
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File: Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier: lFDg5svq3Naem8qUeeuwOWglFdq62b6LA8ehmF87e9c=
Subject key identifier: 8C:D7:9E:FE:61:B0:D4:A8:5D:6C:9B:BC:43:64:3D:61:E0:8E:25:4E
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 01A1DD94D15262B4A312948547C89DF67ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number: 1B24
Signing time: Sun 15 Nov 2026 05:01:19 +0000
Manifest this update: Sun 15 Nov 2026 05:01:19 +0000
Manifest next update: Mon 16 Nov 2026 05:01:19 +0000
Files and hashes: 1: 1Yk3wLsSFqIceQz9okyZeYwSmUU.roa (hash: XuNQlAxXibSKzFFM3alxNEJs9SFC+R0bjfD85sz3lps=)
2: 2rNvx3N9jKo76idv1HsGHAcnnwk.roa (hash: eczcKAWkF5L/9LrtvswF4lmskTN97duPXq74deE4ZjY=)
3: 89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa (hash: gJOB7b6DwbK+XopIODXerFY7Dl/1i2NMhMaK+LjT9Lk=)
4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: /56i10fcfMzQjhpbSD8n91V6jlWdmnyJs5MmttIAfH0=)
5: I50Xdmc2vD7Yx16IjkscqSWGByc.roa (hash: RDUO+YNn3phd3/QIVNJIvwDgBTmufyoyrH3ITgLGClY=)
6: XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa (hash: eJBUNPOd5UiGzU5DENLhYsoGYS/OErO6pyZfCeZ9+DI=)
7: Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa (hash: yIwR/WFk+tPJZkyXjHRduYJCHgmO7w46d3yBhaQ1ujQ=)
8: ZmP2ZObUuyHKnhCp3yW1kDTHCgs.roa (hash: Vxkxt++oIeUph0DYbZ+8qTmMgtiVFmJg9DjiNvyd4sc=)
9: _AlvkImBx9fT_58A-ot68g3ZAWg.roa (hash: msAI/PDOB8nUEhgzHGsqD3SG29keFYFQtvJbuYgfbh4=)
10: wEsor2MQvIFzGGLmwfUZgbYVkto.roa (hash: asdhK4hFtXHqOa5kFwrF3vv+JxQieRNKL69DY1/povE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:d1:52:62:b4:a3:12:94:85:47:c8:9d:f6:7a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Nov 15 05:01:19 2026 GMT
Not After : Nov 16 05:01:19 2026 GMT
Subject: CN=8cd79efe61b0d4a85d6c9bbc43643d61e08e254e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9e:d9:4a:87:54:87:33:8e:98:b7:8b:d1:fe:
bc:76:86:a6:28:4e:4a:58:6c:d0:c9:64:96:ae:2d:
7c:7a:ac:6d:8c:92:e9:cc:e6:45:77:c0:f7:b2:77:
3d:d3:e2:c3:52:b3:30:f6:15:00:34:ab:85:34:1a:
b3:25:39:79:57:51:e7:a9:1b:18:ff:24:2f:5f:a6:
7d:ed:0d:3b:6c:b1:e0:af:3e:a2:86:eb:57:46:9b:
75:6d:a0:3d:cc:d7:01:8a:13:4c:e1:7d:b6:44:87:
ca:10:37:dc:c2:00:93:a7:db:90:a1:e5:c6:93:66:
66:85:6b:d1:54:60:8b:b9:79:df:8d:92:bb:80:62:
3f:17:46:01:dd:56:d8:7c:b1:95:85:72:9c:df:c1:
d6:23:9d:60:6f:99:a1:1a:95:f3:b0:c9:ec:c1:2f:
3c:88:47:65:3c:65:e1:b2:28:80:5a:59:4c:0f:cc:
e4:92:1a:32:a6:a6:1b:84:37:43:e5:f5:b5:4b:7d:
80:ff:98:bd:72:16:1c:08:96:24:98:95:41:91:33:
57:22:7d:ae:a1:d0:63:0b:63:34:41:03:c5:45:c3:
c0:af:35:34:f1:68:a6:8b:3d:89:79:d2:9e:93:9d:
23:9e:e9:09:2c:75:e4:3a:29:0d:06:d0:fb:2c:8d:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D7:9E:FE:61:B0:D4:A8:5D:6C:9B:BC:43:64:3D:61:E0:8E:25:4E
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a1:d4:3a:c3:26:38:7b:47:f7:11:24:9d:13:aa:30:10:29:
7a:d5:c1:7c:7d:10:2a:ee:ad:22:f9:48:b1:c3:d2:e2:11:71:
82:29:1c:c4:d6:29:87:f1:9c:76:40:9a:47:91:f2:60:ef:f7:
c5:1a:f4:8d:71:f6:ba:6f:d5:19:c4:44:f9:2d:c3:08:9e:3d:
6c:72:93:bd:13:88:57:79:fa:54:a7:76:e8:d9:48:c0:e6:11:
ca:fe:5b:60:23:44:7e:2e:b7:f3:b6:37:ab:d3:cf:a0:95:ce:
49:f2:31:5f:8c:36:ec:e8:09:aa:3f:d9:cc:b7:ee:19:04:2c:
96:09:77:3f:21:cd:7b:85:df:06:66:98:c3:43:8c:a9:ba:4c:
74:86:e6:6b:e9:f0:52:16:cc:b6:63:93:d6:0d:db:49:6e:9f:
ac:d1:25:85:58:c4:a0:94:5b:b5:c4:04:bb:01:c5:b8:b5:e2:
44:ea:5c:cf:76:8a:1e:e5:0e:5d:76:7b:7b:83:21:64:b0:93:
40:ec:6b:9f:17:24:7f:0c:7b:aa:20:db:9f:5d:0e:78:66:b3:
c0:2a:32:80:7d:77:9e:6e:eb:04:19:f5:fe:70:e1:4b:1a:6b:
88:ae:5c:22:48:5f:75:49:b2:80:95:0a:23:ad:b9:37:1d:7b:
b2:fe:72:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:09:00 2026 by rpki-client