Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json)
Hash identifier: OGmhEyItJk7pmmGxE9d0F6/SQPNyE8kQHgEnQ1cTKjw=
Subject key identifier: F9:58:C1:FC:A4:F4:E1:DE:55:30:C7:F3:3D:83:D6:D8:57:9A:32:97
Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Certificate serial: 019D38D34A6F634F922E565028268518A8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
Manifest number: 0FCA
Signing time: Sun 29 Mar 2026 09:01:04 +0000
Manifest this update: Sun 29 Mar 2026 09:01:04 +0000
Manifest next update: Mon 30 Mar 2026 09:01:04 +0000
Files and hashes: 1: XEPF7uppLjcGaqRN3wLfKBoo6xs.roa (hash: rUx2aHlQsnFopfmDQOlAInYswjrrWcWiZT3IoOgNBhk=)
2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: os1ESPTU4XTwzslSBHrwoXKiSnw5r4WjDEY2IoeKQO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4a:6f:63:4f:92:2e:56:50:28:26:85:18:a8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Validity
Not Before: Mar 29 09:01:04 2026 GMT
Not After : Mar 30 09:01:04 2026 GMT
Subject: CN=f958c1fca4f4e1de5530c7f33d83d6d8579a3297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9c:28:60:38:24:93:45:0b:70:ac:7c:fa:85:
32:9d:e3:a6:36:48:12:d1:ca:98:d9:19:30:aa:57:
7f:f6:b5:35:28:ec:64:00:73:00:d0:b3:37:89:ff:
67:76:0c:b1:d3:c7:c1:f5:cc:9f:2b:8f:46:3d:f6:
f0:61:25:a2:f3:ad:7e:10:65:ef:60:d3:c3:1a:32:
6d:be:2f:c7:5a:5b:8e:98:65:ae:05:6f:cd:34:a4:
49:ed:16:6e:2b:58:7c:2d:53:c2:a3:4f:f8:da:18:
f8:1b:8b:f9:e6:59:73:8f:41:cc:f9:ec:a7:61:af:
b4:57:9a:4e:81:cd:91:d2:7f:af:a2:25:61:10:cd:
0d:e0:d1:a3:86:26:bf:2d:a1:96:5a:b3:e4:87:e1:
c5:e2:cf:3c:a1:9a:6f:66:04:32:b0:f1:a9:7d:a3:
97:73:82:a6:1d:45:43:aa:57:a1:24:d3:ba:5e:d6:
70:d0:d2:2d:59:79:3b:63:ac:92:28:cd:a7:f6:64:
ad:35:2e:46:4d:9b:e2:e5:8d:55:8a:ac:2c:03:7e:
48:3a:54:05:ae:73:f0:84:0a:02:e7:37:bf:b7:3e:
8b:93:c0:a8:fe:ef:ca:03:a0:26:9f:cc:99:c8:16:
1c:83:e6:db:6d:9d:a9:8b:62:98:c8:b8:62:0a:7f:
68:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:58:C1:FC:A4:F4:E1:DE:55:30:C7:F3:3D:83:D6:D8:57:9A:32:97
X509v3 Authority Key Identifier:
keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8e:d6:88:21:f3:04:a4:f8:c3:3d:b0:4c:44:2f:05:5d:b1:
ab:e1:1e:8e:87:0d:7b:8f:26:8d:2f:1a:5e:79:74:4a:07:37:
2f:b6:0f:9e:c0:78:7d:f7:91:d3:d7:47:47:fb:62:b0:d3:3a:
ee:cd:39:04:d4:96:5d:d0:be:7a:8d:3f:9c:cf:7e:47:7c:6e:
00:73:97:d3:a4:ff:47:25:55:60:ab:be:d9:89:2d:3c:32:73:
df:c4:b4:55:79:12:98:ff:7f:7a:ac:de:5e:83:ae:fe:0c:4b:
8f:97:78:ab:d9:01:fc:c8:62:31:2b:3d:a0:4b:17:dd:b1:fc:
93:eb:a8:f4:71:4c:04:b1:a5:e0:4e:de:99:14:d9:3f:2e:45:
42:f4:e3:a6:59:d4:83:62:f8:31:9c:b9:6e:8a:dd:38:40:12:
60:dd:e0:3a:e0:7f:ab:e6:cf:86:35:cc:20:73:8b:9a:10:f8:
9c:a4:03:52:5a:9a:e4:05:9a:f0:fe:ac:2a:a0:90:80:89:15:
85:e4:35:b7:54:17:17:84:4f:7b:a4:cb:38:76:29:a3:4b:eb:
27:2e:2d:b7:c7:2d:43:d6:3d:47:06:a1:e7:5b:41:81:f0:31:
67:4f:7c:f2:1b:40:69:5b:4b:39:b2:ca:69:e5:21:b5:00:e2:
27:06:44:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:16 2026 by rpki-client