Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier: pQXVFnxCLpbA1kCMaC6uClGbwLwrb2ULm0/tbQZc1zs=
Subject key identifier: 48:CD:B7:FA:31:DA:04:84:AD:D1:83:22:02:CA:0B:88:07:04:02:5C
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial: 01A0C25684A6FE0D644D3F9D6FE17584F8B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 05:00:45 +0000
Manifest this update: Mon 21 Sep 2026 05:00:45 +0000
Manifest next update: Tue 22 Sep 2026 05:00:45 +0000
Files and hashes: 1: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: qDSTa9HITQu4Iqn5lZSbdkuhTh5bcVVkx6SR6XXbPH8=)
2: ZWBJxYdw0yqefP_6w5hTElTjn_w.roa (hash: ka3/3w04e1WBZfQiP+cb8ld/BzE1PNW9ESTV22owMjY=)
3: nQOGLsDTu8U8pFDRgHktBs12LXo.asa (hash: fwzFvF5IHbE+z4rN1nerwJCzmr6g02nn5C2pFL2CM0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:84:a6:fe:0d:64:4d:3f:9d:6f:e1:75:84:f8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
Validity
Not Before: Sep 21 05:00:45 2026 GMT
Not After : Sep 22 05:00:45 2026 GMT
Subject: CN=48cdb7fa31da0484add1832202ca0b880704025c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6b:05:20:9a:20:a0:12:16:9f:93:be:2e:d8:
8d:97:67:d9:65:44:db:51:ed:e1:c8:9f:b6:a4:39:
84:23:38:b7:f4:bd:5a:71:66:3c:af:ac:46:0d:8d:
14:24:ea:f2:e8:99:64:16:c1:8a:c0:02:43:3b:a3:
05:94:99:7c:50:38:61:43:40:f3:43:d5:39:0e:8f:
ae:cf:b8:a3:53:95:64:12:06:f4:74:e3:f2:f0:97:
dc:e9:96:20:7a:79:42:ce:69:21:42:85:7e:13:ea:
e0:11:a2:94:72:79:74:b7:aa:b3:6f:1b:82:47:be:
df:38:45:50:65:89:04:5f:0d:63:77:72:44:9c:5b:
bf:e2:98:ba:5e:d5:80:34:cf:68:5d:b1:99:ca:a5:
c5:45:d7:34:8f:40:99:f8:f2:c5:6a:8c:69:f6:8c:
03:7b:cc:0a:26:47:02:78:c3:dd:3b:1e:62:d8:26:
d3:b3:40:ec:69:44:d8:cc:41:8f:20:db:71:93:14:
98:61:80:9c:9a:f6:75:8e:8d:9f:32:07:98:1c:f6:
b0:6c:67:67:56:48:b8:4c:bf:06:88:14:4f:61:6a:
88:c2:66:06:12:5a:4e:02:59:7a:e2:7e:a9:17:81:
b6:b5:cc:53:e6:07:7e:19:89:91:bf:a6:89:75:e2:
8c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CD:B7:FA:31:DA:04:84:AD:D1:83:22:02:CA:0B:88:07:04:02:5C
X509v3 Authority Key Identifier:
keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:db:02:e6:b7:2f:58:a1:8e:c6:7a:30:2a:45:b4:c8:d2:3e:
29:be:23:51:f8:28:06:78:8d:0c:7a:90:93:7c:ae:08:e6:8a:
c2:73:40:93:ae:9a:47:62:11:0e:47:51:8b:72:f1:29:5b:f2:
32:ad:ba:b7:69:13:fb:9f:76:76:f6:28:a5:e9:67:cb:2e:b9:
6d:81:18:62:bc:82:df:5e:b4:43:2e:27:c0:2a:a7:d1:7e:e1:
64:03:db:8b:02:f7:c2:1a:ae:e3:02:58:5f:21:8e:48:93:6f:
61:32:6e:c3:76:97:b1:41:2d:93:71:d3:29:3f:36:8b:ea:01:
93:f6:48:c3:ce:ab:ca:0a:56:81:92:a6:74:38:99:6f:9b:42:
8b:69:89:05:5a:24:2f:ee:c2:6a:a7:44:e6:ab:6b:53:f6:05:
fb:d6:2e:e9:df:60:10:70:a9:a8:01:95:cd:1a:96:dc:19:03:
cb:1e:ff:62:57:0e:a0:d2:68:6a:7e:3e:4e:3e:71:4a:ed:cb:
98:10:e8:23:1a:98:77:38:7d:88:bb:31:ff:a8:10:d9:41:a1:
c4:48:56:4c:69:c5:a6:d9:ba:2b:b5:58:a2:51:da:9a:aa:94:
d9:68:06:6c:21:8b:30:82:df:60:d0:18:03:4e:d5:55:d4:fb:
d0:90:e7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:37:20 2026 by rpki-client