Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: /ozjC73d6DoAtJ2bMj0pKs8injhh3+MZ1LWqUdxiccM=
Subject key identifier: B1:B6:74:EE:5B:65:91:FE:26:86:04:F7:F9:78:CB:BF:FD:84:F4:1A
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 019D99D0D465F06D5A6365FE2BF34DB1D020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:01:33 +0000
Manifest this update: Fri 17 Apr 2026 05:01:33 +0000
Manifest next update: Sat 18 Apr 2026 05:01:33 +0000
Files and hashes: 1: Eo3L-3lPzBtGwSWfnMDXuxuu6nc.roa (hash: KayjLv1EKOAgncKf1kvYzIArRjjjosmZ3G86Nh3L73E=)
2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: HDFuWFJakl1ocFL//KBJ/xtuw/hcKauBbdxZ+yCx8Cs=)
3: uMgy9mSN4M6Tkk_b5KpTL6EISmU.roa (hash: iwm1H/C5w6/e24iulhDBPTWg/eHtZ2JKGfTV0V4+BsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:d4:65:f0:6d:5a:63:65:fe:2b:f3:4d:b1:d0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Apr 17 05:01:33 2026 GMT
Not After : Apr 18 05:01:33 2026 GMT
Subject: CN=b1b674ee5b6591fe268604f7f978cbbffd84f41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:75:1b:c0:6e:55:13:6b:b8:87:ab:85:a8:
a2:9c:43:5e:98:92:54:99:53:06:8d:b7:56:ec:42:
e1:93:4d:c5:30:88:b8:2e:b7:84:a8:e8:90:80:5e:
0b:3d:67:50:66:0c:cc:e8:d9:87:87:b6:ef:5d:e8:
49:4e:db:8f:5e:85:3b:37:16:bd:82:a3:7c:1e:9e:
8a:25:10:99:51:84:16:3f:d8:af:c6:07:0a:94:76:
d4:2d:18:52:1b:79:6c:9f:48:ca:62:64:06:35:fd:
9c:24:03:25:1a:56:de:ae:57:d1:34:a5:2d:31:12:
6b:04:2e:31:ef:72:f9:2b:b1:63:0a:49:9d:95:c7:
62:33:29:e9:99:a2:d4:d0:cb:66:5f:73:4c:ad:08:
85:eb:6c:a2:23:32:b6:73:31:7f:d1:73:25:57:54:
d6:03:6b:ca:3a:ce:f4:17:87:ee:9e:75:ed:37:56:
2e:9e:d0:ba:63:c1:9d:31:6d:c1:c1:53:d2:62:5a:
68:19:e7:66:cf:96:1e:b0:7d:8d:8a:d3:bc:14:e7:
83:8f:ca:b3:26:f4:b9:4b:fb:07:34:57:24:17:63:
e8:c7:dc:74:9b:aa:59:2e:38:28:7d:64:f7:a1:b1:
67:2a:1b:86:d8:9b:ad:70:c9:3b:94:d3:d6:ae:4c:
d2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B6:74:EE:5B:65:91:FE:26:86:04:F7:F9:78:CB:BF:FD:84:F4:1A
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:88:15:22:7d:e3:44:e0:e1:62:ba:6d:b5:9a:63:26:ed:0a:
97:b4:ac:c2:bc:45:6f:e0:98:45:57:4b:da:4c:a4:a5:18:15:
10:49:34:a6:47:8b:9d:10:be:fb:2b:ae:dd:65:68:b3:63:30:
83:b4:6c:75:14:8b:c1:a4:a4:2e:12:55:1b:20:e6:a4:ef:e6:
04:47:d2:cc:b3:ae:44:58:70:df:c3:85:f3:79:a9:ff:cd:6a:
63:f0:5e:f0:01:3b:90:86:80:8a:bd:13:c4:4a:d8:22:d4:fa:
45:58:5d:56:25:04:ea:41:f0:4a:bf:25:72:83:de:02:db:2d:
9c:5f:12:ff:ac:92:07:13:42:60:47:f8:70:06:db:02:3c:6e:
48:2a:f9:ad:08:24:67:82:63:66:69:80:57:77:3e:d1:d1:05:
25:69:c3:e9:fe:ea:85:25:3d:6b:de:ad:76:2f:fb:34:ce:4a:
18:e8:a1:88:00:74:99:f4:91:26:2f:b3:28:83:a0:e7:b8:d3:
9f:6f:df:96:aa:75:4d:59:66:56:c2:c6:59:b5:44:3d:72:c8:
c5:41:c9:81:93:19:66:12:c2:04:a2:f2:1c:7d:e3:28:24:aa:
24:c6:e1:0c:f5:36:2a:0d:10:76:9f:51:83:1e:bf:d4:14:1e:
3e:11:9c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:40 2026 by rpki-client