Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: g4fjQbPHXDjfUaPqGPZCq1JGoMjlskrIpbTTB+VFOoQ=
Subject key identifier: E6:9A:B3:1C:6C:79:F8:EB:AF:DB:FB:03:A0:64:27:2C:8C:B4:E5:2D
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 019D99993705CA986F520C261B80A7C17ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 097C
Signing time: Fri 17 Apr 2026 04:00:48 +0000
Manifest this update: Fri 17 Apr 2026 04:00:48 +0000
Manifest next update: Sat 18 Apr 2026 04:00:48 +0000
Files and hashes: 1: 1W82at7mSiuchX3iCzO6G2WZfjs.roa (hash: OyjiciJl+n/aBNYiJh6cnpdIClbp0Z2IycUrjNfaQ1s=)
2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: oxuUMQuVnG1nHf1fn4ggf0s7nwnCiwETy5WBbYo1QtY=)
3: xsaLPUS_EPRPzM8NWjyE1aTWHX4.roa (hash: dBX6NfyeptV43b7aTbE31Dh+/tXWuq6hyAQ37G7Hits=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:37:05:ca:98:6f:52:0c:26:1b:80:a7:c1:7a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Apr 17 04:00:48 2026 GMT
Not After : Apr 18 04:00:48 2026 GMT
Subject: CN=e69ab31c6c79f8ebafdbfb03a064272c8cb4e52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:f1:b5:c5:ba:3e:c7:73:6f:6c:4d:d7:59:
41:f7:82:27:cf:5f:80:41:dc:8c:9a:1b:ba:ed:dd:
96:02:fe:cf:9c:39:ef:fd:13:46:31:8c:2a:c3:63:
a8:77:a8:b3:8e:ff:1a:4f:c2:87:14:46:ec:f1:27:
fc:51:aa:58:38:72:85:6c:21:f8:0e:1e:7b:10:75:
4c:54:86:5f:46:bb:a1:44:95:a7:91:96:68:6c:d1:
9c:e4:5d:a9:6f:f9:5a:18:f5:eb:96:4d:bb:28:f8:
e9:21:6d:c5:cb:77:46:5e:b2:2a:49:21:6e:07:be:
3c:22:61:6f:aa:fb:67:d8:e1:56:29:b4:5c:61:f1:
95:68:ec:2e:2f:9d:c9:90:a1:82:3a:47:e6:cd:c7:
28:77:29:7b:87:92:50:e8:1f:d3:1a:75:25:fe:b5:
4f:29:6f:7a:be:bb:4e:d8:b2:c3:35:33:23:2c:e7:
a2:2a:4f:83:25:bb:6b:4b:6d:7a:bf:b7:9f:63:77:
6d:f3:29:c8:7f:dd:61:a9:9c:b6:e8:6a:5c:0b:51:
e4:ce:7e:62:df:cb:08:69:5c:a3:bf:4a:e7:69:b0:
ba:58:28:51:7e:69:76:ee:c4:53:d4:cd:cb:d8:07:
24:3c:3b:7f:75:44:29:40:fa:c0:cb:e1:74:94:3b:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9A:B3:1C:6C:79:F8:EB:AF:DB:FB:03:A0:64:27:2C:8C:B4:E5:2D
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e2:a7:c9:6c:d1:c4:07:6b:12:2e:e5:24:38:a5:31:75:c7:
ab:21:bd:09:d0:41:ce:c7:69:52:20:5a:76:cd:26:9d:7d:b3:
c4:fc:cd:5d:82:b0:f4:6c:80:4b:f8:56:63:b9:dc:a1:71:42:
1e:1e:23:0c:2b:a6:6a:fd:4a:70:24:2e:9d:8b:fc:f8:81:d7:
a4:ef:0f:41:89:c6:11:e6:65:86:1a:a6:b1:fd:cb:f8:5d:c6:
7f:2e:ff:fa:2b:00:82:92:7a:07:54:45:c6:97:97:7f:d1:d9:
a9:97:6e:46:61:af:ca:2d:c0:09:26:ad:d2:16:a6:e2:8f:ba:
7c:6d:b1:0a:36:17:fe:b3:31:12:78:90:09:27:7c:85:1c:1b:
a1:28:ef:b0:cd:06:a1:52:09:24:6c:6b:62:d9:36:55:5e:ec:
84:25:6a:f9:eb:f8:4f:6e:ea:0e:79:d8:e3:69:fb:37:c0:0b:
55:9d:3f:6f:2a:12:d6:f8:ac:f5:f4:1f:9c:69:16:7b:9c:8d:
8e:48:f1:5e:68:d4:72:cc:af:54:1d:7a:47:03:05:7f:6e:bb:
e0:7e:cf:52:c4:85:66:36:f8:f4:bf:ac:0b:f5:c8:da:c5:dd:
bb:01:98:e4:b0:ef:a2:7b:e6:e5:90:8f:df:09:ea:d9:43:af:
1c:45:04:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmTcFyphvUgwmG4CnwXq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjkwNGFiMTQwNjZjN2E5ZmU2MWE1MjFkNTQ5MmEwZTUy
OTY1Y2EwHhcNMjYwNDE3MDQwMDQ4WhcNMjYwNDE4MDQwMDQ4WjAzMTEwLwYDVQQD
EyhlNjlhYjMxYzZjNzlmOGViYWZkYmZiMDNhMDY0MjcyYzhjYjRlNTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv/xtcW6Psdzb2xN11lB94Inz1+A
QdyMmhu67d2WAv7PnDnv/RNGMYwqw2Ood6izjv8aT8KHFEbs8Sf8UapYOHKFbCH4
Dh57EHVMVIZfRruhRJWnkZZobNGc5F2pb/laGPXrlk27KPjpIW3Fy3dGXrIqSSFu
B748ImFvqvtn2OFWKbRcYfGVaOwuL53JkKGCOkfmzccodyl7h5JQ6B/TGnUl/rVP
KW96vrtO2LLDNTMjLOeiKk+DJbtrS216v7efY3dt8ynIf91hqZy26GpcC1Hkzn5i
38sIaVyjv0rnabC6WChRfml27sRT1M3L2AckPDt/dUQpQPrAy+F0lDu1mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOaasxxsefjrr9v7A6BkJyyMtOUtMB8GA1UdIwQY
MBaAFH35BKsUBmx6n+YaUh1UkqDlKWXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYt
M2I0NDVmMjlmNWI3LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYtM2I0NDVmMjlmNWI3
LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauKnyWzR
xAdrEi7lJDilMXXHqyG9CdBBzsdpUiBads0mnX2zxPzNXYKw9GyAS/hWY7ncoXFC
Hh4jDCumav1KcCQunYv8+IHXpO8PQYnGEeZlhhqmsf3L+F3Gfy7/+isAgpJ6B1RF
xpeXf9HZqZduRmGvyi3ACSat0ham4o+6fG2xCjYX/rMxEniQCSd8hRwboSjvsM0G
oVIJJGxrYtk2VV7shCVq+ev4T27qDnnY42n7N8ALVZ0/byoS1vis9fQfnGkWe5yN
jkjxXmjUcsyvVB16RwMFf2674H7PUsSFZjb49L+sC/XI2sXduwGY5LDvonvm5ZCP
3wnq2UOvHEUEzg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:02 2026 by rpki-client