Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
File: FFXKMFkjEziJJe4UQQCa0x1LtB8.mft (raw, json)
Hash identifier: Ew9N6r0YDL3MUgx2QrjfbWk51FeNF3D/hJdlNaV5yxY=
Subject key identifier: 17:94:C4:9F:79:EA:DD:A8:A1:F1:3C:B3:2E:04:09:D0:C3:A5:07:0F
Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f
Certificate serial: 019DCDBDC9913FC4736EA2CE76A71DA1D0C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
Manifest number: 032A
Signing time: Mon 27 Apr 2026 07:01:00 +0000
Manifest this update: Mon 27 Apr 2026 07:01:00 +0000
Manifest next update: Tue 28 Apr 2026 07:01:00 +0000
Files and hashes: 1: FFXKMFkjEziJJe4UQQCa0x1LtB8.crl (hash: 7Soh97+1f5l8bQgygzoFdI/7Xv85X1+OlD6MyuSvSIo=)
2: W-lf8hwpKZ_Qz4QyYmLJuZ0Q150.roa (hash: 0CCMus3U6y/Vhpkh6RFJf4seKPVSo2QOmMSt3f+sxgc=)
3: WY4yKJ6FuiBdiFOznndYQM--z2g.roa (hash: 76Gd2waLyhSjE5zW3D9kYms7Etz3xgkY7SORNKkRpWI=)
4: ZQhaiJ1oc9r5-C3flapO26NGQ7I.roa (hash: plgNeQhV8RVh6yAaBxxXzVfBQT4+N5LviNtdc5/+xvc=)
5: oVJBkQA-O0NzrQgh8tJmHAKTQWQ.roa (hash: bAWpRSTao5SUodimZihTy0UH7Q46FL0EVHclliB3Pco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:c9:91:3f:c4:73:6e:a2:ce:76:a7:1d:a1:d0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f
Validity
Not Before: Apr 27 07:01:00 2026 GMT
Not After : Apr 28 07:01:00 2026 GMT
Subject: CN=1794c49f79eadda8a1f13cb32e0409d0c3a5070f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:64:8e:46:1e:2d:69:ea:4c:d4:fe:e3:d5:e2:
3d:6c:a0:8e:5d:7f:e5:0f:52:86:e8:a0:b2:e6:5f:
17:d3:91:5b:bf:2b:cf:2a:ad:e9:22:97:f7:f7:a6:
25:57:3c:10:fa:fd:f0:80:fc:f2:d3:af:14:77:a3:
f2:2f:9e:d7:9a:0c:fe:b4:fa:7f:01:3a:df:98:f2:
98:fc:9f:c0:37:f0:ac:19:16:0a:27:0c:34:40:1d:
50:1c:e2:be:94:a7:2d:a5:75:15:82:11:a8:e3:26:
d6:2c:cb:71:f9:d2:d7:52:c3:ca:8e:d5:7c:2c:fa:
48:64:99:0b:6d:ee:4a:d6:39:a5:00:f6:b0:6f:08:
88:21:6f:6f:67:b4:d3:9c:43:35:d9:04:64:7b:33:
e9:09:fb:9e:3d:b1:f6:01:cc:70:99:d0:a7:98:db:
b3:c4:ea:61:d5:ae:cb:f7:3f:0d:02:4b:da:31:da:
43:3d:24:b7:7b:e0:a8:bb:84:54:83:94:ae:72:17:
a9:5c:d0:46:27:45:8c:76:db:ea:63:f7:b6:66:62:
f2:e2:6f:f3:42:d3:3c:4b:f6:ba:a7:2e:1c:2c:fe:
b7:cb:42:83:ae:a4:ca:36:12:54:9e:31:22:26:bd:
65:6b:19:da:f0:c5:fe:ad:4d:1a:e5:3c:74:85:a5:
79:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:94:C4:9F:79:EA:DD:A8:A1:F1:3C:B3:2E:04:09:D0:C3:A5:07:0F
X509v3 Authority Key Identifier:
keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:36:b0:28:a9:36:47:d8:0d:a4:9b:37:47:09:a6:d6:f3:f7:
ba:26:01:9c:c6:b0:63:5e:f6:46:15:58:6e:e3:01:af:26:1b:
27:0f:1a:f0:2d:6d:0c:78:08:10:46:ef:fe:a4:88:87:9d:f8:
c9:41:e8:32:cb:b8:36:33:af:a2:66:04:3b:ba:fc:5c:dc:a3:
30:84:27:eb:6a:0e:75:a1:84:5f:3b:70:2c:41:bd:40:c7:9d:
40:31:df:5d:1e:4a:e9:39:cf:e8:99:03:26:ad:01:bd:6a:45:
9a:f7:df:74:be:83:c4:f4:02:0c:e8:f8:35:8b:74:0e:f7:ef:
63:12:fe:9b:b3:d3:34:9e:49:fc:9d:a3:ba:37:5f:9d:04:20:
6a:4a:70:2b:86:91:08:4f:95:b9:fe:3a:29:a8:6f:f6:17:36:
ca:bd:67:94:18:1c:c0:f8:f7:cb:1e:26:ce:c2:82:b2:de:d0:
cf:d0:39:19:08:3d:75:94:ee:22:a9:a0:26:90:67:1d:e9:09:
18:df:20:8f:73:52:5c:bd:36:6b:ac:33:28:5b:e3:37:1a:57:
c9:d8:93:d6:c6:eb:3f:ab:02:51:1c:c4:23:f0:56:fb:e6:00:
19:e7:4f:12:e4:f1:bc:66:e1:15:29:58:99:1f:34:18:62:cb:
43:d9:8b:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NvcmRP8RzbqLOdqcdodDJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NTVjYTMwNTkyMzEzMzg4OTI1ZWUxNDQxMDA5YWQzMWQ0
YmI0MWYwHhcNMjYwNDI3MDcwMTAwWhcNMjYwNDI4MDcwMTAwWjAzMTEwLwYDVQQD
EygxNzk0YzQ5Zjc5ZWFkZGE4YTFmMTNjYjMyZTA0MDlkMGMzYTUwNzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22SORh4taepM1P7j1eI9bKCOXX/l
D1KG6KCy5l8X05FbvyvPKq3pIpf396YlVzwQ+v3wgPzy068Ud6PyL57Xmgz+tPp/
ATrfmPKY/J/AN/CsGRYKJww0QB1QHOK+lKctpXUVghGo4ybWLMtx+dLXUsPKjtV8
LPpIZJkLbe5K1jmlAPawbwiIIW9vZ7TTnEM12QRkezPpCfuePbH2AcxwmdCnmNuz
xOph1a7L9z8NAkvaMdpDPSS3e+Cou4RUg5SuchepXNBGJ0WMdtvqY/e2ZmLy4m/z
QtM8S/a6py4cLP63y0KDrqTKNhJUnjEiJr1laxna8MX+rU0a5Tx0haV59wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeUxJ956t2oofE8sy4ECdDDpQcPMB8GA1UdIwQY
MBaAFBRVyjBZIxM4iSXuFEEAmtMdS7QfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDIt
OWIyNmNhYjc5NDUxLzEvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDItOWIyNmNhYjc5NDUx
LzEvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTawKKk2
R9gNpJs3Rwmm1vP3uiYBnMawY172RhVYbuMBryYbJw8a8C1tDHgIEEbv/qSIh534
yUHoMsu4NjOvomYEO7r8XNyjMIQn62oOdaGEXztwLEG9QMedQDHfXR5K6TnP6JkD
Jq0BvWpFmvffdL6DxPQCDOj4NYt0DvfvYxL+m7PTNJ5J/J2jujdfnQQgakpwK4aR
CE+Vuf46Kahv9hc2yr1nlBgcwPj3yx4mzsKCst7Qz9A5GQg9dZTuIqmgJpBnHekJ
GN8gj3NSXL02a6wzKFvjNxpXydiT1sbrP6sCURzEI/BW++YAGedPEuTxvGbhFSlY
mR80GGLLQ9mLUQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 15:08:50 2026 by rpki-client