Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: CxaorPLXrCnpLnGZrzK/wxEhNEBHsghlJKiFSoJ9xiE=
Subject key identifier: 18:42:D9:EE:38:09:27:A8:AD:72:FC:D9:90:4F:1C:CF:F3:AC:CC:15
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 01A14DD0AC9D2AA9F6558E298582D7D2C11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 1AAE
Signing time: Sun 18 Oct 2026 07:01:23 +0000
Manifest this update: Sun 18 Oct 2026 07:01:23 +0000
Manifest next update: Mon 19 Oct 2026 07:01:23 +0000
Files and hashes: 1: Eo3L-3lPzBtGwSWfnMDXuxuu6nc.roa (hash: KayjLv1EKOAgncKf1kvYzIArRjjjosmZ3G86Nh3L73E=)
2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: 87qGDQHJRJDeQOvCj21iH7kOeG8TM+xTlOJovFJbqQs=)
3: PEiD2fXY8MTybS2F517gf0un5yo.roa (hash: QNquho6Cc22D4ZGcJ11pg3kLKNMl0b+Ez3eOGTC66KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:d0:ac:9d:2a:a9:f6:55:8e:29:85:82:d7:d2:c1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Oct 18 07:01:23 2026 GMT
Not After : Oct 19 07:01:23 2026 GMT
Subject: CN=1842d9ee380927a8ad72fcd9904f1ccff3accc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:7c:0f:be:ce:a3:7a:c1:99:9d:84:11:78:
24:dc:86:63:e6:43:87:31:cd:e7:5e:3a:f3:bb:18:
7f:7a:ad:00:4b:be:0c:77:42:c6:58:ca:ee:0d:b7:
b0:cc:0b:16:87:e5:c5:1f:52:24:a7:7e:de:22:04:
0c:81:c3:22:06:7f:6a:79:a3:f6:ec:9f:70:ac:b8:
8f:da:88:91:b0:e7:53:f4:c5:b3:12:e5:e7:4a:b3:
5a:12:3b:e0:08:85:72:40:a0:ff:a8:24:75:e0:6c:
a7:d1:10:b7:25:a7:5d:08:5c:a4:5d:d6:2f:ba:27:
a2:bd:1b:4f:3a:00:9e:ee:25:18:51:80:95:9c:b4:
de:de:14:b8:db:65:71:cf:ac:d6:e3:e4:4f:7c:af:
e4:f3:92:72:b2:2d:5a:a3:44:2f:93:20:9e:ab:0b:
6a:3e:92:ed:ce:23:47:63:b8:d3:ae:db:39:58:db:
83:36:1b:73:87:43:1f:6b:06:c3:62:c4:aa:9f:86:
89:63:92:36:1c:f2:d9:06:6d:03:c4:b4:00:e5:d3:
88:5f:cb:f6:70:79:ab:5d:4f:05:cd:97:d4:de:7a:
15:55:ae:0e:05:ae:0c:87:60:4a:cf:30:81:34:7e:
51:c9:e2:60:ea:7f:60:6c:bc:1b:fc:41:03:fb:b9:
dd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:42:D9:EE:38:09:27:A8:AD:72:FC:D9:90:4F:1C:CF:F3:AC:CC:15
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:de:75:28:35:f8:95:ea:3d:5c:85:5f:59:dd:83:7e:6f:48:
1d:3f:59:13:f6:69:4d:e4:ef:58:68:46:c7:74:f5:e6:b5:63:
ca:2b:4f:19:80:72:2e:ea:58:78:33:c8:52:fc:da:ca:72:c2:
a1:12:dc:c4:dc:af:e5:08:bd:69:ad:29:86:37:fe:7a:a9:ef:
06:af:3a:20:09:da:b1:89:ab:84:d3:43:56:07:6b:fd:46:97:
4f:f8:b3:11:cc:18:36:81:d6:c5:a2:02:14:49:44:b7:62:75:
30:82:eb:32:fe:2e:c8:94:85:65:29:4c:91:77:fb:bc:4e:8c:
e2:1c:54:5e:f8:70:38:f9:75:88:cd:d0:c7:c3:c6:56:61:af:
23:2a:bf:e5:17:e0:43:be:1e:04:01:2c:44:d4:16:43:e9:1b:
0a:0d:c7:cc:e0:70:e8:b3:a7:86:4f:00:e1:a5:42:7c:c7:51:
68:b4:9e:28:ba:6a:87:07:02:b7:c4:04:ae:1e:5f:95:8a:ba:
01:b1:a6:02:bf:7a:d0:f6:5f:5d:e7:27:eb:b6:b7:2e:f8:af:
f6:04:fc:14:7b:50:f3:25:78:df:44:a8:f1:5f:0d:db:6e:f0:
ec:13:ce:d2:d1:db:a7:a2:65:6d:f8:0e:1d:c7:fd:90:35:42:
fe:14:d4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 18:25:24 2026 by rpki-client