Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier: cd1NEMvorcTztOADrEAqmnSLjYKFDgelqhNAWTBZ3vA=
Subject key identifier: 4F:37:81:83:0F:F4:3A:CE:F3:FF:38:FC:59:41:98:4C:DB:81:47:07
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 01A136A4258884348793A4B3FE0517AE0FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number: 1234
Signing time: Tue 13 Oct 2026 19:01:29 +0000
Manifest this update: Tue 13 Oct 2026 19:01:29 +0000
Manifest next update: Wed 14 Oct 2026 19:01:29 +0000
Files and hashes: 1: 9Vt8ZTAaKO3QL6--FGbzjNTndzA.roa (hash: sv+RJ5ALLGIO9zXRd8Tk3ufycF6GVb7tnAc57hDYdKU=)
2: AkELUJ1nU_46RXAj1-2bY3yDqgU.roa (hash: bYHtNDNRSlQx/SUIjQmICDpEV5pw2ZU635jKEfo/bKM=)
3: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: hPBsu88lF1IVsapg0tq+4g6nqwqT4QarwbJYMd1MfGs=)
4: NX8gAo4kJVVnhVZZYeGsPN5mG8w.roa (hash: V0/RLiCz2ASel5h/MeTJN3bA9SuqAAYlXPDJdJh++xE=)
5: uOvkQDziXdl03ymVnX12k48lv30.roa (hash: uWfGX0PhnwLyUyMwAiEAkFFInh+eiuwv8GILWk97Ti0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:a4:25:88:84:34:87:93:a4:b3:fe:05:17:ae:0f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Oct 13 19:01:29 2026 GMT
Not After : Oct 14 19:01:29 2026 GMT
Subject: CN=4f3781830ff43acef3ff38fc5941984cdb814707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:74:47:51:36:02:d9:c0:a1:02:50:7f:e3:
fb:af:ba:41:b9:1d:82:c4:41:22:91:81:eb:e4:25:
e6:64:25:6d:0a:8a:c4:4b:3a:8a:c2:35:19:7c:50:
10:3a:8c:53:b8:0d:bb:66:18:b9:34:8b:a4:a8:4b:
62:1c:71:18:c5:b0:89:66:62:0a:76:f3:28:ff:65:
0f:99:a5:45:7e:0b:94:ed:60:62:a5:c1:d9:4d:43:
98:97:9b:d9:4f:78:d4:48:de:0e:ca:83:75:7b:93:
ca:c7:63:06:1e:16:f5:07:0a:e9:fa:ff:c0:11:8a:
74:44:c0:ff:a4:79:3a:d0:9d:a2:19:7c:2e:f8:90:
ab:86:7d:2f:3d:56:64:43:ea:4b:f8:3e:c8:fa:7a:
2c:38:e7:62:40:34:61:c2:a1:92:15:32:7a:8d:4a:
05:f6:2a:d2:64:97:f0:f5:34:7c:ec:f7:e2:27:16:
a4:8f:99:d3:7d:fb:89:5d:f0:0e:ad:fa:63:44:77:
37:79:87:8c:5a:f5:73:98:6e:2e:b9:24:c3:63:59:
ac:9a:27:f9:24:3e:d6:38:b5:0e:02:00:ab:84:4e:
fb:e5:70:63:04:0b:5b:94:4c:e0:0b:67:48:4b:ed:
85:7e:24:6b:44:d7:75:48:ee:43:83:33:de:6d:92:
30:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:37:81:83:0F:F4:3A:CE:F3:FF:38:FC:59:41:98:4C:DB:81:47:07
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:72:fd:ea:69:c6:c9:aa:e5:13:b7:6f:7f:24:3e:55:b6:86:
67:c5:51:cb:f8:42:76:2e:85:f2:24:5c:ab:4e:4d:a4:28:a5:
29:c9:da:ca:d0:8c:2b:ae:f7:fe:96:7a:f1:42:13:47:fb:ee:
71:7f:d4:d4:28:b5:2e:ce:7a:77:71:eb:9c:36:87:e4:1c:74:
3c:5b:17:c5:08:f0:a3:35:ae:3c:4a:11:30:60:de:81:26:58:
75:b1:2b:7a:7f:45:9d:05:14:ab:eb:3f:0b:22:ab:6e:eb:4e:
25:7e:f9:eb:5c:79:0b:9c:1e:c5:05:6e:f2:a1:f0:fe:9b:f4:
93:da:d2:25:45:c5:3d:69:d0:b1:c4:5c:ff:e8:b2:c2:b4:f4:
b5:c3:25:41:ee:ac:96:8f:cb:28:e5:27:fc:57:f4:31:a6:1a:
fa:fb:79:2a:d1:80:e3:78:4c:25:d5:65:a0:98:de:7f:1e:10:
d5:19:46:33:22:56:58:dd:70:53:88:23:88:0c:bc:94:bc:d2:
c4:33:d9:e5:7b:41:0b:ed:33:29:7a:47:87:3e:5a:01:10:8a:
c1:96:6f:b2:8a:06:76:75:b7:c4:da:74:ad:55:57:b0:a7:40:
2a:95:8f:99:ba:9c:48:26:8a:59:7b:b3:1b:d1:fa:d9:2f:33:
7b:7d:0f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:14:35 2026 by rpki-client