Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
File: FFAQ3dLG97ZEpQAsseTuFixj0dc.mft (raw, json)
Hash identifier: zBR7o7ignK4738lmy3MBq7KaA88oIEpN89SM63cjxOs=
Subject key identifier: 63:C8:D7:F9:4F:FF:16:15:82:2E:8F:57:A9:BD:A4:85:2F:DF:A6:E2
Authority key identifier: 14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
Certificate issuer: /CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Certificate serial: 019D38D2D046D56080DA326A1C12A3BEC045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
Manifest number: 94
Signing time: Sun 29 Mar 2026 09:00:33 +0000
Manifest this update: Sun 29 Mar 2026 09:00:33 +0000
Manifest next update: Mon 30 Mar 2026 09:00:33 +0000
Files and hashes: 1: FFAQ3dLG97ZEpQAsseTuFixj0dc.crl (hash: hNkbddS9IEZ3T/Galq3RQl5OL+kk+NHHLDgXnmv9J5c=)
2: vq82IEcQtF-WpfPnhIhgfebzHDk.roa (hash: 1OV+pDCPKjRkZqon595wjlus9Od7oqEkMW7DsdSGgek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d0:46:d5:60:80:da:32:6a:1c:12:a3:be:c0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Validity
Not Before: Mar 29 09:00:33 2026 GMT
Not After : Mar 30 09:00:33 2026 GMT
Subject: CN=63c8d7f94fff1615822e8f57a9bda4852fdfa6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:ab:56:7f:29:d0:23:1f:e7:5f:87:86:78:
23:98:15:03:25:18:d4:62:5f:42:b1:6f:30:2e:51:
59:19:4a:9b:57:62:f2:80:a2:cb:86:a3:2d:74:a7:
c3:c7:b1:46:16:47:fc:84:64:34:dd:be:14:44:ae:
2c:a4:44:08:5e:34:fd:c6:76:d7:5e:28:f6:ab:ec:
4d:a5:7c:91:83:e2:d4:dc:bb:e1:ba:9c:65:65:93:
5b:b8:c8:5c:53:26:3e:70:1c:c5:40:64:03:a5:05:
f8:72:58:62:18:14:7e:c7:f3:a8:3a:1d:18:c4:6b:
37:93:90:c6:5d:51:00:24:d8:d6:6c:c2:23:bc:da:
72:47:97:37:cb:e9:ac:17:c3:4f:e0:62:84:9a:f2:
90:fe:06:e0:d1:5e:75:89:bc:5c:77:6f:17:50:b0:
90:c1:1c:80:bb:b1:9d:84:52:4d:8c:fc:9a:76:ad:
0d:52:dd:6e:f0:61:4f:65:35:cd:49:ca:20:9e:0c:
16:24:1a:04:e1:c5:14:52:7a:c5:4e:18:31:60:36:
23:42:68:3f:d8:18:76:17:7d:82:d4:55:86:74:95:
07:ee:33:32:8d:81:82:ce:3a:20:72:5a:d9:85:eb:
18:e8:05:48:0b:0a:df:69:f4:14:04:bd:c1:3f:ca:
87:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C8:D7:F9:4F:FF:16:15:82:2E:8F:57:A9:BD:A4:85:2F:DF:A6:E2
X509v3 Authority Key Identifier:
keyid:14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fc:66:5a:56:06:3b:b3:e3:63:30:09:53:b8:0e:25:9f:c0:
ef:cf:f2:0f:6f:78:a6:aa:27:af:b5:a5:81:d8:7d:1a:39:56:
0d:b7:e7:c4:58:a6:b4:3f:11:52:8c:e7:50:2c:06:4f:42:e7:
71:54:d0:d3:cd:96:fd:9d:47:f4:a6:9b:e2:b6:a8:c5:fe:90:
59:0f:38:fe:18:6f:ff:d5:05:6a:a3:3b:fa:1b:81:b6:e4:20:
56:24:ca:cf:68:85:30:98:35:e5:56:ae:44:dd:e9:49:13:44:
6d:e4:c5:cc:3e:00:29:82:ac:3c:30:5c:de:8b:03:7b:6f:01:
fe:2a:08:3c:35:09:cb:79:73:3d:9f:7c:f2:41:2e:52:80:86:
a5:f6:87:db:b2:db:89:ff:91:da:e6:0b:d3:b7:e9:27:4b:a1:
43:63:38:72:c4:a1:02:7a:59:4e:33:33:31:e4:b0:3a:e6:35:
a5:37:9b:fb:54:5c:4f:08:a4:5e:d9:4f:71:86:f1:d8:6d:2d:
b2:32:56:2f:3c:81:65:34:66:e1:7e:cb:51:54:0c:58:72:39:
56:3c:d2:06:36:56:d9:60:fa:d4:f5:47:76:cc:23:37:f4:56:
ee:39:39:9c:ae:2b:2b:53:78:28:33:a1:8f:77:87:0e:b5:ac:
b0:1a:c8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:38 2026 by rpki-client