Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier: n13CS6cEupj4nu+/WGFpWc2/285+POz5LUbWRzNWktw=
Subject key identifier: 5C:0A:69:C5:CC:54:DF:56:19:86:69:80:47:A0:2B:E6:76:58:57:5A
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial: 019CA90F1CEF8644D18C8D1DA24DF27C1BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 11:01:05 +0000
Manifest this update: Sun 01 Mar 2026 11:01:05 +0000
Manifest next update: Mon 02 Mar 2026 11:01:05 +0000
Files and hashes: 1: AIp9_RM31K0wW6st5d3M-6Aj0t0.asa (hash: 1ayURs+KBoPQdd0mGltNGGJP12vnONErmbl882xqTKs=)
2: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: 7/CxYaHyXDMEymgi4Of1/zzM1Xctld2u1iaXy7j11wU=)
3: Y9TvfDZhPUnmvz8oc1zE1QlM5Js.roa (hash: LtiAP0I3hFV4EJMfOTIDWfqdKu5nKxB9W4yPTHv9hdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0f:1c:ef:86:44:d1:8c:8d:1d:a2:4d:f2:7c:1b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
Validity
Not Before: Mar 1 11:01:05 2026 GMT
Not After : Mar 2 11:01:05 2026 GMT
Subject: CN=5c0a69c5cc54df561986698047a02be67658575a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:57:24:e5:c1:ce:62:ff:e8:64:51:df:6a:
17:b8:65:08:37:f0:55:3f:0d:3d:6d:57:4a:c5:25:
a9:3c:78:95:e8:9c:60:04:86:54:76:28:72:40:88:
18:5b:d1:7d:c5:5f:0c:12:29:22:0d:e4:05:e1:af:
6d:93:2a:09:e3:ab:05:05:d5:12:fa:e2:b4:c4:a9:
5e:b1:e4:00:cc:dc:29:99:fa:b0:d1:22:96:e3:d0:
11:ef:3a:57:18:4b:ef:7a:c0:e8:f4:47:0c:21:dd:
ff:60:6d:86:9e:03:12:3b:5e:42:1b:55:e9:fd:5d:
8b:49:d1:18:e2:29:f5:37:03:5b:2d:a8:eb:d4:28:
54:f8:fa:2b:03:8a:23:aa:48:ef:79:7f:c4:34:7c:
79:51:38:04:e5:60:a8:a5:32:67:3d:52:63:ca:ac:
93:ae:9d:7f:3d:76:6e:e2:49:31:76:24:35:2f:36:
4d:11:0f:08:be:eb:62:04:76:9d:f2:7d:0c:b8:43:
7e:5a:75:1b:4a:ca:10:20:3b:52:b6:dc:0f:c3:92:
72:e6:dc:b9:2d:a0:5d:cb:fe:de:02:7d:0a:2b:8e:
57:7b:77:e9:02:99:99:d6:d1:be:30:cc:5c:b3:4d:
d4:a6:6b:a0:88:f9:bd:b8:6e:58:07:2b:0a:d9:66:
eb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0A:69:C5:CC:54:DF:56:19:86:69:80:47:A0:2B:E6:76:58:57:5A
X509v3 Authority Key Identifier:
keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:87:07:9f:d5:5a:3b:b6:8e:60:3a:04:23:1b:8b:da:19:77:
1f:c3:41:23:96:25:f4:4f:5b:82:32:27:09:98:7f:55:98:43:
30:1f:c6:f9:04:51:db:2d:36:84:62:d8:d6:4d:a1:cc:cc:1c:
4c:7c:da:b1:a8:b7:a3:d1:0a:96:f5:c7:1e:b8:67:71:b9:a6:
9f:41:22:00:b3:af:95:69:cd:58:f2:b0:c7:1e:44:61:4e:7c:
ec:e9:32:ef:10:6c:3a:bf:5c:2e:2e:fe:ad:23:f3:69:10:30:
9f:35:44:01:fc:eb:f0:06:60:0f:31:d4:7e:a4:aa:6b:54:07:
d2:ec:34:92:a0:1a:47:cc:61:97:50:80:5d:01:0d:f5:0c:0c:
26:8f:2c:f1:cb:1a:58:a6:89:10:60:b7:fd:d0:fa:32:b2:0c:
fd:71:ff:d1:51:61:40:fd:ec:bd:11:a7:33:d1:68:5c:08:b6:
41:24:a8:7e:c8:b9:bb:a5:58:13:75:27:83:e9:78:db:db:87:
43:68:6b:7f:a4:72:11:c7:67:82:68:cd:91:64:3d:80:68:5a:
b4:ac:85:b8:29:dc:14:51:ae:0f:a8:61:41:41:a9:28:11:fb:
61:4d:39:50:31:63:98:e0:a3:6a:dc:88:ce:90:fe:81:b8:ec:
a8:4d:ef:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:45:05 2026 by rpki-client