
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
File: FfXEJ7UOueKq98WswbIoljOrU1M.mft (raw, json)
Hash identifier: GqZnOOceiBDVo/GwI83qM3BAz36c/a/jiLYtWIppuVg=
Subject key identifier: 12:93:CE:62:85:6D:70:C1:9E:FC:E5:A0:13:C4:F3:A9:96:DF:77:6A
Authority key identifier: 15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53
Certificate issuer: /CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353
Certificate serial: 01A0D804C9727AF631A0AB3F074D3FF50E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
Manifest number: 035D
Signing time: Fri 25 Sep 2026 10:03:07 +0000
Manifest this update: Fri 25 Sep 2026 10:03:07 +0000
Manifest next update: Sat 26 Sep 2026 10:03:07 +0000
Files and hashes: 1: FfXEJ7UOueKq98WswbIoljOrU1M.crl (hash: AuhWpA7s6JPy+0QRuO6oXUIIwDIBrMNJqHn5zYVGPeM=)
2: QB6IjG25mOKNaxsVjuB38lmC2hs.roa (hash: R3eK+TP7VbOaPSIht9zdm6FFs2zJ4wqUGZxjbXUn4oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:c9:72:7a:f6:31:a0:ab:3f:07:4d:3f:f5:0e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353
Validity
Not Before: Sep 25 10:03:07 2026 GMT
Not After : Sep 26 10:03:07 2026 GMT
Subject: CN=1293ce62856d70c19efce5a013c4f3a996df776a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:a4:68:de:31:ac:4b:de:4f:0b:49:81:41:
5c:a4:41:d5:b4:7c:6a:cb:c8:f4:49:25:20:7e:b2:
20:93:cb:5a:88:b4:b7:0f:63:ad:1a:5e:17:f7:e9:
e9:bb:ab:41:66:c1:bc:aa:70:05:6f:24:77:74:85:
f1:c9:5c:6e:99:0e:65:04:92:03:98:b8:7b:74:4c:
ff:c6:f8:31:16:1e:4e:75:33:a8:74:1b:0a:94:63:
29:b5:a3:f5:f2:79:e1:13:1f:d4:2d:12:e5:06:9d:
05:50:16:a3:c0:7b:80:a6:c2:a2:e6:31:ad:19:a3:
5a:7d:f6:ff:19:46:85:f0:b3:b7:4b:6c:c8:dc:05:
93:05:9f:40:88:d3:6f:aa:06:1a:fc:67:4e:63:14:
5f:85:87:f1:cc:c6:37:7e:9e:2e:ec:f7:f1:45:de:
f7:83:bd:44:ec:ef:9d:aa:63:08:a2:a3:02:bc:b6:
0c:24:c9:86:f9:76:2e:2b:30:9f:a8:fd:1d:f1:f6:
d7:a7:3a:cb:15:f7:70:57:e8:b3:a1:34:2d:61:3c:
78:83:fe:d4:33:d0:bc:d8:f0:d8:1d:d2:4e:46:7b:
b1:fc:2c:bf:56:ba:62:83:b0:c3:ff:72:96:b1:4d:
d1:d1:70:ff:28:8e:63:8f:cf:15:e0:24:80:d6:9e:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:93:CE:62:85:6D:70:C1:9E:FC:E5:A0:13:C4:F3:A9:96:DF:77:6A
X509v3 Authority Key Identifier:
keyid:15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2f:99:75:29:99:5d:6f:d9:de:88:b5:fb:f0:e1:ca:16:a5:
26:ed:e0:96:05:c7:28:60:2c:e8:e1:18:59:5a:68:f1:fe:1e:
9d:2c:0d:ba:4d:98:27:6c:df:af:93:da:6a:cd:07:63:ca:9b:
06:62:62:3e:56:81:d9:87:d5:c9:bd:fc:01:3e:52:17:86:c5:
0a:8f:d0:9f:90:e9:38:23:fe:3a:ad:06:18:6a:d9:a1:29:17:
81:a5:59:d0:f0:9b:3a:66:b4:23:ca:21:c5:5a:72:a6:10:94:
f0:5f:d1:b6:4c:bc:bc:44:6d:25:1d:0d:e7:e7:d7:65:d5:b3:
0c:da:9f:00:10:f2:bb:6c:4e:87:2d:88:68:1f:39:9f:5b:13:
53:f0:49:d7:dc:45:2b:cf:2e:09:7e:6e:5e:3f:58:6e:7f:24:
14:65:74:ee:f5:a5:6b:d5:37:92:05:e5:81:21:15:98:d6:f2:
73:d0:26:aa:ea:1d:cc:db:d0:6f:4c:66:fe:02:5d:50:02:84:
13:95:ae:bc:aa:b8:ab:e3:37:de:f8:15:b4:44:b1:97:6b:e6:
d8:77:30:3d:27:f8:72:8d:f6:2a:39:0e:2f:a3:93:f3:8a:65:
7c:a3:47:42:95:42:35:a9:a1:4d:8f:60:f4:47:b2:a0:0f:b3:
7c:ea:05:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:01:16 2026 by rpki-client