Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: UKZGUtY/1mTo8kbPrgSUIYWs8zmfXNeYP8WH0Y9dAko=
Subject key identifier: B4:2B:1E:64:11:BF:F5:C3:E5:41:9C:89:F6:95:18:28:D3:18:8B:6D
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 01A0DA28631598CA68FA2635325424B3A7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 0B2E
Signing time: Fri 25 Sep 2026 20:01:14 +0000
Manifest this update: Fri 25 Sep 2026 20:01:14 +0000
Manifest next update: Sat 26 Sep 2026 20:01:14 +0000
Files and hashes: 1: 1W82at7mSiuchX3iCzO6G2WZfjs.roa (hash: OyjiciJl+n/aBNYiJh6cnpdIClbp0Z2IycUrjNfaQ1s=)
2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: gMP8PyT8mjE0Ec1yA1h5iJFj4szrskWq/wipBIuaBD0=)
3: jFw457Jipvup6yZKtXR8tj_7Yhg.roa (hash: FJJh85N3yB8rz50G6DYLIKGlO6AtACjKyBi0U99WQzc=)
4: xsaLPUS_EPRPzM8NWjyE1aTWHX4.roa (hash: dBX6NfyeptV43b7aTbE31Dh+/tXWuq6hyAQ37G7Hits=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:63:15:98:ca:68:fa:26:35:32:54:24:b3:a7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Sep 25 20:01:14 2026 GMT
Not After : Sep 26 20:01:14 2026 GMT
Subject: CN=b42b1e6411bff5c3e5419c89f6951828d3188b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:44:b9:ec:6f:a8:e0:ee:f9:0c:f9:9e:e9:00:
b9:08:97:00:c1:ea:a0:1e:ae:ac:c5:41:26:7e:c7:
8f:32:b6:eb:f4:8a:41:15:30:ca:71:14:c6:d1:c8:
a5:ca:c5:88:e5:6c:62:97:3c:8a:c7:98:41:aa:5c:
b0:89:f4:2a:01:3b:bc:b7:0b:28:13:8b:55:4e:9f:
b4:8c:6f:74:a7:ab:9a:ae:71:c3:fb:2a:29:26:0f:
7e:d3:59:8e:f3:62:fa:fb:94:7d:c9:1c:7b:65:3b:
02:98:aa:27:46:20:92:35:16:f9:43:41:82:fb:5a:
31:82:39:a6:d5:09:7f:86:68:f8:3f:bf:a2:08:c7:
32:eb:b5:a6:ba:bd:52:09:28:4e:d9:fd:69:c0:fb:
c1:ab:7d:c2:db:e8:8f:61:ef:58:7c:9b:0c:a0:2f:
93:8c:cb:d5:f6:7e:6d:97:93:39:59:94:6a:59:9b:
46:2a:f7:8b:83:4e:54:f8:c1:c3:f9:57:61:c5:0e:
fe:c9:53:d0:76:7b:18:46:d8:42:02:a5:b8:b1:cc:
b1:37:75:ad:8c:3f:29:c9:dd:f5:0a:73:16:fc:dd:
43:98:aa:e3:6b:95:b3:14:35:09:c4:d7:7b:63:f7:
9e:54:f3:87:dc:ac:2e:85:92:fd:0b:0d:61:ea:d2:
8b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2B:1E:64:11:BF:F5:C3:E5:41:9C:89:F6:95:18:28:D3:18:8B:6D
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6b:7e:fb:e1:d2:7d:8e:c1:a2:d1:38:e2:79:28:ab:bb:aa:
22:c0:a6:00:57:7f:b4:4f:88:73:69:7f:4d:8a:49:d1:11:94:
84:b8:4a:c6:57:b2:43:52:e2:0d:65:ad:21:2f:f0:bc:87:06:
96:db:60:14:53:dc:5d:cb:2b:53:0c:8b:e6:0a:b6:29:3a:da:
c3:6d:f5:82:61:2f:a3:13:70:ee:be:f9:5c:ff:19:2c:93:8c:
7d:4e:df:a9:8e:09:db:4d:2f:be:af:71:80:a0:dc:66:2f:41:
7d:7e:d0:98:08:60:02:12:3b:a1:aa:ae:1a:f9:d8:aa:f0:3e:
99:5c:97:2a:05:ce:05:97:e3:cf:29:b2:ac:c1:3b:85:5d:7b:
38:54:23:d9:22:56:5b:38:86:28:7e:27:73:29:51:52:7b:b4:
d3:50:45:01:e6:ff:81:d4:18:bf:3e:48:36:dc:b1:3c:0f:98:
d7:21:c4:d9:eb:85:b8:9b:28:22:db:76:0a:7d:2f:01:e1:6c:
48:8a:27:0a:b3:d2:90:3d:5b:09:7c:4c:2e:88:00:fe:4b:0b:
89:0d:b0:3c:2b:94:fe:af:78:7d:57:51:89:ff:db:42:27:00:
ae:d9:f0:eb:df:1d:e6:0c:b9:9e:3b:23:b2:fb:d6:33:4d:14:
a5:fa:c6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:25:38 2026 by rpki-client