Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
File: FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft (raw, json)
Hash identifier: nDc4J/ZV3bJ7sMlMS89zV1vMX02xtpyy3XcXzvo/dMI=
Subject key identifier: 2B:F6:D7:56:6F:66:57:80:B3:35:62:50:92:26:F3:D1:31:34:09:D6
Authority key identifier: 15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
Certificate issuer: /CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Certificate serial: 019DA3AF4F306C406D493DBEF75BE6F9B479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
Manifest number: 0673
Signing time: Sun 19 Apr 2026 03:01:08 +0000
Manifest this update: Sun 19 Apr 2026 03:01:08 +0000
Manifest next update: Mon 20 Apr 2026 03:01:08 +0000
Files and hashes: 1: 5KwTCXGaEmxfineap3j8xC_SkiM.roa (hash: iGdOA9kuMVNiObXLidash5z/PzOjRgRSWtuN684ej3Q=)
2: FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl (hash: 2nja2PEud+AA8SG0KhN9oiVQAzLqfC9f67uA36cOHLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:4f:30:6c:40:6d:49:3d:be:f7:5b:e6:f9:b4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Validity
Not Before: Apr 19 03:01:08 2026 GMT
Not After : Apr 20 03:01:08 2026 GMT
Subject: CN=2bf6d7566f665780b33562509226f3d1313409d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:a9:d0:3d:e0:2d:40:a3:3e:8e:bd:79:8e:
4b:43:05:8a:70:69:fc:99:ab:17:3f:38:8c:6d:05:
2e:d3:32:72:6f:20:52:14:81:ac:cc:07:e1:31:16:
dc:c9:a0:54:ca:23:9a:df:87:37:12:8e:e7:bd:88:
0f:96:e4:96:36:db:87:dd:70:c4:da:ab:51:92:20:
28:1c:a2:35:69:49:af:c1:95:af:ca:b5:e3:70:be:
d9:b7:e2:f0:a6:e7:1f:cb:3a:d2:49:b8:a9:d7:8e:
3e:11:52:da:ee:0f:28:95:23:c1:08:bb:33:bb:fa:
18:11:c9:fb:f0:35:61:f0:8b:c5:b6:af:db:97:7a:
07:c2:6c:0f:d3:56:da:0c:02:a3:89:f9:2b:a2:34:
cd:53:6e:0e:47:05:f4:11:33:d7:c6:e5:27:9f:5d:
5c:a0:ed:dc:13:6b:52:76:f9:62:41:3f:6f:15:5b:
11:fe:da:d4:33:55:61:92:98:f3:90:dc:82:cd:40:
fa:5a:bf:8f:10:5f:e6:f5:8e:8b:be:ae:56:f3:6f:
fb:d1:24:09:e4:6e:ce:6f:62:eb:6f:4b:85:48:ec:
b7:0d:e2:bd:9e:71:c3:c7:d9:70:1b:6e:73:c2:b6:
4c:ea:88:2d:62:00:99:5b:6c:a8:aa:1b:a6:b0:3a:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F6:D7:56:6F:66:57:80:B3:35:62:50:92:26:F3:D1:31:34:09:D6
X509v3 Authority Key Identifier:
keyid:15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f3:62:f0:52:19:c9:f2:0c:91:6f:80:56:d8:7c:32:2c:0f:
7f:64:c3:67:63:ce:9f:29:69:96:75:8b:7b:92:e8:09:79:96:
7b:eb:1d:a3:fe:97:25:ac:bc:f8:a0:24:88:94:06:92:48:e6:
5a:7c:c4:ae:03:65:4b:ed:82:27:50:1a:fb:e0:12:2d:60:4b:
f6:16:9b:32:41:98:d8:9c:82:f7:82:d4:46:28:7c:ce:05:b2:
b2:66:5c:c6:da:8b:5f:40:9a:e3:c9:5b:0a:32:69:ef:d5:ef:
8b:86:e2:8d:7d:1b:72:29:5b:23:39:55:f8:f1:7b:82:34:5d:
b4:29:bf:b7:e8:17:36:c3:6d:18:54:f6:7a:29:4e:8d:19:1c:
fe:78:e8:83:e5:b7:f0:7f:38:09:f5:47:51:a4:e2:80:3d:8d:
fe:94:f3:05:ce:d9:1e:21:c8:69:b1:48:36:b6:15:f6:b2:f6:
ce:0c:c3:bf:6d:65:95:d3:32:9d:d9:ae:e7:bf:a7:ed:31:85:
77:d8:a9:93:11:dd:4f:46:b1:23:8b:11:54:3d:65:07:3c:1a:
1a:60:f5:b6:d1:30:c7:e7:df:3b:88:2a:89:4c:c1:fb:53:36:
9b:23:f1:39:62:2f:0f:1f:60:95:d9:2c:9b:74:f7:97:11:80:
d3:b6:03:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:11 2026 by rpki-client