Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
File: FFAQ3dLG97ZEpQAsseTuFixj0dc.mft (raw, json)
Hash identifier: kE6/KdnGzvzEByqeCs46i3zVxhQVyBZ3nJNKydGk6ns=
Subject key identifier: 43:0E:40:D9:F5:B7:AF:FC:CF:CB:A5:87:64:56:30:5B:66:13:5E:29
Authority key identifier: 14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
Certificate issuer: /CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Certificate serial: 019FAA8812670F5AA818838736CD3A2D2798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
Manifest number: 01DA
Signing time: Tue 28 Jul 2026 21:01:12 +0000
Manifest this update: Tue 28 Jul 2026 21:01:12 +0000
Manifest next update: Wed 29 Jul 2026 21:01:12 +0000
Files and hashes: 1: 8-KHbyQ_KYn0snvY9x30CBtJw18.roa (hash: 80kk3Ul4i3TWv/R5PMNMesb+6kDgT0CnH8s73ujvE20=)
2: FFAQ3dLG97ZEpQAsseTuFixj0dc.crl (hash: cXudMlyaZhUpHyzSM2e82roJWwrUSZkn+3fw5jZU+RE=)
3: YGtlZnWeERw8AsqsnIvt3Avrp8g.roa (hash: wjBYM93Z9LSZQjBjOvD3I1KwuCypmMdncWxGSLsNk2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:12:67:0f:5a:a8:18:83:87:36:cd:3a:2d:27:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Validity
Not Before: Jul 28 21:01:12 2026 GMT
Not After : Jul 29 21:01:12 2026 GMT
Subject: CN=430e40d9f5b7affccfcba5876456305b66135e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:91:a8:d0:b1:db:9a:54:28:52:f6:20:b0:5d:
49:c3:54:b3:18:75:b3:fe:4a:80:14:19:14:57:3b:
7a:8b:35:3a:3d:d3:2e:88:b9:18:d9:42:91:8b:52:
46:4e:99:dd:22:d0:07:0a:bc:9a:32:9f:6b:9e:b7:
a0:be:36:3d:63:3e:5b:f2:16:44:21:46:14:b0:ce:
fb:42:fa:16:54:87:7c:ad:c0:f5:a7:6f:6e:4b:63:
17:43:f0:5c:49:f6:d8:45:4f:19:04:84:f7:dc:88:
72:e7:21:40:5f:e8:f9:24:81:81:e3:dd:23:3a:69:
18:74:64:7b:d1:a3:7e:df:70:b6:fd:40:d8:c9:a3:
7f:ac:f7:bd:63:fa:fa:77:07:39:23:ab:1a:7e:a0:
ff:b2:88:38:bd:a8:94:80:3d:98:01:11:a5:12:6f:
b1:4d:0a:b8:f2:32:fb:a1:fc:f3:03:f6:35:91:82:
b9:65:96:fe:a1:ac:c7:b1:2f:db:93:1f:3b:9e:a5:
b3:d8:8e:ad:46:54:5e:7d:3c:5f:84:73:5c:ae:92:
bb:60:db:be:63:06:ca:c1:25:a3:74:04:81:7c:b9:
7a:44:87:0d:6e:fe:52:79:1a:39:9b:8c:0c:84:72:
e2:c8:02:a6:5f:fd:ae:d4:61:ed:61:79:27:bf:b6:
ad:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0E:40:D9:F5:B7:AF:FC:CF:CB:A5:87:64:56:30:5B:66:13:5E:29
X509v3 Authority Key Identifier:
keyid:14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c4:fb:e5:70:40:cf:bc:e3:f6:09:bd:bf:49:64:7c:22:de:
55:0b:6c:8e:2f:bd:b3:52:fe:0c:16:6e:a2:aa:fd:e1:f0:e5:
c5:8f:2a:29:c9:14:00:af:51:bc:a0:f0:14:25:12:c5:e0:3d:
bd:40:f7:40:9b:7f:1a:5e:63:64:11:34:f7:c3:b1:c5:5c:3e:
93:ff:81:d5:74:8b:49:f4:ee:ab:cb:43:74:a2:93:98:f9:3f:
ce:46:b2:68:9f:7c:ed:a1:da:2c:26:0b:89:f5:33:da:16:08:
04:c8:d4:c3:3a:6a:2a:b6:c2:4f:62:8b:5b:7e:ce:20:a5:79:
61:8b:a9:06:f2:50:c6:59:f4:04:b5:d8:ae:e4:68:e6:3a:9e:
59:12:58:d7:ad:14:d7:10:00:fb:b1:4b:d1:02:fd:91:1f:3f:
ba:31:29:99:10:ad:53:c2:97:6b:50:af:12:a7:7b:0d:48:c3:
9d:c5:04:30:51:02:03:2c:51:d8:6b:f5:42:33:0d:df:dc:68:
db:03:90:4f:41:a4:13:e1:a6:6b:23:c4:c3:81:ff:8d:a0:e9:
17:47:41:f6:d0:e2:6b:20:2a:a6:43:bb:83:d4:eb:95:2a:bd:
b4:82:13:ff:28:43:97:3b:d1:56:ec:f1:0a:d1:06:88:75:56:
a6:ad:11:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:26:04 2026 by rpki-client