Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.mft
File: ffNCacFsPeOjQ42cg-jhnkeACUE.mft (raw, json)
Hash identifier: E6a5mggGfY93RbMvzVESHUKH/0z6AbGECbYpArCklIU=
Subject key identifier: 65:08:55:FD:D3:4B:55:D1:73:14:B0:D5:48:DD:C4:B8:6F:B6:AA:C0
Authority key identifier: 7D:F3:42:69:C1:6C:3D:E3:A3:43:8D:9C:83:E8:E1:9E:47:80:09:41
Certificate issuer: /CN=7df34269c16c3de3a3438d9c83e8e19e47800941
Certificate serial: 019FAA884FCB8C7EF75FA9537923E7CBE70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffNCacFsPeOjQ42cg-jhnkeACUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:27 +0000
Manifest this update: Tue 28 Jul 2026 21:01:27 +0000
Manifest next update: Wed 29 Jul 2026 21:01:27 +0000
Files and hashes: 1: ffNCacFsPeOjQ42cg-jhnkeACUE.crl (hash: xdvwI/SMv16Fgh/4c7dkyt7zas56NGFyeLWz1GPIM5o=)
2: zpIhgfY5P1eLYLN8PYs34qx47Zw.roa (hash: yFovzfEIL2m5M2FK6tMYZvkFCHVcMoKHd18eXgobGqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffNCacFsPeOjQ42cg-jhnkeACUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:4f:cb:8c:7e:f7:5f:a9:53:79:23:e7:cb:e7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df34269c16c3de3a3438d9c83e8e19e47800941
Validity
Not Before: Jul 28 21:01:27 2026 GMT
Not After : Jul 29 21:01:27 2026 GMT
Subject: CN=650855fdd34b55d17314b0d548ddc4b86fb6aac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b0:e9:a9:ff:e0:f6:24:0f:29:29:d4:fa:7e:
a2:ab:37:f4:0f:b0:3b:05:c5:8b:8c:b3:65:d9:15:
61:ff:53:4f:80:49:ed:68:cb:c4:71:cc:e4:b2:e3:
bb:f1:18:d2:78:76:53:3e:e6:03:32:03:14:c9:de:
a4:74:b1:9c:34:1c:ca:77:1a:37:cb:62:e4:26:7f:
30:69:07:8c:e1:a3:1e:f7:22:d0:ce:4f:52:31:1d:
3a:fd:d0:10:99:61:5d:41:60:a5:0c:68:2a:67:80:
89:1d:78:af:3e:ac:ca:ad:fa:54:be:ef:c2:75:10:
08:21:aa:29:91:e1:b5:59:17:e1:0c:20:bd:59:e6:
ac:e3:0e:b9:0e:90:2b:3c:93:c0:7a:dd:2b:1d:8f:
d1:be:ea:e2:21:5b:eb:bd:0b:5e:74:85:6c:fe:17:
52:37:82:d1:41:18:58:df:90:21:fb:70:58:a7:50:
fd:82:68:73:7a:56:e3:ec:8c:b1:13:88:3c:27:a7:
e7:fe:57:71:5a:8c:17:e6:3a:41:5a:11:c9:b0:3b:
9b:9c:2c:02:a1:b5:f7:17:53:49:15:66:f8:c3:77:
28:98:7e:da:7d:66:92:43:62:ce:3c:bf:60:e9:54:
cc:31:0f:88:2c:70:27:ed:1e:b3:d8:f9:c9:af:96:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:08:55:FD:D3:4B:55:D1:73:14:B0:D5:48:DD:C4:B8:6F:B6:AA:C0
X509v3 Authority Key Identifier:
keyid:7D:F3:42:69:C1:6C:3D:E3:A3:43:8D:9C:83:E8:E1:9E:47:80:09:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffNCacFsPeOjQ42cg-jhnkeACUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bf:c0:57:77:7d:fb:eb:98:a1:db:6b:c9:ee:c0:a2:81:34:
fe:e8:b0:df:5b:ae:a7:2b:78:73:fa:84:1f:8e:32:f1:d5:60:
a1:73:11:79:42:c6:ce:cb:83:4c:46:72:aa:2e:df:57:bf:7c:
bb:bc:90:e4:63:7f:4a:d6:65:35:7c:54:7e:35:46:a6:b0:9e:
11:31:52:11:55:32:df:57:d3:e7:31:01:e4:f0:2b:d7:61:ce:
e3:30:53:56:87:a5:a9:d7:4f:0c:4c:28:5e:27:7a:24:1e:8d:
ea:ac:6a:c2:1f:da:39:28:67:85:75:9f:b7:f1:53:5a:09:d9:
e8:8a:da:3e:2f:92:69:c8:90:15:dc:94:d7:ac:22:51:3b:a7:
4b:69:4e:bf:42:1b:1a:98:c2:40:e5:54:52:4f:bf:a5:11:5b:
3a:63:e1:18:43:b0:97:24:7c:9f:d5:43:09:e7:e0:ce:5b:65:
5f:29:73:c3:a8:e0:17:31:e8:85:93:26:c1:02:f9:2e:1b:e4:
e4:5c:a1:de:f0:ca:d0:7c:15:09:f2:64:14:e3:0d:a8:9d:c5:
f6:87:2e:94:67:06:d8:cc:32:94:2c:f5:c1:af:cc:8d:80:f7:
14:a7:0e:08:fa:d2:c8:04:63:83:90:0d:33:bf:65:bd:8e:40:
ef:96:fc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:38:23 2026 by rpki-client