Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: PU4q6FB8+hy4RjJUW4knDSyab4XXmYbWyUrAFj0PQC4=
Subject key identifier: A3:B6:E4:DC:1F:63:8E:54:63:98:B6:4C:31:0F:91:75:84:60:02:16
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 019EF56D359814A8E3010A3E598CBF1B8E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 1977
Signing time: Tue 23 Jun 2026 17:00:35 +0000
Manifest this update: Tue 23 Jun 2026 17:00:35 +0000
Manifest next update: Wed 24 Jun 2026 17:00:35 +0000
Files and hashes: 1: Eo3L-3lPzBtGwSWfnMDXuxuu6nc.roa (hash: KayjLv1EKOAgncKf1kvYzIArRjjjosmZ3G86Nh3L73E=)
2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: rHxd95EYo0MCi7pMRUH0G/sklXLZDmll2eesU1JFIVM=)
3: uMgy9mSN4M6Tkk_b5KpTL6EISmU.roa (hash: iwm1H/C5w6/e24iulhDBPTWg/eHtZ2JKGfTV0V4+BsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 13:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f5:6d:35:98:14:a8:e3:01:0a:3e:59:8c:bf:1b:8e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Jun 23 17:00:35 2026 GMT
Not After : Jun 24 17:00:35 2026 GMT
Subject: CN=a3b6e4dc1f638e546398b64c310f917584600216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:13:fd:bb:57:ff:6a:d6:3c:aa:76:a9:45:
91:80:46:2f:a7:cd:67:75:5d:7d:87:be:25:cf:86:
8b:aa:ce:07:9b:74:0b:63:35:5e:97:21:f5:e0:12:
1e:ab:8a:1f:1f:d4:cf:39:a4:04:01:02:ca:85:66:
80:07:61:b1:19:40:cc:43:ea:66:1e:1a:4d:0d:bb:
24:fd:61:14:cb:a6:97:47:23:6d:13:89:19:3a:9a:
09:02:37:c1:cb:fb:fb:a1:fa:8a:f8:ca:8d:24:01:
4a:76:aa:91:3e:d9:22:2b:b4:a5:5d:98:a4:54:1f:
d3:7b:f4:b2:06:09:88:2c:a4:9f:a9:44:cc:be:d8:
26:77:27:db:45:0f:20:6f:f6:a8:d1:e7:88:15:ab:
70:c1:51:ef:1a:a2:f5:1b:96:76:65:1c:4e:2e:9c:
3b:ef:0a:5f:84:85:2a:c1:9b:af:b1:c5:8b:e5:15:
95:ba:ca:4b:ef:5c:57:d0:9c:7e:53:3b:db:19:88:
d1:eb:f7:62:2e:18:08:16:39:98:45:80:65:42:54:
78:6a:9d:00:9f:88:94:4e:9f:54:fc:65:fd:33:40:
48:72:b2:14:ac:f0:bf:ef:7b:f9:91:91:c1:e4:94:
87:8f:3a:ec:2c:0d:6a:9c:ee:7a:4f:ad:fa:5c:9d:
7b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B6:E4:DC:1F:63:8E:54:63:98:B6:4C:31:0F:91:75:84:60:02:16
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1f:93:53:78:6e:fe:c1:9c:12:d7:9a:10:66:c8:c1:f7:37:
1e:b9:7b:db:37:8c:5e:17:25:5e:dc:c9:b2:f4:0c:09:6c:50:
ae:5b:83:55:ec:ab:d7:d3:ad:e2:9b:17:d2:85:9a:ec:85:c6:
e8:6e:d2:9a:db:d4:77:d6:4e:94:58:8a:49:67:1e:2a:bb:65:
92:31:f3:0c:a1:23:f1:9c:a9:81:63:df:50:ec:7c:ee:a2:be:
83:a7:b0:f2:76:51:de:02:da:72:7e:fb:b3:90:71:03:2d:36:
6a:17:b4:5a:c4:cc:60:11:25:93:eb:fb:9c:88:3f:2d:ad:95:
1a:2d:32:c8:5a:25:f9:f0:8e:7d:6a:d2:3a:ed:9b:6f:79:36:
1b:9e:70:0e:86:dd:a7:d8:23:ea:4b:3c:30:ef:f8:39:e4:74:
a2:17:48:46:4a:d2:b4:59:c3:01:2f:b4:4c:90:20:64:60:98:
a7:8a:44:b1:c7:ee:33:82:2b:57:40:2e:30:6a:53:a5:94:2f:
78:c0:2b:b7:f8:ea:30:f5:4f:d9:6a:71:20:b2:32:40:27:92:
5a:4b:91:ca:8b:c5:74:83:e0:2f:6d:91:2f:3c:94:0a:9f:28:
31:1f:5e:54:48:e4:99:35:77:53:f4:8c:ed:29:8f:10:f3:60:
d9:60:e6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 19:21:33 2026 by rpki-client