Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: SdrPiV58kLNFUxM9FMzOJgVng2FiJvo1wTGVWrDNIf0=
Subject key identifier: 5A:A4:2F:4A:55:45:F6:1B:92:2F:40:7C:9F:D1:41:89:B7:C8:60:0A
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 019D299723919F97D17242B776567E016BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 0942
Signing time: Thu 26 Mar 2026 10:01:03 +0000
Manifest this update: Thu 26 Mar 2026 10:01:03 +0000
Manifest next update: Fri 27 Mar 2026 10:01:03 +0000
Files and hashes: 1: 1W82at7mSiuchX3iCzO6G2WZfjs.roa (hash: OyjiciJl+n/aBNYiJh6cnpdIClbp0Z2IycUrjNfaQ1s=)
2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: xV3CF4KnCBZqMUL87quHqP6ppylpCfx1+l6KsSjnqFM=)
3: xsaLPUS_EPRPzM8NWjyE1aTWHX4.roa (hash: dBX6NfyeptV43b7aTbE31Dh+/tXWuq6hyAQ37G7Hits=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:23:91:9f:97:d1:72:42:b7:76:56:7e:01:6b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Mar 26 10:01:03 2026 GMT
Not After : Mar 27 10:01:03 2026 GMT
Subject: CN=5aa42f4a5545f61b922f407c9fd14189b7c8600a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:4d:ce:d7:d7:1c:e7:05:71:6c:11:69:6b:
5a:49:58:40:44:41:97:bd:ad:32:f4:ff:1c:67:86:
70:3c:c4:2e:e5:85:61:25:55:91:c8:27:f2:a6:83:
3f:45:e7:23:db:25:26:78:2b:9b:b7:ff:80:ad:f8:
cf:ef:db:b7:a3:2e:7d:09:6d:fe:1a:2d:f3:74:91:
83:1f:d0:6f:9b:17:b9:35:50:60:73:cc:22:a2:2d:
f7:f6:ae:ee:79:eb:41:f8:1b:2e:50:59:cd:ed:13:
b9:ef:a7:73:f6:d2:bc:98:10:77:1d:8c:12:b1:8f:
01:58:ad:fb:06:e0:c7:ba:a1:2b:d0:f0:1c:c9:ff:
22:de:3d:86:e8:e5:fc:e8:bf:14:59:16:f0:49:35:
d6:57:25:3a:3d:6c:39:b1:e4:d4:c4:fb:43:22:33:
53:82:cb:02:26:62:6c:de:16:cb:95:6b:b8:af:64:
ed:98:ef:dd:32:ce:f1:54:85:ad:3d:af:50:e7:c2:
ac:5a:5e:36:6e:4a:5c:5a:d9:e9:0b:45:e5:b9:3f:
02:1d:ec:a5:fe:de:d8:25:c2:7d:26:9c:e7:f6:c0:
53:3b:b1:01:d5:33:98:0a:e4:08:ac:05:ff:01:15:
cf:fb:ec:0f:2e:0f:d5:f0:af:fb:43:e8:1a:c3:8f:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A4:2F:4A:55:45:F6:1B:92:2F:40:7C:9F:D1:41:89:B7:C8:60:0A
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:af:82:76:a3:9e:be:72:fb:5a:cf:9a:05:66:59:b1:8e:bd:
f7:e4:d2:89:a6:68:f0:09:cd:3e:e9:d2:9e:3c:cb:85:d6:f6:
b4:42:29:be:8a:cf:1a:f1:d9:e9:16:a3:e1:90:d3:74:ad:4b:
90:fa:8d:86:37:75:0c:67:7b:16:e4:de:24:9d:55:97:67:32:
21:d4:be:a7:df:ad:cc:ba:75:c4:ac:c1:9c:ca:9d:13:8d:90:
8e:0c:19:a3:1e:cb:1f:00:ad:92:8c:34:63:dd:90:1e:12:05:
cf:cd:c3:de:a5:e2:9e:43:64:8c:61:6a:e0:9e:0c:f7:4a:86:
52:53:fa:25:a5:43:f5:e1:5e:b3:b9:30:0b:19:8d:55:83:29:
30:28:4a:0d:e1:69:94:e9:7b:be:c1:f8:e6:fe:11:bd:d5:c5:
df:80:e1:cd:82:5b:1f:da:2f:25:67:82:d1:92:d7:79:14:ab:
49:62:e5:2f:be:50:81:fc:77:60:a3:dc:48:45:5e:e8:75:aa:
70:af:91:b4:fe:e2:53:17:1e:7f:2f:d0:f0:22:d4:ed:1b:7b:
e0:c5:f2:d5:cf:c2:1c:5c:11:2f:88:6d:77:45:14:68:ea:11:
b7:5d:e8:ee:47:49:e4:d4:27:dc:26:e4:4d:28:81:3d:dc:16:
a3:9a:b4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:05 2026 by rpki-client