Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
File: FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft (raw, json)
Hash identifier: koH8GVcbrL4AtfhnmN/gvg04MUIYCTgCvQ5yAxbmLps=
Subject key identifier: 55:05:FD:AC:5C:73:CE:4F:84:6C:44:48:27:D3:C4:63:A2:23:E4:D8
Authority key identifier: 14:5C:47:28:38:2E:C5:35:4E:10:60:23:DF:46:7A:41:13:B4:93:24
Certificate issuer: /CN=145c4728382ec5354e106023df467a4113b49324
Certificate serial: 019D9C9AAC7AE68FFE945D6ADD9D666086C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
Manifest number: DB
Signing time: Fri 17 Apr 2026 18:01:15 +0000
Manifest this update: Fri 17 Apr 2026 18:01:15 +0000
Manifest next update: Sat 18 Apr 2026 18:01:15 +0000
Files and hashes: 1: FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl (hash: mngqZDek3YNGWSM393FLlcMzs7XB60hngjwUVk8GFdM=)
2: py9eyb051zBNGRXqf0w217Iyr0U.roa (hash: V1rIxP2aeir1g3qKAPo7xgCkgSSb/VU/nyh0Upf99zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:ac:7a:e6:8f:fe:94:5d:6a:dd:9d:66:60:86:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145c4728382ec5354e106023df467a4113b49324
Validity
Not Before: Apr 17 18:01:15 2026 GMT
Not After : Apr 18 18:01:15 2026 GMT
Subject: CN=5505fdac5c73ce4f846c444827d3c463a223e4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:79:4a:8f:39:81:9f:19:bf:6b:bf:87:6b:af:
8a:51:c9:30:31:6c:7d:f9:14:56:a2:68:99:de:22:
2f:19:20:3d:cc:bb:14:12:43:d1:2e:ff:bf:de:75:
d0:c2:69:52:e3:3c:47:24:bc:34:e2:b4:ee:16:90:
d7:5b:c5:50:78:8b:52:4f:ad:5a:d0:cb:cf:a2:c3:
70:8f:7f:19:4b:69:8c:44:43:5a:d7:6d:2f:89:b3:
5d:d9:22:94:d7:a5:62:72:5a:f7:3b:ed:b5:7a:8c:
56:6b:ba:1a:09:4a:03:73:1a:5b:f8:39:55:13:f1:
e9:26:55:c9:43:08:4f:b4:3d:22:da:fb:3f:cb:77:
50:7c:ea:0a:31:de:8c:8a:7a:e6:ce:21:7a:a4:13:
5d:65:da:06:36:66:e5:6b:61:12:3c:dd:42:6b:ab:
b9:fc:b9:cb:b8:4b:cd:49:61:91:39:0d:0d:b6:10:
4e:fd:bd:e5:1b:fa:11:29:95:b8:90:60:b8:2f:c7:
42:d9:4b:12:98:ab:97:78:43:ea:f5:35:16:5e:f4:
f8:ad:7a:a7:3a:76:17:97:db:7a:fd:d0:dc:73:d7:
62:39:9b:1e:96:99:ba:53:e2:92:4b:9b:62:a7:2a:
91:ef:65:29:e6:98:9b:5e:8a:b3:2d:4e:55:d0:6d:
ba:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:05:FD:AC:5C:73:CE:4F:84:6C:44:48:27:D3:C4:63:A2:23:E4:D8
X509v3 Authority Key Identifier:
keyid:14:5C:47:28:38:2E:C5:35:4E:10:60:23:DF:46:7A:41:13:B4:93:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ad:29:3e:86:44:0c:c2:a0:4a:2f:b3:18:8b:b6:e9:41:8a:
e9:68:bd:41:7a:0c:23:03:5a:b6:22:3e:2b:46:05:09:76:89:
db:e1:3b:aa:e0:4d:f9:8e:f0:46:97:27:b0:83:a4:a3:0f:ee:
c5:8e:df:c7:cc:c0:24:90:c1:ca:a4:53:3f:01:10:a6:ae:53:
89:0c:de:1a:1b:d1:96:c9:49:8f:7a:ee:1c:38:64:9f:ec:e4:
61:a7:c5:96:5b:7a:78:f0:a2:ef:14:0a:11:6f:f9:89:0d:38:
60:20:70:5a:7d:dd:a7:e7:26:cd:11:69:16:09:12:48:8d:51:
97:aa:f5:83:85:2e:94:fc:08:04:f2:0c:9b:a7:7f:ed:e3:12:
e4:25:2b:c4:64:ad:0f:9b:05:7f:f8:72:0d:38:16:1b:b3:f8:
39:12:31:74:a3:ff:45:d2:2e:c5:ee:c9:17:1a:2c:70:2b:53:
76:5e:d9:37:44:72:3a:c4:45:24:5d:86:a8:8e:12:ea:5a:01:
1f:fb:d2:93:54:37:92:8d:66:be:0d:38:9c:41:fe:fb:19:ea:
3c:ff:52:ee:f0:f3:f2:28:ee:18:50:5c:a8:33:3e:4f:47:9a:
85:c1:ea:65:59:82:a9:86:a2:24:bc:40:50:2e:3c:7d:ea:d0:
63:28:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:54:14 2026 by rpki-client