bf:83:31:95:
89:e7:4b:be:0b:2e:e6:e2:d5:02:8c:72:63:29:d8:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6F:DF:1F:87:36:77:74:72:52:85:5A:2E:06:F9:A0:19:83:37:87
X509v3 Authority Key Identifier:
keyid:15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:74:4d:26:ea:b6:24:f5:b9:17:e4:e7:79:e6:8b:1b:01:4a:
f1:c1:55:e9:2b:90:b2:45:2b:b5:1d:45:76:6e:6f:08:74:c8:
d4:25:ce:48:07:99:89:2a:1a:0f:3f:00:66:7f:e6:4e:2c:48:
f4:25:99:33:ca:ee:4f:d4:73:e8:7d:1d:f4:e1:fb:fe:d8:e8:
b4:71:29:3c:30:fd:d7:df:32:88:dc:ce:11:b4:4a:56:23:7d:
45:ff:21:aa:31:ca:0c:55:ed:9b:1a:b0:eb:1c:ec:f1:b8:5e:
39:5a:5d:b9:82:75:b2:15:ae:96:32:f0:fb:aa:e8:19:38:d4:
1c:f6:c2:10:0e:5d:16:f6:c1:12:47:b3:68:cf:ad:4a:00:09:
cf:f4:4b:5c:08:76:f4:65:53:0f:92:12:32:5f:37:70:3e:75:
0a:03:5c:99:87:46:13:d9:b8:36:a0:88:de:ae:75:3f:f1:d5:
69:e2:87:ab:8e:d4:b3:e0:55:7c:e8:4b:cf:f7:4e:62:3d:17:
db:ea:97:1b:16:50:8a:e2:7d:76:8f:90:1d:c9:50:26:70:88:
b2:ad:93:a2:d8:c8:ce:45:0b:18:0f:10:8c:3c:e5:3e:e2:bf:
c9:58:3a:8e:c0:34:ae:a4:d8:e5:5a:fe:08:94:1b:77:ee:58:
ff:47:be:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:57:46 2026 by rpki-client