Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
File: FFAQ3dLG97ZEpQAsseTuFixj0dc.mft (raw, json)
Hash identifier: ANmIzmTGEnj6/b4P0z8y6C6AVqHatezAEQ3BEfRXINQ=
Subject key identifier: 91:3E:21:FE:35:C8:79:CB:13:4F:23:FA:0D:DF:56:A3:BC:9A:F5:85
Authority key identifier: 14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
Certificate issuer: /CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Certificate serial: 019D9D3EDFAFAB9A4FCAE795AFB7642E4C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
Manifest number: C8
Signing time: Fri 17 Apr 2026 21:00:36 +0000
Manifest this update: Fri 17 Apr 2026 21:00:36 +0000
Manifest next update: Sat 18 Apr 2026 21:00:36 +0000
Files and hashes: 1: FFAQ3dLG97ZEpQAsseTuFixj0dc.crl (hash: mr3fBHB0kZO0X7w3PmYzWxKSyxGnVA1Tu2ipiggUqCw=)
2: vq82IEcQtF-WpfPnhIhgfebzHDk.roa (hash: 1OV+pDCPKjRkZqon595wjlus9Od7oqEkMW7DsdSGgek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:df:af:ab:9a:4f:ca:e7:95:af:b7:64:2e:4c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Validity
Not Before: Apr 17 21:00:36 2026 GMT
Not After : Apr 18 21:00:36 2026 GMT
Subject: CN=913e21fe35c879cb134f23fa0ddf56a3bc9af585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:c8:47:db:5e:f7:bf:6f:ff:d2:f0:bc:bb:
1f:d4:f4:73:eb:8f:71:be:42:71:9b:7d:ac:54:6a:
f0:b4:ed:eb:67:e4:84:66:77:0c:af:f6:bf:2d:52:
83:b6:8c:ec:69:0c:43:71:c2:51:72:97:8f:24:5f:
93:53:01:96:f6:7a:d6:5e:ac:03:0b:2f:2a:03:c8:
f1:0f:06:b5:dc:b7:e3:b7:9d:3d:aa:64:b9:ee:ff:
41:b3:49:8c:9e:d4:82:80:a6:24:1d:b2:66:e3:d2:
8e:53:1b:63:ce:68:fd:da:2e:f9:e5:db:08:51:36:
6c:5b:c8:e3:97:86:06:01:63:63:2b:a6:6f:e9:8f:
52:94:81:5b:bf:de:fd:09:cd:28:b7:c3:dd:de:fd:
4d:89:25:9d:b2:17:db:0e:cc:ff:3b:df:ba:3f:c6:
7b:ed:1e:8a:25:54:67:24:25:aa:31:29:2c:3c:38:
13:6f:d5:b8:a3:95:db:69:a1:84:8f:59:99:e8:ec:
9a:e2:68:0b:dd:91:10:78:b7:01:83:86:8e:2b:4f:
79:63:44:ae:97:20:53:44:ee:6b:2e:0a:b6:26:a2:
97:b7:c3:03:d1:35:26:7d:c4:4a:a2:8f:7e:de:6b:
9f:32:4a:d0:81:60:b1:33:a1:f6:4d:b7:9e:c8:9f:
a9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3E:21:FE:35:C8:79:CB:13:4F:23:FA:0D:DF:56:A3:BC:9A:F5:85
X509v3 Authority Key Identifier:
keyid:14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c9:73:c2:7d:dc:e4:c7:66:2a:9b:f4:9d:b8:f3:07:83:50:
08:30:e3:e9:f3:06:ab:6c:07:e3:cf:90:fe:f5:c7:98:87:80:
75:b2:c3:2d:3a:6b:8e:58:d3:61:3c:57:bc:96:e5:b5:79:2c:
bc:96:ba:7b:f3:40:30:18:a0:77:2b:79:f7:93:29:cc:4d:da:
49:d7:42:57:1e:3f:eb:1f:83:80:c7:9b:78:77:b0:33:11:aa:
a3:cd:fd:f8:40:33:37:a4:54:cd:7e:c0:bf:01:cc:5b:1a:9e:
dd:2d:d1:f8:dc:9d:7a:14:64:28:56:11:ea:e0:9e:4b:4e:3e:
cf:2c:d2:37:17:34:0a:0c:40:8a:51:de:4d:69:28:1a:a5:18:
85:8b:97:9d:35:40:80:b4:7c:61:91:be:ae:7b:c1:c3:7f:51:
9a:5d:c1:f0:9b:4c:43:95:73:a8:ba:6c:e3:0c:f3:76:6e:e2:
ff:d6:32:04:d9:81:16:d3:66:84:2f:5e:72:e7:11:36:31:24:
d6:ab:94:84:3e:fd:f3:ad:a4:76:75:a5:df:fa:46:e0:04:be:
4c:40:bf:32:5c:26:e8:96:87:5c:8b:db:34:c8:12:4e:ca:41:
35:81:ef:1d:e7:a7:29:33:85:e2:2e:c7:15:9c:48:d2:5d:db:
4a:a0:fd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:38 2026 by rpki-client