Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
File: FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft (raw, json)
Hash identifier: q/0C5c5og/qf7qN6AZFoS8tVXrCwsl53X5mR6WaN9EI=
Subject key identifier: FB:BA:98:00:09:BE:56:F5:A7:F3:40:3E:C7:A4:6C:CC:E1:A4:44:FA
Authority key identifier: 14:5C:47:28:38:2E:C5:35:4E:10:60:23:DF:46:7A:41:13:B4:93:24
Certificate issuer: /CN=145c4728382ec5354e106023df467a4113b49324
Certificate serial: 01A101A3F4372FBCF7272D3FFCAD60BC6DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
Manifest number: 029D
Signing time: Sat 03 Oct 2026 12:01:24 +0000
Manifest this update: Sat 03 Oct 2026 12:01:24 +0000
Manifest next update: Sun 04 Oct 2026 12:01:24 +0000
Files and hashes: 1: FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl (hash: VAKfwlTvBkL6R/O4nxDIPY5ceGcnRu1UaIpS7bZ24IM=)
2: py9eyb051zBNGRXqf0w217Iyr0U.roa (hash: V1rIxP2aeir1g3qKAPo7xgCkgSSb/VU/nyh0Upf99zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:a3:f4:37:2f:bc:f7:27:2d:3f:fc:ad:60:bc:6d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145c4728382ec5354e106023df467a4113b49324
Validity
Not Before: Oct 3 12:01:24 2026 GMT
Not After : Oct 4 12:01:24 2026 GMT
Subject: CN=fbba980009be56f5a7f3403ec7a46ccce1a444fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:88:0b:e5:d0:34:45:fa:84:30:3f:5a:b6:04:
a2:11:97:0e:74:8c:e8:41:a9:d5:21:a0:b2:10:b6:
7d:52:d1:95:17:f8:ac:a6:7c:d8:76:28:f7:89:ea:
ee:32:f9:31:c3:98:30:d6:bb:62:fc:85:64:61:1f:
e3:98:a9:07:f9:63:2f:9a:11:0a:2d:b6:f1:30:05:
7b:d0:b8:24:4f:64:db:d1:1b:b9:ca:3b:84:a0:53:
bc:40:5c:b3:7b:8e:31:90:c7:46:70:4c:c0:54:b9:
c2:29:a6:42:69:45:86:16:40:ef:11:95:0e:39:f6:
b9:c7:d2:ac:78:8f:2a:75:b3:78:45:41:e0:cc:f2:
2d:69:a3:af:8a:c3:e5:65:c0:cd:43:a7:0e:d1:45:
f5:b6:e9:ac:4c:b5:1c:d7:cd:55:c4:dc:a9:b9:7e:
81:73:eb:b3:04:9a:5a:f0:68:e0:49:2d:34:5e:5e:
ab:f6:7e:c4:46:2f:62:5f:b0:cc:bb:d5:56:70:d4:
7f:e7:c4:e9:8a:ac:22:a2:fe:ac:1e:49:07:89:f1:
54:ed:d6:8f:96:5d:64:5b:b7:01:67:11:b2:87:ad:
0d:a6:ea:c7:e1:fc:8c:37:90:ab:cb:01:35:ed:65:
0e:84:a8:e6:b3:7d:05:7a:4a:d5:d0:d7:77:33:e5:
ac:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BA:98:00:09:BE:56:F5:A7:F3:40:3E:C7:A4:6C:CC:E1:A4:44:FA
X509v3 Authority Key Identifier:
keyid:14:5C:47:28:38:2E:C5:35:4E:10:60:23:DF:46:7A:41:13:B4:93:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:15:bb:b8:ea:1b:73:29:00:2f:aa:67:02:6b:00:56:10:55:
f2:86:1c:ac:90:15:02:f2:b6:c7:ce:7d:1e:ee:c1:fe:8d:89:
bb:1d:c4:e0:bd:97:8b:53:67:21:6c:85:73:51:17:d5:6a:10:
9f:de:4f:53:af:66:3e:a8:a0:b8:ea:15:d6:76:66:82:a5:2a:
d4:02:ac:5e:1c:8d:df:43:21:88:20:e8:c9:bb:44:18:98:a4:
3b:a3:49:cd:72:ae:df:4f:cb:58:07:52:a8:00:86:74:19:89:
34:0b:1c:57:92:0d:b6:d9:dd:a4:80:48:32:09:c5:8c:23:9b:
40:f3:25:88:b2:80:b4:30:a4:1f:89:33:78:14:e0:d2:e4:c7:
7a:85:68:07:c3:32:c9:0f:55:88:ee:c8:d3:06:36:e2:84:e5:
b8:9a:b9:f2:ea:ce:82:49:dc:ad:d6:7b:02:ab:2e:b6:00:ab:
b7:1f:ed:df:85:21:ea:40:1e:fb:c2:2b:8f:5c:cd:a2:52:72:
e7:86:8f:2d:9c:b6:b1:c8:7b:cd:33:0c:17:15:e6:49:61:06:
2e:bb:6a:3e:d2:1d:15:f0:be:9d:87:a6:4c:f2:e2:02:b4:cf:
bc:7f:7d:eb:c0:64:fb:f6:30:f7:91:8e:0f:e9:bb:0b:a5:5b:
52:3f:13:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:22:09 2026 by rpki-client