Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.mft
File: ffNCacFsPeOjQ42cg-jhnkeACUE.mft (raw, json)
Hash identifier: VWcPHENkSIeaCvEZXnO1FvvXPvSx8aLaDNQo9MCzgGc=
Subject key identifier: 42:11:3F:DE:3B:6E:4F:CD:D9:74:3B:CB:42:13:78:D1:06:83:D7:98
Authority key identifier: 7D:F3:42:69:C1:6C:3D:E3:A3:43:8D:9C:83:E8:E1:9E:47:80:09:41
Certificate issuer: /CN=7df34269c16c3de3a3438d9c83e8e19e47800941
Certificate serial: 01A10A030AE566852E0516569621A3866C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffNCacFsPeOjQ42cg-jhnkeACUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.mft
Manifest number: 0103
Signing time: Mon 05 Oct 2026 03:02:13 +0000
Manifest this update: Mon 05 Oct 2026 03:02:13 +0000
Manifest next update: Tue 06 Oct 2026 03:02:13 +0000
Files and hashes: 1: ffNCacFsPeOjQ42cg-jhnkeACUE.crl (hash: KWenbY7Bv1GfLQg3THnPp76cOEU5xQdVR7aIc9xRQmc=)
2: zpIhgfY5P1eLYLN8PYs34qx47Zw.roa (hash: yFovzfEIL2m5M2FK6tMYZvkFCHVcMoKHd18eXgobGqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffNCacFsPeOjQ42cg-jhnkeACUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:03:0a:e5:66:85:2e:05:16:56:96:21:a3:86:6c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df34269c16c3de3a3438d9c83e8e19e47800941
Validity
Not Before: Oct 5 03:02:13 2026 GMT
Not After : Oct 6 03:02:13 2026 GMT
Subject: CN=42113fde3b6e4fcdd9743bcb421378d10683d798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:f9:e2:91:a3:4d:d6:2e:40:ed:18:e2:89:
26:59:18:c9:30:e6:3e:a3:cc:eb:b9:f9:8b:ff:30:
14:c3:30:06:2a:10:4b:c8:8d:10:14:73:7a:25:0b:
b8:28:1c:3c:e8:ed:90:cf:8f:ee:ff:04:e7:71:db:
81:a4:dc:0c:ae:19:7c:92:8b:6c:e0:3f:2f:8f:b6:
a2:3e:4b:bc:50:88:c1:ba:57:e1:3a:93:94:99:2b:
96:d7:d0:ce:8c:6a:9e:1b:3b:f6:fe:2e:e5:c7:4a:
ec:ff:6e:d6:3d:24:0e:21:41:fb:16:12:ba:02:56:
7d:07:06:72:1d:0e:58:a4:1c:1c:3c:34:db:20:e5:
e4:aa:e8:4b:33:0e:83:78:52:70:6d:58:fa:25:53:
a5:05:ab:89:de:68:a6:23:4a:b7:53:38:cd:b4:7d:
46:c1:9c:59:b0:b2:53:00:1c:52:05:20:86:7c:bd:
bb:24:bb:a2:72:94:40:24:8d:5f:7c:0b:28:ef:dd:
a2:47:34:c8:14:82:96:e7:8e:e8:f7:f2:c7:14:66:
be:c2:5a:f7:6a:22:5b:92:df:02:01:8b:8c:76:83:
00:0d:08:8a:dc:25:2f:48:86:5f:7b:7d:02:5e:fd:
07:cd:89:b5:88:f6:22:72:06:52:7f:19:7f:88:51:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:11:3F:DE:3B:6E:4F:CD:D9:74:3B:CB:42:13:78:D1:06:83:D7:98
X509v3 Authority Key Identifier:
keyid:7D:F3:42:69:C1:6C:3D:E3:A3:43:8D:9C:83:E8:E1:9E:47:80:09:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffNCacFsPeOjQ42cg-jhnkeACUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b5:09:37:f7:6b:82:9b:89:c0:6a:6c:64:1f:30:4f:17:93:
bb:3f:50:93:27:60:df:81:f5:db:c4:47:ed:77:f2:33:ac:ee:
9a:f8:c2:a5:2b:2b:1b:cf:af:1b:0c:57:a9:46:85:50:f4:9e:
ea:95:c5:22:c8:f0:ba:89:ad:51:fe:cb:d2:67:ce:58:dd:34:
d2:e4:8f:e0:f6:14:b6:39:9e:61:b8:0b:6a:7c:88:e5:27:4c:
52:ff:1b:79:1e:5c:e3:9c:46:50:a9:29:a7:a6:c6:93:15:b6:
56:88:72:0d:44:df:ac:55:97:3e:d8:53:df:87:a3:60:5e:2c:
59:fc:90:74:27:b9:0c:c3:a8:ed:19:4d:6d:de:6b:1c:85:68:
fd:60:99:23:5c:21:f6:c3:21:fd:75:ed:1a:9e:23:cb:4a:c8:
aa:99:35:08:d0:04:e5:35:60:63:63:67:0b:f7:4c:7a:83:8a:
8d:75:cb:50:58:2a:3e:fd:88:17:23:85:33:01:60:6b:29:45:
8c:7a:2a:73:1e:45:c5:76:e0:27:3a:db:e0:5d:b5:ae:b0:a2:
52:a2:60:93:f9:e9:22:77:86:ff:78:17:e4:cc:1b:f9:c1:93:
0e:9d:45:f4:64:01:8f:a4:23:29:2b:26:aa:92:23:c1:83:3b:
50:00:50:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:19:45 2026 by rpki-client