Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
File: FFAQ3dLG97ZEpQAsseTuFixj0dc.mft (raw, json)
Hash identifier: xDk6I6yRJuePT3YTP13YoVLoexkLDs0kdICM4rHLQEk=
Subject key identifier: C3:33:95:22:5F:D1:61:9A:4D:74:63:44:1F:CA:C8:EF:69:F9:2A:4C
Authority key identifier: 14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
Certificate issuer: /CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Certificate serial: 019E8EA5576EBE3014288C97E1A306A43DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
Manifest number: 0145
Signing time: Wed 03 Jun 2026 18:01:00 +0000
Manifest this update: Wed 03 Jun 2026 18:01:00 +0000
Manifest next update: Thu 04 Jun 2026 18:01:00 +0000
Files and hashes: 1: FFAQ3dLG97ZEpQAsseTuFixj0dc.crl (hash: /NcJwA3Zc0J0wZKoYHdHqtjbcHkJQQAgT8AU+DnokH0=)
2: vq82IEcQtF-WpfPnhIhgfebzHDk.roa (hash: 1OV+pDCPKjRkZqon595wjlus9Od7oqEkMW7DsdSGgek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:a5:57:6e:be:30:14:28:8c:97:e1:a3:06:a4:3d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Validity
Not Before: Jun 3 18:01:00 2026 GMT
Not After : Jun 4 18:01:00 2026 GMT
Subject: CN=c33395225fd1619a4d7463441fcac8ef69f92a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:da:5a:bc:98:9d:4d:40:54:f7:5b:07:be:a3:
53:7c:9f:e5:d6:db:60:75:e5:e8:93:0b:e7:02:85:
8f:e1:7b:ae:c9:d0:88:b3:e8:f5:b2:f5:ad:06:1b:
55:e4:4d:0b:ce:e4:21:d8:e9:94:2a:20:8e:0a:45:
8a:84:d2:a0:1d:f6:c4:42:21:a3:2a:75:8a:f1:12:
08:3a:17:45:33:25:bf:f0:b2:2f:9c:22:76:81:97:
5d:6a:fd:4b:eb:da:c5:c6:e8:88:d9:48:4c:b5:01:
cf:13:5b:a2:fd:4e:6f:07:34:db:4c:80:66:11:de:
3e:6a:9a:39:07:67:e4:af:f1:4b:d4:ba:3a:0c:53:
77:11:a1:58:16:8f:7e:b0:08:6e:48:7c:f3:ca:e9:
16:83:f8:8c:83:f5:9a:51:ba:28:3b:d5:af:0a:5e:
a2:fd:19:ad:85:17:ba:b8:be:9b:4f:7e:1d:12:6d:
3e:da:d4:c5:4e:5e:ff:b4:c2:2c:1c:02:61:2f:a0:
bd:f3:c3:a4:8d:ae:85:aa:7a:26:0f:02:a5:38:4a:
f2:8b:19:bd:13:c0:3e:62:84:73:dc:fa:24:19:23:
21:2c:8f:92:f6:6c:1f:6c:d2:62:07:f8:67:45:37:
5d:2e:c2:d8:dd:d6:f1:f0:88:16:7a:53:db:41:e1:
53:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:33:95:22:5F:D1:61:9A:4D:74:63:44:1F:CA:C8:EF:69:F9:2A:4C
X509v3 Authority Key Identifier:
keyid:14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:87:17:21:8c:a8:06:b7:5b:26:80:7b:5b:87:48:ea:e7:b3:
ee:45:5b:02:f6:a3:53:b9:08:1e:d2:a7:7d:71:6b:b6:b8:d3:
45:98:74:2c:ca:d2:74:7b:c0:b4:de:3d:eb:2e:c0:e2:71:87:
bc:51:66:0c:cb:4c:91:15:cb:85:0a:c8:4a:ec:35:17:8a:fb:
18:0b:e4:30:c0:8e:ee:14:f0:c2:55:9d:10:de:95:3e:d3:56:
1e:93:62:73:5b:20:d1:69:7e:d2:d2:f5:48:aa:6d:10:1e:d6:
5b:3a:18:7a:57:39:c1:f8:72:b7:ed:89:19:76:82:9f:b2:d8:
3d:cb:27:a5:de:b4:78:40:0b:df:e7:91:0b:5e:93:51:3d:14:
f5:20:a7:cd:4e:e0:2f:25:d1:a2:59:39:6f:0b:45:3e:79:1a:
4d:d5:8e:49:1c:d4:d6:2c:fe:3c:7c:c8:48:62:ef:b1:2a:92:
66:ec:55:fd:51:74:27:9c:f8:c5:ca:3a:38:06:85:8e:30:70:
7d:ec:37:0c:3c:c0:d4:80:10:ce:b6:37:99:50:40:d8:6f:d7:
e3:bd:ce:57:50:4f:04:14:da:76:10:6f:ba:be:25:07:d3:fd:
32:91:4e:82:de:06:6f:80:6a:93:e5:8b:b9:d1:fb:23:b7:a8:
b8:e8:3f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 04:17:24 2026 by rpki-client