Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
File: fffP1siCamf2QqNz0TGVUwjZwco.mft (raw, json)
Hash identifier: xFmHuJ+8AI4zZzccp765ULvEIgd8ZiOz9DUkj8Bbj6M=
Subject key identifier: 6D:9C:EB:1A:79:17:59:3D:82:75:4B:BB:66:9A:8E:F5:81:CC:2F:7D
Authority key identifier: 7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
Certificate issuer: /CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Certificate serial: 019CADC767204AC86AD2ECB2B1FE3E1414A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
Manifest number: 170B
Signing time: Mon 02 Mar 2026 09:00:52 +0000
Manifest this update: Mon 02 Mar 2026 09:00:52 +0000
Manifest next update: Tue 03 Mar 2026 09:00:52 +0000
Files and hashes: 1: 0KNfQnYQ6OcbM3T_AT3Muh7GC10.roa (hash: PjhLMPqDKMFvKvIdwwT6W9RFU/bl/Jjyt27qCybKXQU=)
2: fffP1siCamf2QqNz0TGVUwjZwco.crl (hash: piuSQV2a60TFrJBgL2HHeCJVoHRTWW5+yxcboVH35co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:67:20:4a:c8:6a:d2:ec:b2:b1:fe:3e:14:14:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Validity
Not Before: Mar 2 09:00:52 2026 GMT
Not After : Mar 3 09:00:52 2026 GMT
Subject: CN=6d9ceb1a7917593d82754bbb669a8ef581cc2f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:05:15:a8:f0:94:c1:3f:5a:b6:12:d5:2e:
53:a2:2f:3e:3e:c0:aa:37:2a:5e:81:1c:bf:13:de:
5f:93:25:f2:aa:ed:c1:80:18:35:4c:c1:48:fa:19:
0a:2d:e7:2c:a9:ee:a2:99:b0:e3:54:24:b9:25:85:
b8:87:ae:58:bb:b6:33:f6:49:2e:86:21:12:e1:f7:
db:09:2e:be:22:ab:16:28:75:d0:eb:a5:51:aa:a8:
57:35:34:a7:ce:17:4c:c7:d7:ed:e3:f4:9a:88:cc:
5e:a6:18:24:4f:d6:78:f2:78:59:46:75:d9:de:27:
01:f3:06:c7:e9:d3:45:a7:1e:3b:31:a5:c1:59:da:
86:33:ab:f8:0d:88:55:7e:b8:99:d3:b4:da:68:66:
e3:2d:21:dc:ef:e8:06:2f:44:38:33:39:8e:28:d0:
b6:f0:9e:5c:a7:09:28:4a:8f:b3:17:bd:8d:04:19:
78:ad:69:b9:14:f5:9d:96:66:3b:0a:49:76:57:67:
33:1f:db:65:b1:d7:0d:dd:36:cb:e6:e0:6c:72:7b:
79:b5:7d:df:5f:00:3d:1a:2e:3a:66:8c:d7:6c:01:
32:e4:42:93:af:9b:59:6a:7e:ce:a9:c9:96:74:77:
97:3f:ed:31:2b:80:17:38:85:8c:fd:33:42:5c:6c:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9C:EB:1A:79:17:59:3D:82:75:4B:BB:66:9A:8E:F5:81:CC:2F:7D
X509v3 Authority Key Identifier:
keyid:7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b6:ef:07:da:4d:17:7e:b7:0d:b7:0b:c8:b8:6e:a8:27:84:
d9:ba:f5:3c:60:0a:12:ed:bc:47:6e:8b:20:54:4c:4c:1e:64:
5d:6f:41:b4:d3:1f:6c:48:1a:da:71:a0:88:77:ec:4d:92:f2:
10:14:64:f0:b2:0a:ff:18:ee:01:8d:29:33:90:84:dd:74:6c:
88:9c:b9:c5:00:29:4f:c9:69:55:16:6b:d5:9a:cd:2c:29:91:
ae:7f:4c:ec:cd:1a:54:99:2f:a5:33:45:6c:ff:05:92:de:26:
e1:00:bc:09:1a:de:14:7a:e6:1e:f1:5b:ca:5c:86:41:05:96:
56:36:ed:49:f6:f8:03:7d:b8:e7:c2:cc:81:d5:e7:b7:90:54:
de:19:d5:a8:67:76:9a:77:53:0f:63:38:8c:10:7a:56:8b:b2:
a5:28:ac:72:44:61:2c:fa:cc:7e:b6:ea:45:73:cd:53:4d:10:
c3:f2:fb:c6:61:d0:98:cf:8b:f7:6b:bf:c0:ef:0a:e9:6e:95:
ab:98:a1:25:f8:1a:13:4d:c2:03:70:40:d2:12:8e:d1:1c:32:
ef:e2:1c:fc:9d:69:a4:6a:10:b1:39:9f:8c:44:c1:32:95:0e:
ce:30:37:a6:08:cc:48:5e:41:61:1b:2d:1b:06:51:bd:37:75:
eb:c8:f9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:18 2026 by rpki-client