Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
File: FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft (raw, json)
Hash identifier: VCERB+5ye2JfercOKCWioAfmqdtRPUaZ+OyICvXYeRk=
Subject key identifier: 8C:00:AF:FE:C4:E6:34:BB:64:C1:37:A4:7E:61:AB:A7:6C:29:FE:DD
Authority key identifier: 14:5C:47:28:38:2E:C5:35:4E:10:60:23:DF:46:7A:41:13:B4:93:24
Certificate issuer: /CN=145c4728382ec5354e106023df467a4113b49324
Certificate serial: 019CAF114553D82C7811ECB97528C71C203C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
Manifest number: 60
Signing time: Mon 02 Mar 2026 15:01:10 +0000
Manifest this update: Mon 02 Mar 2026 15:01:10 +0000
Manifest next update: Tue 03 Mar 2026 15:01:10 +0000
Files and hashes: 1: FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl (hash: u3t3iZ5LBvNbSBi+WCRo7i+gDOKgCBm+8dvMOZrJ7Ig=)
2: py9eyb051zBNGRXqf0w217Iyr0U.roa (hash: V1rIxP2aeir1g3qKAPo7xgCkgSSb/VU/nyh0Upf99zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:45:53:d8:2c:78:11:ec:b9:75:28:c7:1c:20:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145c4728382ec5354e106023df467a4113b49324
Validity
Not Before: Mar 2 15:01:10 2026 GMT
Not After : Mar 3 15:01:10 2026 GMT
Subject: CN=8c00affec4e634bb64c137a47e61aba76c29fedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:93:36:f0:8f:8d:fc:6b:8c:9c:b3:9c:cc:47:
0e:e7:a7:86:c4:cf:cb:e7:b5:e1:07:53:5b:10:2e:
1c:5d:70:f3:77:09:98:ae:33:15:d5:ce:cf:89:23:
d5:40:b2:6a:77:82:02:4b:9e:4d:45:36:00:c4:94:
93:d5:12:8e:61:cf:96:d1:8f:08:87:14:ed:38:f7:
81:7e:1f:45:e1:3a:c0:50:22:e9:ec:2a:a3:2c:d8:
3a:18:7c:51:29:ba:00:87:7a:3d:ac:e3:81:d2:01:
a5:1b:f1:34:d8:7c:0f:cf:bd:1d:2e:ae:54:e9:77:
cf:c2:4d:71:c6:6e:23:92:ad:80:3c:57:05:e3:af:
87:93:e3:1d:a6:96:b3:27:59:8d:56:f8:1a:6b:bd:
28:cc:f3:26:ca:7c:32:96:3f:b7:69:4a:72:61:12:
f8:2d:6e:4a:e7:51:f5:42:47:53:ce:f5:c1:8e:83:
f8:67:f0:4c:54:8c:01:5f:c6:50:1e:0d:8a:05:00:
23:9b:5c:99:3a:b0:72:08:e7:ef:32:da:bd:e8:a1:
dd:3d:de:8b:cc:07:d8:0b:f9:c3:2d:e0:27:38:d9:
e6:50:74:5d:b5:d8:29:9f:0d:36:a1:45:76:b5:a7:
16:1e:ad:9e:70:69:cc:67:d4:f2:35:20:4f:77:d6:
7f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:00:AF:FE:C4:E6:34:BB:64:C1:37:A4:7E:61:AB:A7:6C:29:FE:DD
X509v3 Authority Key Identifier:
keyid:14:5C:47:28:38:2E:C5:35:4E:10:60:23:DF:46:7A:41:13:B4:93:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0c:ae:35:a9:05:4d:fc:ec:61:03:5a:81:8a:e3:b6:74:2e:
89:03:18:92:6f:c7:9c:cb:1f:44:53:bc:f9:8e:d1:60:11:c7:
82:a9:15:28:8c:db:d5:07:c7:9b:68:5b:2a:2f:fe:03:9d:2c:
81:ef:bf:a4:b7:55:22:8d:c1:93:7c:8a:ca:6b:4f:d3:f2:e8:
a0:0e:90:da:d1:f7:a8:ce:74:c6:03:ea:ce:44:e5:58:26:2f:
6b:bc:ed:0b:c5:34:ed:aa:27:34:b6:e2:e3:08:1f:f7:d2:74:
5f:0f:0a:90:81:03:d3:1a:08:8c:77:71:3d:64:04:47:0a:fb:
3d:90:3f:44:ac:4c:4e:9e:58:95:12:9b:62:40:ff:f9:b9:bc:
0e:62:14:ef:89:aa:0a:15:f5:6c:59:95:59:d8:5d:42:c0:46:
41:91:7a:02:db:d9:17:a8:5d:e8:ee:d1:55:06:e3:97:01:96:
0c:0f:a3:b2:ea:c0:f6:b5:7c:53:b9:2e:e2:57:07:2f:7e:78:
f4:4f:3e:6a:bc:ba:2f:87:66:08:16:d5:e6:bd:a4:12:10:d1:
22:7e:e8:6b:2b:a5:36:42:57:5a:9b:35:c6:66:64:23:36:18:
6f:dd:c3:7c:d9:cd:4e:cd:af:99:08:3c:e7:27:af:8c:2c:f4:
67:34:0f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:51:18 2026 by rpki-client