Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.mft
File: ffNCacFsPeOjQ42cg-jhnkeACUE.mft (raw, json)
Hash identifier: iN8e4e9TL0V4GQvIlIRsX9Zz+XvfSwMc0pwfoP5Xnas=
Subject key identifier: B1:E1:89:43:FA:76:94:47:2D:DF:90:D7:6F:26:18:A3:16:65:8D:02
Authority key identifier: 7D:F3:42:69:C1:6C:3D:E3:A3:43:8D:9C:83:E8:E1:9E:47:80:09:41
Certificate issuer: /CN=7df34269c16c3de3a3438d9c83e8e19e47800941
Certificate serial: 01A1024938C6A6D8B6164D0CDF5CA23062F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffNCacFsPeOjQ42cg-jhnkeACUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.mft
Manifest number: FF
Signing time: Sat 03 Oct 2026 15:01:55 +0000
Manifest this update: Sat 03 Oct 2026 15:01:55 +0000
Manifest next update: Sun 04 Oct 2026 15:01:55 +0000
Files and hashes: 1: ffNCacFsPeOjQ42cg-jhnkeACUE.crl (hash: YqsF53e1wHcZc8l8sGqIPjZXY01c/jXaHnd06vTzn7g=)
2: zpIhgfY5P1eLYLN8PYs34qx47Zw.roa (hash: yFovzfEIL2m5M2FK6tMYZvkFCHVcMoKHd18eXgobGqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffNCacFsPeOjQ42cg-jhnkeACUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:49:38:c6:a6:d8:b6:16:4d:0c:df:5c:a2:30:62:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df34269c16c3de3a3438d9c83e8e19e47800941
Validity
Not Before: Oct 3 15:01:55 2026 GMT
Not After : Oct 4 15:01:55 2026 GMT
Subject: CN=b1e18943fa7694472ddf90d76f2618a316658d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6b:8e:c2:2b:cc:cb:ca:d0:73:b8:ab:26:7e:
ca:3d:2b:88:10:d7:2d:b7:4f:8f:35:18:8a:9d:74:
90:59:b8:1b:d5:b3:01:7e:15:f4:8a:19:24:46:8f:
ba:71:3f:54:b8:19:1d:b0:a0:1e:75:6b:c1:85:11:
20:2e:e9:f8:f5:50:c5:2f:c6:e3:c4:c2:48:2b:bc:
6f:1e:03:13:fa:ef:ed:f2:d4:99:bd:ea:6a:a6:32:
f2:c7:33:c1:52:93:f0:7d:c5:f1:8a:9f:ed:1d:ba:
5a:04:fa:83:bf:34:7d:4d:78:a5:b8:dc:18:2b:e6:
52:67:eb:82:30:f0:9f:4f:69:bb:84:32:eb:fd:a2:
65:c0:d7:06:f3:e3:fb:b5:3f:37:b9:6f:7e:3b:2d:
a7:f7:9f:73:81:f6:d8:43:c8:d2:0d:c4:b9:5e:cd:
46:0e:ea:bb:45:ec:6e:a0:cf:35:95:0b:c7:24:e0:
dd:4f:9c:88:b4:8b:3f:22:28:1a:48:df:68:5f:9f:
34:b8:ba:e4:a9:af:0d:7e:ed:a4:99:6f:ec:97:ae:
9d:c9:04:ad:fe:15:44:f6:9b:04:f5:d9:3a:7a:fd:
3a:f9:13:57:b1:3f:76:59:76:e9:8f:33:ad:39:0a:
32:4b:eb:d5:63:00:7b:88:93:41:a0:a8:09:2d:95:
9d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E1:89:43:FA:76:94:47:2D:DF:90:D7:6F:26:18:A3:16:65:8D:02
X509v3 Authority Key Identifier:
keyid:7D:F3:42:69:C1:6C:3D:E3:A3:43:8D:9C:83:E8:E1:9E:47:80:09:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffNCacFsPeOjQ42cg-jhnkeACUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d4:39:d4:59:90:88:d9:fa:eb:4d:77:47:0a:6f:67:3b:bc:
96:2b:bc:6b:d9:5e:3b:93:37:d7:98:9b:cb:6f:4b:89:bc:2a:
18:5d:e3:2d:12:61:6e:b4:95:6a:73:f1:b6:99:3f:45:65:36:
80:7b:bb:86:40:8f:96:98:db:31:e7:3d:e9:6f:4a:73:ac:83:
2d:0b:29:b7:d4:d2:5e:f1:02:77:1f:25:f8:af:2d:06:a6:da:
c3:18:26:7f:b0:60:44:4c:b4:9a:45:4a:59:7a:01:1f:08:f8:
a7:80:17:59:84:6a:c9:ee:34:3e:6e:30:ca:59:53:dc:6e:5e:
c6:26:04:7e:ee:a9:5f:af:3f:ac:c9:58:97:eb:97:d3:d8:79:
93:31:e4:96:ce:2e:39:ee:fa:ef:c3:3e:68:40:11:13:de:38:
a2:c0:7c:21:e0:8a:34:5f:4b:be:0e:86:c8:a0:0a:b4:66:bc:
ca:d8:b9:50:3b:f7:be:2a:3a:aa:02:81:0a:27:68:71:b0:73:
75:34:0a:be:f2:c8:33:0e:b0:5c:20:4b:5a:28:14:a7:11:f6:
94:f7:08:4f:ca:e6:06:96:06:06:88:95:66:6a:92:b6:a2:51:
11:c4:6d:fc:be:7c:f5:7e:ff:d5:57:2d:00:55:36:31:d7:73:
e7:b9:46:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:50:26 2026 by rpki-client