Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
File: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json)
Hash identifier: jU1jB8m+alacPYOiCBI6ByCyZQ1Wslq7LeXKsQgpM0Q=
Subject key identifier: D7:CF:2C:32:A9:FA:3C:6B:FA:B1:A1:FF:D9:81:84:5A:17:3A:D3:84
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial: 01A0C3A02BD3A6581446E39DDAD8F9F39951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
Manifest number: 1A6E
Signing time: Mon 21 Sep 2026 11:00:49 +0000
Manifest this update: Mon 21 Sep 2026 11:00:49 +0000
Manifest next update: Tue 22 Sep 2026 11:00:49 +0000
Files and hashes: 1: 1Cy83jCl7kBGDNxqyufm78TXI0c.roa (hash: FaDgiWoM3k5efyXcsEBG7laf/bYAZ1lac2yh8oD/pOo=)
2: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: WjEFWrTyTFCNWeIoHCQGQrW0N0tt7Tyxsfjvc0zF4hM=)
3: Gcgb4fKcIntpFBriNxDOmx88O0w.roa (hash: HNBuGy0i9eOtKQLzxEokhQmLu275mcy6wh+QVvZD+oA=)
4: JGYsNj9H1c_XLokkyRvioL1Icvs.asa (hash: FsSg7M51c+/dkmTYhVW+tHhpAYi4anL4jcOUSvzQsF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:2b:d3:a6:58:14:46:e3:9d:da:d8:f9:f3:99:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
Validity
Not Before: Sep 21 11:00:49 2026 GMT
Not After : Sep 22 11:00:49 2026 GMT
Subject: CN=d7cf2c32a9fa3c6bfab1a1ffd981845a173ad384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:77:2c:d4:dd:29:93:69:66:3f:7a:cc:56:d1:
4b:f0:0a:e7:b1:a7:b5:bb:74:aa:88:21:8f:fb:f4:
78:2f:17:c1:c6:90:db:37:a6:8f:ae:5f:20:87:58:
df:99:6b:db:e1:65:c8:4e:cb:58:de:1d:0b:c3:bb:
fe:35:ea:59:e5:83:91:3a:92:0b:60:0b:c2:37:71:
04:24:c3:74:32:06:83:e1:8e:bb:86:a8:cd:c6:80:
84:65:f3:38:70:31:c4:c4:2f:b1:af:92:34:ba:54:
93:6d:f6:db:19:65:69:21:c6:ab:9e:f3:88:b1:94:
9f:9d:a1:5b:49:ba:84:0d:30:87:8d:df:2e:93:3f:
48:68:87:0b:ff:c3:c6:fa:3f:59:7e:75:81:51:8d:
96:71:48:e1:07:33:b7:79:c6:b2:bb:c0:3b:f8:25:
89:e8:5a:b0:ff:be:7b:6d:b9:71:02:af:98:1a:35:
d2:70:ed:8e:03:3c:fd:82:5b:88:5f:8e:d0:bd:e2:
8a:55:3c:de:b9:de:9f:1c:2c:c2:85:fb:5e:21:5f:
33:ce:ac:9f:d0:29:61:bf:f7:40:bd:cf:6b:04:13:
df:52:de:db:d2:32:40:02:f6:20:f9:1f:81:04:f7:
dd:e4:5f:f7:8f:bc:a9:1f:62:cf:dd:ae:3c:0c:4b:
ee:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CF:2C:32:A9:FA:3C:6B:FA:B1:A1:FF:D9:81:84:5A:17:3A:D3:84
X509v3 Authority Key Identifier:
keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e7:a7:57:e7:ee:82:e3:23:5a:91:e3:b6:c9:68:f4:1b:21:
f1:d9:06:a1:a5:58:8a:08:79:04:ec:d1:fe:c7:3c:1d:24:77:
0a:59:39:9b:b4:a5:da:a2:b8:e2:b0:c2:bc:af:c9:f3:5f:0e:
fd:9c:0a:2a:26:3c:a1:92:73:1b:da:8d:81:32:3d:9f:e1:15:
cf:0d:0c:0d:d9:ac:8e:bf:59:73:c2:a4:c6:ff:1b:7a:ed:f7:
05:e6:6b:f2:63:02:65:9c:2c:9a:15:26:87:a8:25:ad:dc:09:
b1:79:b5:4a:3f:d2:a4:61:75:d0:23:d2:46:d5:1a:15:2d:41:
e4:83:9d:2a:17:d7:fb:d1:15:cb:09:28:c0:45:45:98:d6:57:
52:46:57:3e:af:9f:9f:8e:78:23:ac:57:00:d0:07:69:ea:33:
da:2f:1d:a3:ca:9a:d3:36:04:4f:31:95:9a:c5:d2:91:b9:9f:
ea:e8:ab:22:6e:c1:20:77:06:43:59:d4:a1:bf:92:d9:f2:a6:
6b:a0:1d:7e:c9:e1:15:53:81:6e:37:bf:ea:9c:ff:ca:be:c9:
0d:d9:e7:10:78:0d:26:8c:bd:ad:81:71:4a:6a:98:40:e9:6b:
b3:17:c3:52:53:48:3f:2c:2c:ff:b2:93:3c:e9:d3:6d:ba:d9:
1c:c1:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:57:34 2026 by rpki-client