Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier: fTaQ5z0b+rCDU2Hbfpl12G/3XFZW2HyV0AH/pNSSUlg=
Subject key identifier: D1:E9:E1:78:AD:9F:FA:D8:00:7D:C1:1A:9C:E7:39:0E:F0:5A:75:FD
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 01A0B508F481AD0F798078FE2AE10176A25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number: 11EF
Signing time: Fri 18 Sep 2026 15:00:57 +0000
Manifest this update: Fri 18 Sep 2026 15:00:57 +0000
Manifest next update: Sat 19 Sep 2026 15:00:57 +0000
Files and hashes: 1: 9Vt8ZTAaKO3QL6--FGbzjNTndzA.roa (hash: sv+RJ5ALLGIO9zXRd8Tk3ufycF6GVb7tnAc57hDYdKU=)
2: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: exDCOw761vTYp7iToATqYMJDBnMgRGjNxFvhQne/X4A=)
3: NX8gAo4kJVVnhVZZYeGsPN5mG8w.roa (hash: V0/RLiCz2ASel5h/MeTJN3bA9SuqAAYlXPDJdJh++xE=)
4: uOvkQDziXdl03ymVnX12k48lv30.roa (hash: uWfGX0PhnwLyUyMwAiEAkFFInh+eiuwv8GILWk97Ti0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:08:f4:81:ad:0f:79:80:78:fe:2a:e1:01:76:a2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Sep 18 15:00:57 2026 GMT
Not After : Sep 19 15:00:57 2026 GMT
Subject: CN=d1e9e178ad9ffad8007dc11a9ce7390ef05a75fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:79:71:09:92:5b:f0:e9:b1:00:6b:c0:12:fe:
eb:50:ba:d2:b1:87:ae:7e:a4:92:2d:40:65:8f:f1:
7c:e6:01:46:55:5a:11:c0:9e:8f:b1:ee:81:66:b7:
57:d4:2d:6b:fa:0b:f3:27:97:87:de:26:5f:cb:a2:
44:6b:5a:70:da:7b:7f:3c:6e:55:c3:b7:2d:90:47:
84:db:ca:de:b1:52:22:5d:5b:8d:f1:a6:d9:12:12:
e8:1b:ce:32:22:ae:0e:6c:88:fe:5b:1a:fd:19:28:
e2:f9:cf:cc:21:d6:31:18:3b:37:39:0f:a4:44:f2:
d8:45:35:d5:3e:96:7c:cb:07:52:6c:07:7a:58:a9:
07:37:09:34:5b:6e:fd:1e:2a:0e:fb:e8:8c:c7:9b:
c3:dc:30:7d:d7:c2:76:b6:38:4d:2d:ab:b9:15:e8:
87:93:89:33:b7:a4:91:32:a8:25:c5:31:99:7b:0c:
4d:d9:90:9b:29:7f:fb:e0:55:30:7f:f5:2c:18:ed:
07:8d:59:92:be:b9:7d:bf:70:5f:6c:f6:cb:9b:54:
9a:bb:b4:67:20:81:d0:d3:c0:b8:f6:ed:b5:99:4b:
8e:9a:07:b0:36:c8:24:37:34:1d:34:5f:0b:2b:08:
aa:c8:97:b5:f0:0b:cd:e0:fc:7b:21:dc:69:2d:5f:
33:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E9:E1:78:AD:9F:FA:D8:00:7D:C1:1A:9C:E7:39:0E:F0:5A:75:FD
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:33:ba:ec:59:97:04:d1:01:83:c8:67:62:7f:9e:5b:78:b2:
19:b5:91:08:42:29:ed:18:40:20:61:6b:20:df:b5:81:38:05:
8c:6b:e6:c5:6d:fc:db:aa:49:dd:0f:7d:9e:a1:9f:cd:f5:b4:
e8:9a:19:b0:12:b0:de:06:11:81:7e:2c:5c:85:80:82:bd:af:
4a:e4:78:a3:21:ee:34:39:e8:c5:cc:aa:8e:4f:2c:d6:20:e8:
5c:d6:5e:29:4f:bb:87:18:cb:b5:5a:0c:f0:c8:0b:20:7e:ce:
d2:e4:fa:f3:1c:9f:b2:a2:9e:01:2a:c6:db:47:c4:a6:64:f5:
47:e8:cc:a3:91:37:a1:39:8c:e6:53:5a:29:b6:cb:ec:16:0c:
e0:a4:2a:7b:98:34:89:e9:ef:4a:8c:e5:c4:b1:53:7a:5d:33:
e0:d1:45:c5:cb:b7:ae:9b:0a:f2:8e:e8:66:eb:ad:60:3a:1b:
7a:51:a1:09:f5:4e:cb:b0:ea:c4:e0:23:07:8b:c3:09:fc:fb:
1f:ee:4f:d8:3b:44:ca:d3:0d:b5:1c:60:c9:8b:ec:d7:13:7a:
58:da:59:03:5c:8c:44:85:9f:64:82:5e:72:6c:6e:3f:78:8b:
39:37:4b:9d:7e:41:74:71:74:17:17:31:3e:55:06:c2:2a:b3:
56:28:e9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 17:06:59 2026 by rpki-client