Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier: VpRnDItnyWvcmgQWEzdIodyhYsqYKAbiYEkcHGm0uss=
Subject key identifier: 27:F9:98:A2:3F:71:94:CD:F8:27:17:16:33:0B:17:F7:47:F7:94:28
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 019DF8A80986A463F3B0FFCE43F6E14495B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number: 1080
Signing time: Tue 05 May 2026 15:00:55 +0000
Manifest this update: Tue 05 May 2026 15:00:55 +0000
Manifest next update: Wed 06 May 2026 15:00:55 +0000
Files and hashes: 1: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: +DNPXPsU++/hH7FvJJWFVx5wl11UKAF4vis+yyXqM/8=)
2: NX8gAo4kJVVnhVZZYeGsPN5mG8w.roa (hash: V0/RLiCz2ASel5h/MeTJN3bA9SuqAAYlXPDJdJh++xE=)
3: _GRNAQTm72gHQq3bL7B41p2YrHs.roa (hash: rvspb8Z2lGqTsEE3S985n0zOGBc3jLtF+UnFjeWtBHI=)
4: uOvkQDziXdl03ymVnX12k48lv30.roa (hash: uWfGX0PhnwLyUyMwAiEAkFFInh+eiuwv8GILWk97Ti0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:a8:09:86:a4:63:f3:b0:ff:ce:43:f6:e1:44:95:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: May 5 15:00:55 2026 GMT
Not After : May 6 15:00:55 2026 GMT
Subject: CN=27f998a23f7194cdf8271716330b17f747f79428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:60:81:a1:24:5a:e1:93:6e:90:de:b5:34:8a:
2f:78:43:bf:d1:af:29:1b:f5:cf:b0:6c:f4:24:d2:
69:42:d8:36:c0:62:c0:66:d3:29:f7:38:db:e8:13:
e1:51:8b:8c:30:b2:c2:53:b2:0a:36:78:6e:c1:bd:
9b:e1:58:5d:6f:53:17:12:81:99:54:5e:5d:74:80:
1a:02:e1:d6:bc:db:22:fd:f6:67:a5:32:d4:c5:39:
aa:84:e4:fc:e3:7f:5b:c5:f3:24:e0:52:24:45:e0:
53:b0:d7:0e:24:4b:ea:1b:c1:39:db:0b:f1:16:12:
9a:df:b9:68:6d:cd:a2:b3:00:04:6c:1e:21:42:7a:
ec:68:68:7c:ad:ca:99:5f:9b:4f:45:4e:32:29:10:
de:39:34:37:8a:90:3b:b0:99:8a:79:de:5b:40:27:
0c:ae:4f:13:8d:63:80:51:82:23:59:c6:d0:fe:ce:
d0:90:d9:55:d8:fb:6b:f6:77:7b:5a:ea:94:1a:7a:
f7:5a:36:9c:43:44:76:1b:4a:ac:4b:4b:3a:77:f6:
80:fb:a0:00:14:bc:e9:d3:e1:00:93:fa:8d:13:4b:
e6:19:68:e2:a9:24:1f:80:db:d9:28:bc:5e:08:2c:
e4:96:e5:35:7f:b3:36:7c:b3:c5:64:51:7d:21:16:
af:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F9:98:A2:3F:71:94:CD:F8:27:17:16:33:0B:17:F7:47:F7:94:28
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ac:5e:e9:eb:2e:f7:e5:26:1f:1d:c1:a5:37:fd:dc:d0:07:
70:e2:ad:b9:1a:6a:8d:7d:b3:44:8c:ca:cc:25:ad:cc:8f:a8:
01:ca:21:47:9b:d6:4b:29:85:0b:91:5b:ed:c5:a2:89:86:77:
0b:a9:88:f9:c7:e3:b1:93:fc:52:91:ba:fe:3f:ca:b5:6d:71:
60:ff:fc:47:82:eb:db:07:50:10:71:f2:3b:38:5c:39:e7:61:
95:fd:0a:a6:df:b6:9f:9d:0e:01:09:b8:a3:af:cc:af:2a:17:
a8:9d:65:3b:22:0e:87:e4:c8:f7:e4:0a:d9:49:ec:59:fe:60:
b0:e4:e4:4a:fd:bb:38:26:7f:09:e4:12:25:a1:72:75:b8:28:
9f:96:79:83:90:6e:5a:36:3e:10:d2:92:a7:48:c8:08:24:6d:
cb:fc:24:63:80:47:64:6c:1c:e3:20:1c:ae:3c:7e:37:64:f1:
1c:9b:87:7a:2b:12:c7:db:03:05:88:b6:58:e2:58:63:36:5e:
bb:f0:5a:9c:57:e2:0f:20:ae:3d:18:d3:b2:04:97:03:30:ea:
d6:bb:7a:70:25:f4:aa:e3:a7:9c:1d:2c:f2:6e:c4:c4:9f:ee:
e4:6e:41:d0:3c:c2:84:ec:36:ae:c1:ad:07:3c:89:d1:0c:fd:
2a:4d:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:26:37 2026 by rpki-client