Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: H88X2Ey2hHtdUn7DiuGpHjNUEljYTfblnMuLmJMdQik=
Subject key identifier: BE:97:65:72:5C:33:E1:0D:67:64:16:61:C1:CE:FA:99:A3:6C:BF:C6
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 019CAA218539B56991EDF7546AA48E7361B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 0900
Signing time: Sun 01 Mar 2026 16:00:49 +0000
Manifest this update: Sun 01 Mar 2026 16:00:49 +0000
Manifest next update: Mon 02 Mar 2026 16:00:49 +0000
Files and hashes: 1: 1W82at7mSiuchX3iCzO6G2WZfjs.roa (hash: OyjiciJl+n/aBNYiJh6cnpdIClbp0Z2IycUrjNfaQ1s=)
2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: j7906tsK7g7ir19wCEqICArGl8en18p+/RtNBk5cMaw=)
3: xsaLPUS_EPRPzM8NWjyE1aTWHX4.roa (hash: dBX6NfyeptV43b7aTbE31Dh+/tXWuq6hyAQ37G7Hits=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:85:39:b5:69:91:ed:f7:54:6a:a4:8e:73:61:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Mar 1 16:00:49 2026 GMT
Not After : Mar 2 16:00:49 2026 GMT
Subject: CN=be9765725c33e10d67641661c1cefa99a36cbfc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:26:3a:02:ab:8b:a3:91:60:05:99:54:55:
2a:66:ef:60:b2:92:be:3a:01:a6:b6:cc:ba:20:7d:
17:c1:b7:a7:4a:ba:c2:d5:e8:37:70:f2:9a:8d:cf:
54:ec:1f:83:9d:da:e0:bd:42:de:0c:f5:bc:a7:92:
50:27:c1:1b:4f:18:f4:8d:f1:d3:fc:f5:91:b8:e1:
e2:a6:eb:6a:da:a2:a7:19:3d:e6:2e:3b:a3:3d:78:
a2:ab:46:55:5d:68:7e:d1:14:fb:a1:2c:d6:2d:f3:
64:9d:ad:bb:09:f0:c4:7b:44:d6:2e:07:95:22:a8:
56:02:2f:69:b6:6b:e0:7c:d9:69:4a:ea:29:e4:c0:
e6:8d:a6:07:6e:ab:3a:e1:7e:d0:22:9c:8e:09:53:
8a:3c:34:3e:20:af:b7:77:56:c5:d9:21:15:43:9a:
20:3b:23:ae:cc:34:6c:1b:ce:9e:eb:e4:9a:da:6a:
87:67:e9:e3:96:29:04:e9:30:d9:47:76:81:76:cc:
72:d9:c9:83:18:5d:ec:10:95:5f:e2:20:f2:d2:ae:
2e:da:3a:20:2b:c1:46:96:59:59:c4:65:74:78:28:
28:45:65:76:e8:e6:71:e3:c8:75:56:58:ec:81:02:
c7:14:79:4c:f4:85:6a:4d:6c:dd:90:b1:2a:46:21:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:97:65:72:5C:33:E1:0D:67:64:16:61:C1:CE:FA:99:A3:6C:BF:C6
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:ba:49:2d:10:63:5e:f7:9d:4d:18:d6:ce:54:2a:6a:e2:58:
d9:d2:92:a1:0a:13:03:12:6f:dd:86:f6:0e:d9:fb:2a:3d:de:
38:e1:38:24:80:d3:63:1f:6e:6a:77:df:e4:5b:b2:7a:a5:58:
87:e1:6c:58:5b:0d:83:65:d2:5a:c6:f6:ff:86:80:37:8f:fc:
50:57:2d:c0:9d:88:65:27:e2:55:a6:a0:a6:c4:43:fc:5d:18:
c0:83:f8:42:be:b0:ca:d0:aa:74:8d:b8:a6:58:d2:e7:0d:26:
bf:18:ee:e0:c0:5c:09:d0:fe:d4:f4:86:4b:3d:70:27:b8:52:
8d:4d:ac:d1:8b:1c:20:52:3d:7f:f5:db:06:53:98:d6:05:f2:
7f:65:81:54:c2:36:5e:0d:16:15:71:73:3d:67:35:34:88:0a:
55:08:ca:40:92:fe:17:78:0a:2c:ca:82:a9:4b:54:14:bd:c8:
a4:c6:00:41:47:62:63:39:e8:49:7f:7e:08:6c:ca:2f:8c:1e:
a1:ca:d8:27:08:32:7e:97:37:7e:f8:7d:27:ad:38:6d:c1:41:
04:c0:86:cf:ea:f9:79:51:cc:bc:bc:48:da:35:04:93:22:9a:
44:c8:95:5e:81:d8:48:1a:99:8d:62:2c:58:1f:3a:08:d0:b8:
5c:f4:2f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:56 2026 by rpki-client