Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: axX1G0vGDyOaiKq0efcmbsw0pMpwMfdw7Mzw44C3gk8=
Subject key identifier: DE:51:DA:5F:9C:81:FA:AA:83:D9:FC:F8:47:30:45:CC:DF:1A:D1:EE
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 019FACAD5300A59A3DAB8CFF717C90441BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 07:01:07 +0000
Manifest this update: Wed 29 Jul 2026 07:01:07 +0000
Manifest next update: Thu 30 Jul 2026 07:01:07 +0000
Files and hashes: 1: Eo3L-3lPzBtGwSWfnMDXuxuu6nc.roa (hash: KayjLv1EKOAgncKf1kvYzIArRjjjosmZ3G86Nh3L73E=)
2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: XqqN9v4dye5Oa8aSY7LaS8WSWCnoyCnkvsmyv9rjOGs=)
3: PEiD2fXY8MTybS2F517gf0un5yo.roa (hash: QNquho6Cc22D4ZGcJ11pg3kLKNMl0b+Ez3eOGTC66KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:53:00:a5:9a:3d:ab:8c:ff:71:7c:90:44:1b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Jul 29 07:01:07 2026 GMT
Not After : Jul 30 07:01:07 2026 GMT
Subject: CN=de51da5f9c81faaa83d9fcf8473045ccdf1ad1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:44:a8:44:df:e0:61:ee:57:a5:df:c3:67:28:
c9:a9:e0:a1:cc:7e:a8:ee:69:fa:30:66:21:15:28:
f2:5d:f8:89:17:11:06:bf:23:59:86:3e:72:69:0d:
d4:f1:86:4a:3c:12:52:52:6b:3a:11:17:bb:84:b4:
29:8f:d4:ed:ec:b8:84:c7:ed:d4:39:7d:fc:b7:0d:
47:99:3e:c0:1c:40:82:99:18:3d:3b:67:36:e3:97:
2e:24:45:3b:b7:2e:17:b6:63:a0:19:0a:cc:52:c7:
89:66:ab:02:bd:96:a6:00:19:a3:13:e2:d4:36:eb:
57:b2:fe:d8:62:67:9b:95:00:06:c9:c7:5f:82:60:
86:0e:b9:87:8d:00:79:52:f1:c0:da:63:51:c0:fb:
21:4f:73:80:30:a6:01:c2:c5:a1:59:3e:a5:1a:9d:
1f:9f:93:99:d9:ea:38:13:62:c1:04:d8:34:ba:f3:
35:9d:06:5a:9b:be:a1:e2:e8:68:13:0f:ec:5e:bd:
38:1d:31:45:b9:a8:36:7b:57:29:51:be:bb:01:de:
1a:69:a7:24:3a:bf:cd:b8:c4:c0:ae:53:88:43:ca:
53:1a:73:29:b5:fc:36:a5:fd:26:34:d4:31:09:fc:
0f:34:bb:6b:55:4b:fd:ba:3f:c8:d8:a7:4b:29:6f:
c2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:51:DA:5F:9C:81:FA:AA:83:D9:FC:F8:47:30:45:CC:DF:1A:D1:EE
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:92:94:7c:4b:f0:ef:6b:78:1a:d1:ea:f9:8b:b8:15:8a:61:
55:85:25:c6:ed:bf:7a:77:93:5f:a4:4f:65:5e:fc:00:b9:38:
2f:6e:08:f2:53:79:f8:23:d8:4a:30:c1:48:6a:f6:cd:d0:76:
2c:3b:fb:b2:eb:9b:49:c3:d3:9f:f1:39:d5:1e:f4:5d:7b:2b:
7a:fa:86:53:51:2b:cc:4c:34:71:c0:e6:25:bd:eb:a7:f8:e5:
3d:25:ca:19:c2:b4:1f:a5:2a:1d:cd:c9:fc:42:93:7e:3f:70:
0a:a8:39:96:46:ca:19:52:6f:1f:71:46:ff:4a:31:8a:f5:d4:
c2:a8:5f:36:61:96:08:a9:09:c0:26:74:91:49:fd:69:3c:37:
d4:73:3b:ea:06:62:85:0f:03:fc:85:49:66:ce:22:3b:b2:e5:
b5:7e:e4:cd:3d:74:b4:44:15:25:42:f4:eb:82:b6:74:d9:4b:
a7:8d:36:6b:a0:05:b8:10:0a:9a:bc:b0:1b:71:e1:5e:59:61:
5c:48:dc:ee:07:db:0d:b1:df:a1:ed:c0:a9:b4:50:e8:4c:e3:
4e:17:cb:78:fd:dd:82:32:f1:a6:6f:1e:c3:b8:65:77:8f:5c:
99:93:27:67:93:31:81:3e:4a:60:5b:b5:54:2b:01:82:22:99:
a2:33:3c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:04:50 2026 by rpki-client