
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier: neb4NaajqzC1rUWGrkJ4m1l2XJD+tcTaj/NgnopOzYc=
Subject key identifier: 2B:2D:F9:E2:72:7C:6F:B5:5D:1C:7A:10:F9:E6:54:54:E5:02:40:DC
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 019FA9ABF444118A8A76A5E3CB8E71EA2B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number: 1164
Signing time: Tue 28 Jul 2026 17:00:46 +0000
Manifest this update: Tue 28 Jul 2026 17:00:46 +0000
Manifest next update: Wed 29 Jul 2026 17:00:46 +0000
Files and hashes: 1: FVXRWNR-iJL-3loUoELW_rYeLro.roa (hash: TIUcHOXHQtg3/7DVOraIMU6MrdF6s65vvoAgjd0Qq7U=)
2: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: pkUzxdS8xVJkrSg0SCmfNdjNotKaB6bFfjo9GyeqYd4=)
3: NX8gAo4kJVVnhVZZYeGsPN5mG8w.roa (hash: V0/RLiCz2ASel5h/MeTJN3bA9SuqAAYlXPDJdJh++xE=)
4: uOvkQDziXdl03ymVnX12k48lv30.roa (hash: uWfGX0PhnwLyUyMwAiEAkFFInh+eiuwv8GILWk97Ti0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:f4:44:11:8a:8a:76:a5:e3:cb:8e:71:ea:2b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Jul 28 17:00:46 2026 GMT
Not After : Jul 29 17:00:46 2026 GMT
Subject: CN=2b2df9e2727c6fb55d1c7a10f9e65454e50240dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:da:4b:fd:de:11:52:b3:98:66:da:37:90:
e4:20:3d:22:92:b1:97:d8:55:93:3a:39:af:fe:b1:
94:06:bb:76:4e:51:22:19:3f:b4:9a:e4:95:4f:f4:
60:0f:21:2c:d2:70:4b:bf:3e:56:cf:cf:40:7f:5f:
cb:09:5a:69:09:5f:59:04:ff:ea:62:41:1d:54:b3:
6c:c1:a9:b3:25:3a:d5:11:92:d8:32:1b:42:ff:09:
80:1a:a3:7e:af:e2:05:03:10:fc:eb:7c:f2:83:cf:
1a:5c:75:fb:79:86:1f:76:28:de:d5:cb:9f:52:6b:
3a:28:76:e8:44:97:2a:8f:86:c8:9c:ef:0d:f9:9a:
3b:7b:bd:a6:04:cc:40:31:a5:95:3f:92:4d:8f:77:
d6:6a:ff:04:db:98:e9:b9:b1:21:8e:1a:91:ba:47:
71:7f:c4:c1:3f:e6:6b:f9:f4:8a:f5:a5:fc:47:e5:
31:df:bc:30:05:aa:0d:77:60:fc:fa:bf:40:20:fa:
5f:35:73:2a:56:63:1d:dd:24:39:74:84:8b:f5:7e:
5c:b0:9d:82:a7:c3:c9:ae:00:72:b7:7a:7c:c8:87:
59:11:2d:09:2a:5c:d3:c7:8a:de:17:c2:e8:0f:30:
13:8a:c8:73:fb:24:7c:c5:57:32:55:36:75:05:14:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2D:F9:E2:72:7C:6F:B5:5D:1C:7A:10:F9:E6:54:54:E5:02:40:DC
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:50:31:bd:ab:4f:66:61:93:25:c0:a2:83:8c:a6:42:e6:aa:
82:7f:8e:00:a8:e2:85:1f:5f:06:3e:c7:cd:eb:41:8f:49:38:
43:52:e9:d7:2b:e2:92:89:5c:2a:8a:3b:bd:5a:a9:a7:ef:e9:
2d:cf:cc:e9:cc:49:6a:04:8d:75:86:9c:3a:03:00:5e:ea:9c:
27:3e:43:e1:c3:28:8a:3c:02:8c:46:4b:d6:3f:82:0d:78:8d:
9c:8d:b0:7e:ca:bc:65:c8:d7:a3:91:97:c1:60:62:20:89:f2:
7a:f4:0d:91:b8:d6:ca:d4:0f:4a:51:5f:0c:dd:ec:f8:3a:d3:
ec:14:0b:aa:83:8b:2e:87:24:12:bb:36:8f:81:af:38:82:01:
7e:ba:d5:43:92:2d:2c:05:49:f9:25:0e:ea:87:ff:8d:46:21:
c1:59:ed:f8:ce:48:90:d8:68:da:64:e4:14:d3:b5:13:83:ee:
16:e5:2e:52:21:b6:7b:9a:14:52:e3:4f:4f:76:69:64:c3:c9:
15:ec:25:41:d3:83:c1:66:4e:d8:aa:9c:b5:d0:82:ab:24:b7:
52:5a:74:41:18:08:ff:17:56:00:a7:ef:69:fc:83:c9:d5:05:
af:f7:ff:bb:ed:8a:cb:09:7a:d8:7e:47:48:ee:c3:11:e4:07:
de:30:37:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:26:29 2026 by rpki-client