Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.mft
File: ffNCacFsPeOjQ42cg-jhnkeACUE.mft (raw, json)
Hash identifier: TcbwF+BR6YHtboaiGuU5eWPkec0HH4ge+IEEjleDUyI=
Subject key identifier: 2C:69:10:67:94:2F:C9:37:B4:13:67:2B:EC:FF:6E:45:57:05:D2:48
Authority key identifier: 7D:F3:42:69:C1:6C:3D:E3:A3:43:8D:9C:83:E8:E1:9E:47:80:09:41
Certificate issuer: /CN=7df34269c16c3de3a3438d9c83e8e19e47800941
Certificate serial: 01A0016F4AB558FCC2B9FB0A7A1505EBA7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffNCacFsPeOjQ42cg-jhnkeACUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.mft
Manifest number: 7A
Signing time: Fri 14 Aug 2026 18:01:05 +0000
Manifest this update: Fri 14 Aug 2026 18:01:05 +0000
Manifest next update: Sat 15 Aug 2026 18:01:05 +0000
Files and hashes: 1: ffNCacFsPeOjQ42cg-jhnkeACUE.crl (hash: 2KQTI92eohxhGOZP/+apQrvFkIQUpy8Ep+osSMBVeXE=)
2: zpIhgfY5P1eLYLN8PYs34qx47Zw.roa (hash: yFovzfEIL2m5M2FK6tMYZvkFCHVcMoKHd18eXgobGqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffNCacFsPeOjQ42cg-jhnkeACUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:4a:b5:58:fc:c2:b9:fb:0a:7a:15:05:eb:a7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df34269c16c3de3a3438d9c83e8e19e47800941
Validity
Not Before: Aug 14 18:01:05 2026 GMT
Not After : Aug 15 18:01:05 2026 GMT
Subject: CN=2c691067942fc937b413672becff6e455705d248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:00:f5:db:e4:f4:5b:de:3a:b7:fe:c4:f6:73:
29:82:9a:64:25:d4:21:07:37:a0:b5:c3:a2:bd:2c:
e7:e5:f0:fb:9d:bf:9e:79:ed:4f:8a:16:ba:e1:78:
a0:c1:2d:8e:90:da:fb:91:d3:69:86:cf:3d:dc:e9:
41:b1:c3:52:24:94:f2:2d:e3:50:66:12:0a:e3:8b:
0e:2b:30:3b:bd:1a:77:1d:35:ac:7d:21:6f:40:73:
59:31:4b:6b:52:05:17:f7:f9:1e:73:c3:d1:08:b4:
80:18:21:b8:2e:6c:95:52:c3:9e:69:a8:a1:c8:0f:
9c:bc:e7:af:41:2b:8b:60:71:d2:67:59:e2:a4:ec:
7a:ef:eb:a2:61:77:05:f7:bc:34:4d:c3:58:fe:2e:
31:cb:1f:53:71:05:51:7e:44:9d:b5:9b:8f:00:25:
5d:de:dd:00:40:dd:61:dd:18:2e:5f:21:e0:37:b5:
be:cc:eb:67:03:fa:d7:23:ec:81:e7:7e:4c:cc:4d:
c8:ed:a4:55:04:61:ca:6a:8d:eb:7c:34:50:64:1b:
f2:20:03:07:b6:03:e9:d5:d1:5c:61:c6:0e:8f:eb:
a6:f4:72:45:c2:4e:79:ca:de:8c:38:c9:5a:4c:21:
68:eb:3e:cf:a3:66:7e:5a:f0:e4:39:8a:03:5c:62:
ea:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:69:10:67:94:2F:C9:37:B4:13:67:2B:EC:FF:6E:45:57:05:D2:48
X509v3 Authority Key Identifier:
keyid:7D:F3:42:69:C1:6C:3D:E3:A3:43:8D:9C:83:E8:E1:9E:47:80:09:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffNCacFsPeOjQ42cg-jhnkeACUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c5:73:dd:41:c4:8e:ab:a7:89:d0:c9:26:63:77:72:f0:33:
18:3d:3d:14:d2:94:64:ce:19:8f:e4:ea:3e:5b:4f:18:7d:75:
2a:4d:b1:13:d9:7b:5a:ce:85:1f:28:44:23:e9:62:56:61:5c:
d1:37:a6:94:8c:a2:c4:c0:8f:8f:10:cc:39:6c:cc:71:c1:67:
5e:7e:b4:c4:d4:34:30:8e:ab:e7:88:3a:d4:a5:6d:91:f8:2d:
1c:0a:e7:f7:f0:f1:fd:28:0e:d7:84:20:a0:a3:a9:a7:ac:12:
9a:b0:2c:75:68:59:20:bc:32:81:54:82:eb:9a:4f:39:05:01:
62:60:3f:fc:8d:d2:f9:3f:8c:2f:bf:94:89:6d:40:50:55:1e:
7a:b5:e3:bd:cd:fc:1e:a2:f9:38:26:88:29:38:32:ff:a3:2b:
e5:b1:7d:be:50:db:26:de:76:bc:78:54:3a:2c:46:4e:59:1b:
8f:50:da:5b:09:ce:49:da:46:d1:4b:6d:b7:d2:95:ef:69:7e:
e5:36:e0:00:f5:6a:34:84:b2:8b:7e:4d:87:66:63:38:c9:b6:
a1:d8:a4:43:6a:4e:24:86:85:85:be:f2:b0:af:2d:f1:e2:6d:
5c:37:36:64:dd:c6:aa:f5:70:c4:5f:71:46:61:f6:92:d1:6e:
16:91:57:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:11:59 2026 by rpki-client