Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: q87U+z1lfTu2vGUC1khcNr3ab22NQbK9/ITsehxsayE=
Subject key identifier: 56:3E:9F:AA:59:75:9B:67:4E:E3:88:A7:80:B0:87:27:05:E9:75:B8
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 019D2214B974A195A1EE7AA8424C67C9D89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 1885
Signing time: Tue 24 Mar 2026 23:01:16 +0000
Manifest this update: Tue 24 Mar 2026 23:01:16 +0000
Manifest next update: Wed 25 Mar 2026 23:01:16 +0000
Files and hashes: 1: Eo3L-3lPzBtGwSWfnMDXuxuu6nc.roa (hash: KayjLv1EKOAgncKf1kvYzIArRjjjosmZ3G86Nh3L73E=)
2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: xN1ggD5Oe9evYXLD8yIel7Ffgaw+7YkeAr0DA+UDb+w=)
3: uMgy9mSN4M6Tkk_b5KpTL6EISmU.roa (hash: iwm1H/C5w6/e24iulhDBPTWg/eHtZ2JKGfTV0V4+BsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 15:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:22:14:b9:74:a1:95:a1:ee:7a:a8:42:4c:67:c9:d8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Mar 24 23:01:16 2026 GMT
Not After : Mar 25 23:01:16 2026 GMT
Subject: CN=563e9faa59759b674ee388a780b0872705e975b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:4a:7c:92:cc:a9:88:4a:6a:97:06:3b:36:
49:c6:ea:e5:6f:b9:e5:3b:e8:45:3e:8f:4c:a6:21:
0c:fe:7f:c7:79:1e:83:d2:27:ea:bf:af:96:80:ca:
8d:eb:41:17:14:f9:98:f9:65:b9:1c:f3:d1:9b:e7:
02:83:12:6c:25:86:0d:8b:1e:b1:07:39:69:0f:61:
4c:5d:37:b6:5d:5f:41:37:1d:84:62:77:5a:bf:01:
bc:05:b0:62:f0:0c:dc:d7:a6:07:8a:c0:75:32:7e:
1a:c0:a3:0c:b0:df:af:74:e0:58:c2:39:3d:95:1e:
a4:44:6a:06:ad:aa:c3:a7:e2:fd:d4:9f:dc:0d:02:
cb:5c:ee:8a:b3:49:fb:2c:0b:22:f9:99:a7:b8:7e:
17:a8:58:a4:e9:8f:3a:64:38:dc:c3:41:ac:93:b9:
63:2a:6b:85:2c:08:8c:ad:80:6a:3b:54:10:66:ed:
9d:22:7d:cd:b9:84:75:1f:b8:6f:76:49:1e:74:30:
44:8b:40:b5:4e:5c:f9:85:01:7f:5c:98:1e:0d:5e:
ea:6b:78:3b:e0:d3:05:c1:42:d4:d8:f7:aa:60:5d:
63:96:9e:31:e1:06:7a:6e:82:04:3b:b6:50:bc:9c:
3f:c9:f5:2f:fd:6a:a3:27:cd:06:04:5a:1e:f5:2a:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3E:9F:AA:59:75:9B:67:4E:E3:88:A7:80:B0:87:27:05:E9:75:B8
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:bf:76:42:b5:5c:82:90:fb:1a:b8:29:f2:85:4f:7f:4e:cb:
0b:04:e3:80:78:d8:03:39:fe:51:32:33:74:ea:97:2f:e0:e5:
5d:90:51:77:50:d0:09:13:69:7d:3a:a0:d4:ff:9c:b2:1f:f3:
11:41:d0:3b:dd:83:7e:ab:ff:47:8a:c3:ac:27:33:58:22:fe:
af:c8:71:47:6e:dd:71:b7:27:07:3c:b4:41:3e:d5:72:8f:17:
9b:63:7b:b2:8f:5a:8d:10:48:f2:b1:d0:10:97:61:96:7f:00:
a2:a7:86:38:82:81:4a:a1:2f:75:e8:7e:af:6d:29:bf:93:09:
1a:4f:5d:14:7d:20:d3:88:0d:25:24:26:f4:36:58:fd:36:8b:
83:df:cf:c8:aa:56:30:16:62:b0:b2:6c:90:b7:0e:78:9a:f1:
6d:13:f2:90:45:6c:79:83:50:ec:ba:ba:8d:a8:60:5b:8f:04:
de:2c:0e:d9:cf:c3:51:51:fb:f3:28:66:18:b6:97:3c:a2:04:
a4:62:d3:f3:d0:3b:74:47:da:f8:7f:30:d5:a8:d6:7a:0c:2d:
67:12:84:3a:ca:e2:18:e2:ba:3c:3e:a5:c4:22:0e:3e:f2:45:
6e:be:7f:29:54:8b:81:fb:43:45:0e:e5:24:28:dd:6a:ff:33:
b3:9a:04:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 02:32:35 2026 by rpki-client