Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: uk8D+4bjY2HAlnXcwXX0DVXTqY89zvWxr77KUuI9cns=
Subject key identifier: 7E:48:F3:2B:09:85:DB:4C:72:FD:34:5A:7D:AD:66:6D:2B:A9:B5:90
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 019FDEE35DDD5E07938546930E30DFDE40D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 19F0
Signing time: Sat 08 Aug 2026 01:01:10 +0000
Manifest this update: Sat 08 Aug 2026 01:01:10 +0000
Manifest next update: Sun 09 Aug 2026 01:01:10 +0000
Files and hashes: 1: Eo3L-3lPzBtGwSWfnMDXuxuu6nc.roa (hash: KayjLv1EKOAgncKf1kvYzIArRjjjosmZ3G86Nh3L73E=)
2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: paPaLGf9A9OwNLpQDEBEm6m95qrHcFE04HwFoGkjvYQ=)
3: PEiD2fXY8MTybS2F517gf0un5yo.roa (hash: QNquho6Cc22D4ZGcJ11pg3kLKNMl0b+Ez3eOGTC66KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 22:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:de:e3:5d:dd:5e:07:93:85:46:93:0e:30:df:de:40:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Aug 8 01:01:10 2026 GMT
Not After : Aug 9 01:01:10 2026 GMT
Subject: CN=7e48f32b0985db4c72fd345a7dad666d2ba9b590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f0:05:93:e8:ec:8c:33:88:2e:cd:0a:6d:80:
29:b9:96:fe:98:91:ed:72:0c:f3:84:b4:22:0c:17:
d7:60:b3:ec:42:e3:5e:7f:6c:1f:a5:73:a3:b9:7b:
71:e1:84:15:10:a2:8e:85:b4:58:bb:41:cc:d7:8d:
3a:81:a3:03:fc:db:31:70:e2:34:86:bd:ec:e9:2f:
4d:33:da:25:29:2e:8d:06:e0:03:ee:46:9a:fd:3b:
9d:09:4a:da:b4:db:1d:7b:03:32:4d:dc:ea:1a:9d:
ea:07:9d:2f:03:b8:cb:8f:16:8f:f9:91:7c:4d:b0:
07:83:2f:6a:fd:5a:eb:88:20:58:74:eb:23:a1:49:
13:bc:62:3f:63:30:23:87:83:53:b1:c4:a7:b0:09:
40:2c:95:ce:00:6a:84:4b:ad:f6:b6:aa:4c:2a:a2:
98:a2:3b:17:50:42:d4:13:b9:a7:8d:cf:80:48:5e:
97:e7:6a:35:c6:ab:fd:70:1c:80:83:3d:41:0e:5f:
99:48:a9:d1:ff:03:51:b0:d0:f6:9d:24:16:a6:bc:
88:3c:16:15:64:a9:7b:8b:43:1f:65:92:31:21:56:
36:68:b1:27:f3:e6:8f:c4:a3:17:14:20:89:30:82:
6d:5a:fd:8c:99:ae:ac:db:21:cb:07:b9:c8:4a:d5:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:48:F3:2B:09:85:DB:4C:72:FD:34:5A:7D:AD:66:6D:2B:A9:B5:90
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:25:1a:4c:25:dc:b2:e3:99:9d:75:ff:b2:4f:5a:c5:5c:a1:
31:1a:29:ee:cb:3a:87:fd:a5:4f:67:f0:03:9a:a4:ab:38:e9:
7c:d2:47:7d:8e:81:63:d0:44:8b:4d:46:e3:ef:b6:cc:71:77:
36:61:1c:5e:c0:ac:e5:d3:0c:3b:5b:a6:b2:35:aa:92:30:65:
de:be:fe:48:a5:48:e9:2a:cc:21:6b:47:af:49:e7:4c:60:a7:
65:54:d0:70:e1:b7:a8:9f:87:91:d8:e0:d2:eb:11:4a:f7:7e:
0f:6c:97:b8:33:f2:b1:dd:eb:7e:96:52:a4:aa:4e:8e:80:0a:
65:0c:e3:67:3d:1a:fb:68:80:2e:d2:38:17:24:81:86:b7:bc:
af:c8:a3:ee:e4:69:87:57:be:8d:42:ab:f6:44:74:37:e4:b2:
c2:5e:5f:a2:e2:88:99:41:15:99:41:09:29:31:1d:a5:5d:c1:
80:86:fc:14:98:cd:33:6a:6d:ae:84:d1:a6:7c:8a:81:14:f5:
c6:da:44:06:81:6c:12:d3:81:6e:21:b5:69:e0:55:6b:e4:9d:
ea:d0:16:52:72:87:ed:63:5d:74:2b:d1:ce:c5:8b:12:f9:06:
d1:37:1b:ab:26:bf:f9:c7:d0:a5:75:5a:c2:0b:b2:17:9f:80:
ea:ce:30:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/e413dXgeThUaTDjDf3kDYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Zjg4OWZlZDAwODVmYzIxYjA4ZmNiYmIyNTJjMzEwNmRm
OTlhYTgwHhcNMjYwODA4MDEwMTEwWhcNMjYwODA5MDEwMTEwWjAzMTEwLwYDVQQD
Eyg3ZTQ4ZjMyYjA5ODVkYjRjNzJmZDM0NWE3ZGFkNjY2ZDJiYTliNTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/AFk+jsjDOILs0KbYApuZb+mJHt
cgzzhLQiDBfXYLPsQuNef2wfpXOjuXtx4YQVEKKOhbRYu0HM1406gaMD/NsxcOI0
hr3s6S9NM9olKS6NBuAD7kaa/TudCUratNsdewMyTdzqGp3qB50vA7jLjxaP+ZF8
TbAHgy9q/VrriCBYdOsjoUkTvGI/YzAjh4NTscSnsAlALJXOAGqES632tqpMKqKY
ojsXUELUE7mnjc+ASF6X52o1xqv9cByAgz1BDl+ZSKnR/wNRsND2nSQWpryIPBYV
ZKl7i0MfZZIxIVY2aLEn8+aPxKMXFCCJMIJtWv2Mma6s2yHLB7nIStWCNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5I8ysJhdtMcv00Wn2tZm0rqbWQMB8GA1UdIwQY
MBaAFBX4if7QCF/CGwj8u7JSwxBt+ZqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYt
MWUzYTE5NTQ3OGUwLzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYtMWUzYTE5NTQ3OGUw
LzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyUaTCXc
suOZnXX/sk9axVyhMRop7ss6h/2lT2fwA5qkqzjpfNJHfY6BY9BEi01G4++2zHF3
NmEcXsCs5dMMO1umsjWqkjBl3r7+SKVI6SrMIWtHr0nnTGCnZVTQcOG3qJ+Hkdjg
0usRSvd+D2yXuDPysd3rfpZSpKpOjoAKZQzjZz0a+2iALtI4FySBhre8r8ij7uRp
h1e+jUKr9kR0N+Sywl5fouKImUEVmUEJKTEdpV3BgIb8FJjNM2ptroTRpnyKgRT1
xtpEBoFsEtOBbiG1aeBVa+Sd6tAWUnKH7WNddCvRzsWLEvkG0Tcbqya/+cfQpXVa
wguyF5+A6s4wDA==
-----END CERTIFICATE-----
Generated at Sat Aug 8 06:00:42 2026 by rpki-client