Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
File: FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft (raw, json)
Hash identifier: NRXnjLPKkn4waPV60asrTyJUSphCHEJbPNsPlW6D+DA=
Subject key identifier: 01:DF:29:EC:0B:9B:1D:F4:04:5C:F4:6A:F5:37:57:FE:12:5E:25:44
Authority key identifier: 14:5C:47:28:38:2E:C5:35:4E:10:60:23:DF:46:7A:41:13:B4:93:24
Certificate issuer: /CN=145c4728382ec5354e106023df467a4113b49324
Certificate serial: 019D382E7EBF50D19EE615F406A3E4D89156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
Manifest number: A7
Signing time: Sun 29 Mar 2026 06:01:04 +0000
Manifest this update: Sun 29 Mar 2026 06:01:04 +0000
Manifest next update: Mon 30 Mar 2026 06:01:04 +0000
Files and hashes: 1: FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl (hash: xgTYUoiR0vUNZBchxhOxqXxLFO2SH2/SHvPEJGpuC/U=)
2: py9eyb051zBNGRXqf0w217Iyr0U.roa (hash: V1rIxP2aeir1g3qKAPo7xgCkgSSb/VU/nyh0Upf99zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7e:bf:50:d1:9e:e6:15:f4:06:a3:e4:d8:91:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145c4728382ec5354e106023df467a4113b49324
Validity
Not Before: Mar 29 06:01:04 2026 GMT
Not After : Mar 30 06:01:04 2026 GMT
Subject: CN=01df29ec0b9b1df4045cf46af53757fe125e2544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e5:cb:20:57:bd:25:54:fb:d9:5f:a7:34:2d:
27:de:be:37:1c:0e:e2:a8:1f:f6:6c:70:30:36:30:
7b:8e:45:78:44:5b:a7:0e:e6:e2:3b:29:22:90:57:
90:d6:04:12:6c:06:37:82:be:0b:c6:84:8f:b3:5e:
c5:11:67:91:9a:f4:c2:49:2a:14:63:1e:58:af:b7:
c9:45:1d:2f:94:7d:d3:5b:be:f5:43:7b:6a:4c:87:
af:58:f6:79:f4:b1:0f:92:86:6e:76:59:b8:ae:9a:
62:cb:eb:a3:be:aa:2a:61:a2:da:19:ee:1a:48:3f:
94:4b:7e:19:67:9c:6a:f5:8b:1a:6e:3e:96:f0:57:
f9:95:97:d9:4e:7d:84:d6:0c:0e:35:67:f3:ce:ad:
4e:4b:98:98:14:bd:43:77:9a:e1:14:30:da:ea:94:
62:9c:b2:4d:77:c0:18:37:ad:da:d3:64:1e:9e:4c:
58:e4:6e:fc:c2:77:54:f2:3b:19:d1:3e:c5:82:1e:
d7:11:f8:d1:4c:2c:db:3a:fe:09:52:30:ff:7f:50:
d7:46:7b:54:ad:f7:fb:6e:22:ee:7e:05:65:a9:b4:
8c:83:ee:fc:c7:2d:e5:7e:f8:b9:f4:bf:15:51:5a:
99:90:1b:b4:75:fc:47:7d:88:91:79:65:4d:14:a6:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DF:29:EC:0B:9B:1D:F4:04:5C:F4:6A:F5:37:57:FE:12:5E:25:44
X509v3 Authority Key Identifier:
keyid:14:5C:47:28:38:2E:C5:35:4E:10:60:23:DF:46:7A:41:13:B4:93:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:67:6a:9d:0a:b8:df:d2:1f:43:ff:83:75:3f:bd:59:3a:31:
14:8e:96:bd:74:22:e9:af:0f:a1:0d:1c:c4:c0:18:1b:9c:2b:
11:ef:04:18:04:bd:bf:d4:f4:78:2c:73:13:d2:ee:c8:b0:3c:
55:a9:8e:fb:7e:a6:a5:01:0c:73:d9:76:8f:e6:9e:e7:97:15:
c5:e4:0a:0f:25:c7:ba:11:90:10:2e:05:e2:4d:c0:bd:27:31:
5d:09:04:5c:f1:f7:d8:85:a7:6c:a2:7f:9c:2d:ce:96:09:0a:
2b:6e:de:7a:08:7d:9a:40:f5:10:ac:bf:f9:74:31:90:3a:02:
28:81:44:a5:0e:b6:01:38:cf:e0:a6:67:3b:68:d0:36:77:32:
28:20:cf:da:cf:84:75:80:4b:c0:e0:2b:2c:c0:a6:15:ac:0e:
03:72:c8:67:e1:01:6e:f5:0a:c6:ff:9c:af:16:88:6c:b6:3f:
4e:66:9f:3b:68:93:17:14:56:2c:36:95:c7:4e:fe:31:0a:01:
04:ff:10:58:38:ac:6a:fd:98:40:a2:64:2c:13:4d:ec:71:37:
a4:0a:d1:1d:bd:86:36:2c:ce:45:0c:da:8a:0c:77:33:bc:80:
be:fc:e7:54:60:65:1c:85:88:59:b1:36:13:62:da:c0:cb:c9:
24:c5:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:34 2026 by rpki-client