Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: XFtmU4rbxk8mhB9/d/kZ7CD3cXRHRA0mR2DnFrsLEx4=
Subject key identifier: BC:A9:A4:05:5E:77:6C:26:58:28:A4:0D:AC:90:21:B0:20:EE:46:D1
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 01A134B5AF0BB35897D3AFF6C43E246933A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 1AA1
Signing time: Tue 13 Oct 2026 10:01:24 +0000
Manifest this update: Tue 13 Oct 2026 10:01:24 +0000
Manifest next update: Wed 14 Oct 2026 10:01:24 +0000
Files and hashes: 1: Eo3L-3lPzBtGwSWfnMDXuxuu6nc.roa (hash: KayjLv1EKOAgncKf1kvYzIArRjjjosmZ3G86Nh3L73E=)
2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: UDDKHDw6bUMOJeB20GGX616cGQ80xC2asR5zLlWDB60=)
3: PEiD2fXY8MTybS2F517gf0un5yo.roa (hash: QNquho6Cc22D4ZGcJ11pg3kLKNMl0b+Ez3eOGTC66KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:b5:af:0b:b3:58:97:d3:af:f6:c4:3e:24:69:33:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Oct 13 10:01:24 2026 GMT
Not After : Oct 14 10:01:24 2026 GMT
Subject: CN=bca9a4055e776c265828a40dac9021b020ee46d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:54:ba:5d:80:e0:f7:09:e0:07:2e:e7:75:
b7:fc:b1:a6:99:d2:4d:97:ab:68:39:b6:3a:24:32:
8c:ed:46:e8:6a:61:4d:ca:eb:54:62:00:c0:cd:31:
2a:0d:8e:1b:ab:30:08:21:da:5c:aa:f0:f5:c9:8d:
c7:08:cc:d7:7e:4a:56:2c:0a:28:fa:14:c3:33:3c:
10:37:e2:b7:20:a6:ee:9b:b6:73:4c:55:55:11:6a:
23:9f:bf:25:7a:ee:7b:1b:a4:e2:ed:91:2e:45:11:
b8:b2:23:38:ae:5d:6c:b2:73:18:d1:06:54:ef:45:
70:c7:96:95:ff:af:6f:83:ca:3e:23:20:d5:5f:d9:
b4:44:b2:25:ee:20:81:a4:1c:b4:04:0b:ec:63:8e:
52:b6:99:4d:44:73:d9:b5:d5:28:0e:ac:a1:c8:a5:
d2:72:5e:da:c3:5c:49:82:36:bc:de:04:fd:6d:b6:
ef:f4:89:5e:1f:74:2e:eb:31:01:ae:61:df:f7:21:
91:87:52:94:81:c0:ce:a6:8f:ce:56:bc:32:5f:9e:
ba:64:f3:35:a2:e6:1c:c3:a4:f3:61:ac:f2:e3:0c:
c5:2c:1f:54:7f:c3:52:dc:8b:cf:08:37:78:0a:19:
f3:c8:8b:de:4a:a3:b7:56:26:16:d2:a0:91:23:26:
d0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A9:A4:05:5E:77:6C:26:58:28:A4:0D:AC:90:21:B0:20:EE:46:D1
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0d:a6:ac:dd:fd:8b:b6:48:31:73:79:21:64:b4:ce:b8:6a:
01:dd:63:bd:9b:1e:06:bf:47:32:86:c2:42:68:35:7f:12:6c:
3c:04:84:ed:fa:c8:ae:2b:bf:60:1b:50:26:b3:ce:23:90:c6:
0f:a9:d7:20:12:99:48:42:51:db:1c:c1:5f:21:1f:39:f1:5a:
b2:ff:db:fb:2d:da:00:10:10:4d:b6:7e:eb:74:70:57:da:67:
56:78:41:b7:6f:cb:c2:72:59:f2:ca:05:f8:89:95:1c:c7:6f:
bc:cb:d5:41:d8:8a:c7:57:50:3a:b4:7d:5b:75:cd:04:95:8d:
84:be:6c:a0:5b:b1:b1:2d:7b:eb:86:3a:d0:97:03:1a:63:6e:
f6:56:7f:87:04:19:87:f6:e4:f0:b9:2b:b6:4e:cf:69:5c:9f:
77:d7:60:86:22:67:ca:72:a2:d3:27:dc:ba:75:da:e0:9a:54:
7e:4b:d0:4a:f3:ef:43:f1:23:09:d5:01:dd:69:de:af:d1:43:
4c:95:17:16:0e:4a:a1:7a:b8:88:de:26:f6:b0:7f:ce:ba:ae:
7a:80:60:61:5f:5c:7a:ae:21:f9:99:f8:5c:4a:32:eb:88:c8:
b4:dd:33:bf:52:bd:99:80:9f:2b:34:52:25:13:7f:c5:32:32:
07:c1:4c:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE0ta8Ls1iX06/2xD4kaTOgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Zjg4OWZlZDAwODVmYzIxYjA4ZmNiYmIyNTJjMzEwNmRm
OTlhYTgwHhcNMjYxMDEzMTAwMTI0WhcNMjYxMDE0MTAwMTI0WjAzMTEwLwYDVQQD
EyhiY2E5YTQwNTVlNzc2YzI2NTgyOGE0MGRhYzkwMjFiMDIwZWU0NmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9dUul2A4PcJ4Acu53W3/LGmmdJN
l6toObY6JDKM7UboamFNyutUYgDAzTEqDY4bqzAIIdpcqvD1yY3HCMzXfkpWLAoo
+hTDMzwQN+K3IKbum7ZzTFVVEWojn78leu57G6Ti7ZEuRRG4siM4rl1ssnMY0QZU
70Vwx5aV/69vg8o+IyDVX9m0RLIl7iCBpBy0BAvsY45StplNRHPZtdUoDqyhyKXS
cl7aw1xJgja83gT9bbbv9IleH3Qu6zEBrmHf9yGRh1KUgcDOpo/OVrwyX566ZPM1
ouYcw6TzYazy4wzFLB9Uf8NS3IvPCDd4ChnzyIveSqO3ViYW0qCRIybQeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyppAVed2wmWCikDayQIbAg7kbRMB8GA1UdIwQY
MBaAFBX4if7QCF/CGwj8u7JSwxBt+ZqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYt
MWUzYTE5NTQ3OGUwLzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYtMWUzYTE5NTQ3OGUw
LzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANw2mrN39
i7ZIMXN5IWS0zrhqAd1jvZseBr9HMobCQmg1fxJsPASE7frIriu/YBtQJrPOI5DG
D6nXIBKZSEJR2xzBXyEfOfFasv/b+y3aABAQTbZ+63RwV9pnVnhBt2/LwnJZ8soF
+ImVHMdvvMvVQdiKx1dQOrR9W3XNBJWNhL5soFuxsS1764Y60JcDGmNu9lZ/hwQZ
h/bk8Lkrtk7PaVyfd9dghiJnynKi0yfcunXa4JpUfkvQSvPvQ/EjCdUB3Wner9FD
TJUXFg5KoXq4iN4m9rB/zrqueoBgYV9ceq4h+Zn4XEoy64jItN0zv1K9mYCfKzRS
JRN/xTIyB8FMkw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 18:49:00 2026 by rpki-client