Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
File: ffCJfqs-7W4k7d1nbov5N3-0SAw.mft (raw, json)
Hash identifier: ys7JQ/ax6pVwxsxmzCm07sAt6ANoJDaZp2jjowwjlT0=
Subject key identifier: 2B:91:F2:14:C8:CB:53:70:4C:57:E8:F9:3B:A4:9F:5A:63:79:10:F6
Authority key identifier: 7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
Certificate issuer: /CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Certificate serial: 019FA29751FEB1D93A3740008351B7D33014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
Manifest number: 0ABE
Signing time: Mon 27 Jul 2026 08:00:53 +0000
Manifest this update: Mon 27 Jul 2026 08:00:53 +0000
Manifest next update: Tue 28 Jul 2026 08:00:53 +0000
Files and hashes: 1: ffCJfqs-7W4k7d1nbov5N3-0SAw.crl (hash: 9d9s/W0tlboi/nJNDdwWR2wu+8LZFq7W0zcdAcjA9nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:51:fe:b1:d9:3a:37:40:00:83:51:b7:d3:30:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Validity
Not Before: Jul 27 08:00:53 2026 GMT
Not After : Jul 28 08:00:53 2026 GMT
Subject: CN=2b91f214c8cb53704c57e8f93ba49f5a637910f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d9:62:8a:00:c1:09:8a:42:bd:60:df:f8:ad:
8a:9e:8f:53:9a:f9:50:fa:fb:6f:72:5a:56:18:e4:
50:84:51:2f:57:6e:e7:d4:b3:38:a6:83:9c:d4:80:
c3:5f:90:0f:3e:6d:7c:ee:88:7d:75:9f:56:24:53:
01:03:e9:ec:6e:20:f5:22:97:84:75:51:d3:44:34:
9d:e6:53:c7:e4:ba:f7:fe:7c:99:27:7b:02:b5:03:
0d:4d:19:b9:01:d0:27:95:d8:38:81:d7:cc:89:8b:
27:6b:b6:97:69:da:ad:b5:63:3f:d0:5d:10:f6:a0:
54:b7:d2:9a:3f:63:49:a8:ab:b0:04:51:9c:c7:04:
85:93:80:d8:d9:40:cc:3a:bd:d7:fb:f9:18:32:3b:
d2:1c:d6:ee:1e:90:fc:7a:8a:fe:cf:f5:0d:7f:be:
4a:36:bb:53:47:02:be:a4:2e:31:e1:c8:6c:fd:8f:
87:56:0e:60:6e:3b:48:75:cf:e1:c4:f3:49:88:6a:
27:ca:14:bb:84:75:1d:85:3e:61:23:aa:c0:fb:fb:
c0:60:6f:3c:fd:ca:ed:71:de:ff:56:db:b1:66:78:
a8:e6:1f:1a:ef:ad:7a:41:27:0c:e9:da:a2:1f:81:
48:a3:0a:45:39:3f:9f:e8:ee:8a:d9:21:50:21:e3:
a7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:91:F2:14:C8:CB:53:70:4C:57:E8:F9:3B:A4:9F:5A:63:79:10:F6
X509v3 Authority Key Identifier:
keyid:7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c5:05:4c:c3:45:1b:ff:b7:18:4e:c2:76:7d:5d:af:e1:c8:
97:4f:d9:56:ad:cb:7f:d2:23:0e:b4:06:94:0e:44:43:e0:8c:
a1:4e:c9:b3:f1:9d:ea:f2:98:ba:ad:94:44:fd:91:0e:52:1b:
25:65:92:be:9f:80:68:4a:57:34:fe:c0:88:13:f4:3c:45:92:
3a:85:63:63:c8:7f:44:04:16:d9:84:67:11:d3:ff:22:dc:af:
49:a9:e5:0d:ff:94:f8:81:c9:78:39:3a:9c:45:6f:f4:50:3e:
8d:e7:fb:4c:f1:48:7e:7c:82:a4:a6:e3:4b:d2:5e:d9:0b:bb:
44:84:87:de:c8:83:f8:a0:d9:28:65:de:f0:c2:50:2d:7b:e6:
19:58:a6:32:59:2a:b3:8f:df:30:4a:06:07:0e:28:a8:9e:da:
38:0c:de:7e:79:c1:b1:74:36:92:88:3d:55:da:11:aa:8a:4b:
85:79:bb:95:98:1e:fa:2f:38:8f:a7:5c:9f:ec:0f:e4:e0:19:
18:60:ef:5d:cd:d7:3d:fa:52:cb:07:f8:d0:a5:a6:d1:73:0e:
ff:3e:49:7b:9f:09:33:af:7a:54:c6:6a:52:cd:ca:26:7c:45:
19:b1:74:d9:da:23:3f:e4:b6:b9:35:d4:41:4f:b9:51:df:35:
ae:ab:0b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:12:28 2026 by rpki-client