Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
File: FFAQ3dLG97ZEpQAsseTuFixj0dc.mft (raw, json)
Hash identifier: F+Cz2xzBESFEY24WLQqT8Y/XpwszPCjXciu8OtCxess=
Subject key identifier: EB:C1:20:7F:BC:B4:9F:99:73:47:F1:00:28:EC:DC:7D:21:21:4B:0C
Authority key identifier: 14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
Certificate issuer: /CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Certificate serial: 01A1593089E36FAE2046502FA4ACB7704613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
Manifest number: 02BA
Signing time: Tue 20 Oct 2026 12:01:55 +0000
Manifest this update: Tue 20 Oct 2026 12:01:55 +0000
Manifest next update: Wed 21 Oct 2026 12:01:55 +0000
Files and hashes: 1: 4N26qUBpHrHQTxV1hEsf4uKRea8.roa (hash: 0SUTFWD/I34J1z7TszALalB3h25xqG6c1a/VHyNOahg=)
2: 8-KHbyQ_KYn0snvY9x30CBtJw18.roa (hash: 80kk3Ul4i3TWv/R5PMNMesb+6kDgT0CnH8s73ujvE20=)
3: FFAQ3dLG97ZEpQAsseTuFixj0dc.crl (hash: u3Kbcj2PBi9idsP2a/AAe89pcSQGwpwSGBwh5wB3IVA=)
4: YGtlZnWeERw8AsqsnIvt3Avrp8g.roa (hash: wjBYM93Z9LSZQjBjOvD3I1KwuCypmMdncWxGSLsNk2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:30:89:e3:6f:ae:20:46:50:2f:a4:ac:b7:70:46:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Validity
Not Before: Oct 20 12:01:55 2026 GMT
Not After : Oct 21 12:01:55 2026 GMT
Subject: CN=ebc1207fbcb49f997347f10028ecdc7d21214b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:36:75:4d:36:51:ec:57:2a:79:e2:36:e2:c6:
43:20:7f:1d:e2:28:2d:0f:b7:fe:9f:38:0b:1f:e5:
19:20:75:f8:10:af:62:3d:e3:9a:4d:d2:66:6c:20:
f5:df:f0:a1:56:c1:ca:c0:31:2d:89:dc:2e:8f:fb:
7c:a6:3f:03:fd:f9:5a:f6:1f:9d:cd:be:be:e4:10:
cb:d0:95:66:88:a4:c5:08:9a:53:04:b3:43:69:5a:
bc:5f:2a:92:37:7f:3f:d5:e2:ec:2f:48:96:82:51:
2a:b2:1c:b6:78:ab:0e:80:07:27:5d:95:36:2c:1b:
de:3f:df:b2:34:50:36:d8:b8:fa:37:7d:ca:5c:8c:
88:a6:d5:29:f1:33:5b:ce:5a:2d:0d:44:b0:8e:ef:
aa:6c:2c:90:02:da:b4:4d:fc:c2:61:0d:26:62:28:
6c:4b:f9:30:b1:26:1e:9a:9a:fb:86:a9:17:44:cf:
52:8c:01:1f:e8:8e:1a:54:96:21:25:7b:c6:f9:c6:
d3:be:66:f2:f0:22:6c:fe:45:c9:0f:c0:56:07:6f:
cd:4f:3a:6d:89:dc:42:19:cc:1c:19:19:e0:47:c5:
74:1e:0e:b9:86:2d:65:57:e7:78:cb:3b:c1:6e:26:
ff:2c:1c:da:a6:61:46:a0:05:48:a2:df:16:fc:f7:
f6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C1:20:7F:BC:B4:9F:99:73:47:F1:00:28:EC:DC:7D:21:21:4B:0C
X509v3 Authority Key Identifier:
keyid:14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:94:84:a9:b0:67:43:00:23:cb:6b:8c:a1:50:2b:89:01:9a:
d7:05:3b:ff:e7:4a:26:d5:d9:de:23:9f:65:0b:59:9b:35:4c:
c7:3d:5b:15:25:ad:d8:02:58:fb:27:21:e1:fc:57:f1:93:44:
9e:e9:7e:04:58:92:27:c5:db:ca:61:af:92:c7:0c:18:87:52:
a2:43:c1:84:53:21:1a:eb:91:89:ab:2c:78:86:54:87:4d:61:
dd:c6:7d:83:53:a5:28:2c:ca:ea:9b:a5:07:ba:51:a6:39:11:
f9:14:0b:17:06:7b:00:f5:86:10:7b:cf:ef:12:78:d5:bf:52:
16:69:dc:37:c4:ae:8a:9a:ca:9c:7f:a4:91:78:69:1a:1d:6c:
dd:34:ff:a3:8f:93:95:33:2d:af:8c:da:68:82:ed:6b:ee:ed:
68:87:32:95:8d:5c:2e:05:fc:bc:f6:fc:7e:d2:a3:b6:2c:88:
4a:de:b1:08:18:bb:13:bf:20:b5:e4:96:44:ed:78:77:b8:c7:
1d:97:5c:42:12:51:c1:85:84:fc:6f:f5:cd:b2:9a:a1:d1:45:
e9:92:bb:b0:89:15:9b:62:ee:ea:e6:db:d9:a5:4c:36:06:4e:
c2:ad:cf:ef:8b:18:e9:8b:2d:11:ee:10:13:01:31:1d:15:58:
e2:d0:fe:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:45:30 2026 by rpki-client