Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: m7cPrrGrhZQVDoozrERSNka0swD6wnHmkmodY0x9xHY=
Subject key identifier: D6:05:D4:4B:42:D0:1D:A4:1F:41:59:09:06:C6:AD:73:57:0D:61:FA
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 019CAA5863FF70B02ABFA7B85CA89E990D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:00:45 +0000
Manifest this update: Sun 01 Mar 2026 17:00:45 +0000
Manifest next update: Mon 02 Mar 2026 17:00:45 +0000
Files and hashes: 1: Eo3L-3lPzBtGwSWfnMDXuxuu6nc.roa (hash: KayjLv1EKOAgncKf1kvYzIArRjjjosmZ3G86Nh3L73E=)
2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: YgQ5AxBvkaWlwBFeMQ+InTNCgC4TUJVZ/3cox2shgyY=)
3: uMgy9mSN4M6Tkk_b5KpTL6EISmU.roa (hash: iwm1H/C5w6/e24iulhDBPTWg/eHtZ2JKGfTV0V4+BsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:63:ff:70:b0:2a:bf:a7:b8:5c:a8:9e:99:0d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Mar 1 17:00:45 2026 GMT
Not After : Mar 2 17:00:45 2026 GMT
Subject: CN=d605d44b42d01da41f41590906c6ad73570d61fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:fa:d8:56:b3:fa:58:ab:92:8c:3a:89:8d:
da:5a:74:46:dc:d3:8d:37:d6:0c:1f:da:04:0e:65:
06:23:3a:6a:ac:29:ae:6c:0f:a5:63:cc:58:87:8e:
f0:e0:8f:4c:34:b7:f4:c2:1f:cb:1c:65:0e:c3:34:
6b:a3:c6:10:8e:0e:7c:94:e9:e0:ac:24:08:d4:25:
b0:9a:34:23:1f:96:ad:00:6e:33:07:04:7e:7b:0f:
75:5b:ba:d9:11:b8:ca:c0:c8:ce:8c:4d:fa:0e:cd:
2e:09:4a:7e:c9:54:25:e7:9e:f0:23:68:ea:d8:61:
0b:87:86:bd:a5:da:4f:18:f2:5e:06:46:00:d3:8c:
34:9c:7c:0e:8d:06:67:4d:5b:b5:c8:9f:dc:2c:24:
84:96:a7:d8:2a:1a:2f:54:2d:c3:70:d1:b6:ac:0a:
33:0f:65:f3:f8:81:12:ea:9c:a6:8b:a0:a3:65:03:
9b:f6:ed:81:a8:83:03:5b:48:1c:f6:16:0c:b8:ed:
a6:b2:11:01:ce:03:e2:d1:41:20:53:e5:35:9d:9a:
e6:81:4d:c2:37:31:a2:73:27:5f:bf:41:b4:d5:b6:
11:ea:a1:4e:97:4d:8a:51:c5:fb:0b:04:a4:50:4e:
b0:43:b0:2e:7c:42:18:50:6d:d7:c1:df:5c:92:44:
7e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:05:D4:4B:42:D0:1D:A4:1F:41:59:09:06:C6:AD:73:57:0D:61:FA
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1a:9d:d0:ac:b8:fb:1b:15:d2:64:29:9e:bd:90:99:72:60:
4b:1a:14:50:a0:e8:62:d9:1a:56:a0:c5:8d:77:15:a1:95:ec:
cb:e3:3e:96:be:40:7b:89:1b:f0:7c:cc:8c:1f:ac:ff:c7:d7:
5b:e7:c4:01:9b:5e:5c:23:18:39:5d:3f:f1:9b:7f:c4:58:36:
a1:b0:c4:74:e3:a6:75:00:c7:d1:7e:92:28:0c:63:41:8e:8a:
63:b7:7d:e8:a4:30:2c:44:f0:b0:62:da:bc:77:6c:83:fe:e3:
16:11:1f:48:f2:16:79:1a:67:36:e8:9e:aa:6b:c1:38:82:a1:
9c:78:89:ee:fd:c6:c9:c0:aa:0b:86:b1:a4:e8:19:2a:3a:d6:
59:49:0b:5d:e9:e9:c0:20:9a:dd:e7:82:f1:41:44:5d:7c:af:
3d:1e:f8:da:16:ef:ad:7f:36:c2:ec:9f:c3:4c:b9:44:08:67:
e6:e2:b1:ba:cc:66:22:e8:40:8c:92:8a:4a:18:fb:69:77:88:
fb:60:a3:aa:fa:a3:ee:db:92:1e:22:8c:80:77:c4:e6:b5:09:
00:d0:49:36:9f:05:56:2c:62:ce:d5:d9:09:12:11:87:e5:f5:
e5:71:4b:22:e1:a0:22:eb:7b:c8:93:43:fb:12:20:6e:63:3e:
f3:89:be:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:12:07 2026 by rpki-client