Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
File: FFAQ3dLG97ZEpQAsseTuFixj0dc.mft (raw, json)
Hash identifier: 5xlBDA9WfREmaDykokP36fPkQfuC2OgNyX6w59uCtqg=
Subject key identifier: FD:61:B6:36:D2:45:90:85:E7:DF:A5:90:63:06:C9:B9:3D:31:8F:E2
Authority key identifier: 14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
Certificate issuer: /CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Certificate serial: 019CAFB68331532F6D1374C9773AB223B840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
Manifest number: 4D
Signing time: Mon 02 Mar 2026 18:01:39 +0000
Manifest this update: Mon 02 Mar 2026 18:01:39 +0000
Manifest next update: Tue 03 Mar 2026 18:01:39 +0000
Files and hashes: 1: FFAQ3dLG97ZEpQAsseTuFixj0dc.crl (hash: ZBZu1liiu0CrcQritOuUOMSW1i7cCfDPiWZ20DgIKho=)
2: vq82IEcQtF-WpfPnhIhgfebzHDk.roa (hash: 1OV+pDCPKjRkZqon595wjlus9Od7oqEkMW7DsdSGgek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b6:83:31:53:2f:6d:13:74:c9:77:3a:b2:23:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Validity
Not Before: Mar 2 18:01:39 2026 GMT
Not After : Mar 3 18:01:39 2026 GMT
Subject: CN=fd61b636d2459085e7dfa5906306c9b93d318fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4f:8f:d5:19:43:d4:39:3f:80:f7:3d:46:5d:
27:db:b5:e1:21:25:99:7d:d3:f0:bb:c5:70:4c:e3:
3f:50:54:86:44:05:13:a5:cd:9f:69:eb:9c:54:dd:
88:1c:47:60:ef:30:2d:a6:54:71:82:17:c2:80:66:
31:ae:59:b6:49:14:c0:d3:d8:f4:0d:ff:a6:de:4a:
11:f8:c2:99:0a:91:05:90:84:3f:ab:ce:8c:66:e8:
b1:31:5e:4b:01:01:70:a0:b7:5c:27:5c:63:6b:df:
b5:b4:93:c3:bf:82:c9:fd:6d:a3:e4:39:34:23:f5:
99:8a:ce:80:fb:0b:31:bd:44:aa:0b:ff:51:b1:f0:
2e:cc:cf:e9:81:09:17:df:19:f9:6b:ca:18:98:3b:
67:c8:d9:89:5e:82:39:2c:81:71:60:e1:d9:cc:06:
3a:e9:a4:1f:70:bc:78:08:f9:d3:40:d0:88:a0:98:
f0:ed:7a:ab:74:e8:24:96:39:80:0d:98:da:d1:22:
0b:5f:39:75:af:ef:f1:ce:e7:19:02:65:6e:3a:2e:
3a:0a:07:1a:85:a2:8c:53:35:7a:14:07:ce:b6:59:
35:20:c9:db:75:ac:9d:a0:5f:3c:25:58:47:44:e6:
97:ce:59:ac:4d:a8:d5:6a:8c:a9:79:b9:d9:4d:d8:
97:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:61:B6:36:D2:45:90:85:E7:DF:A5:90:63:06:C9:B9:3D:31:8F:E2
X509v3 Authority Key Identifier:
keyid:14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:28:92:e0:58:26:c4:cd:f6:fb:ea:f4:39:43:84:6e:30:37:
9d:4d:31:c1:8d:2c:32:be:cb:0e:2b:8b:a7:60:3d:7f:f9:d3:
c7:63:92:3a:53:08:8e:ff:a1:4d:a8:c8:c6:15:2a:e0:34:b7:
c5:f3:02:5b:f1:44:85:66:f6:5b:42:bc:a3:c7:15:98:22:67:
dd:62:44:d6:dd:b5:63:ef:a3:3d:6e:7e:25:ca:d6:87:10:89:
9d:35:8d:73:98:bf:c0:b5:6a:1e:3a:55:65:58:d8:d4:ea:51:
25:c2:6b:57:39:30:c6:cb:fc:ab:e3:cd:dc:6c:c8:b0:7b:96:
c4:fb:33:5c:c7:57:b6:ec:f9:b6:71:d9:bc:d0:3b:6d:33:84:
92:b7:35:15:ca:6c:a6:9a:a4:cd:56:a6:58:d8:85:08:b2:62:
fa:ab:3c:e8:6f:fe:a0:1b:dc:b4:d1:e7:58:4b:63:4e:ff:a7:
6f:a6:12:21:67:0a:98:8f:75:b6:f6:63:16:f8:22:58:83:28:
57:ca:b7:49:b2:dc:4f:c5:95:a8:56:52:01:22:94:ca:d4:16:
1e:69:81:42:d4:be:d6:6a:e9:74:c3:7d:b9:c0:04:41:1a:37:
08:7d:45:82:42:3b:fd:49:bb:e6:d8:03:5d:16:a2:27:11:32:
2f:9b:1c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:10:37 2026 by rpki-client