Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier: hiPyZ3SjJVfN/tqm3JYGjVO8hpVTXkIW1kSijsq8BnI=
Subject key identifier: B3:0F:96:81:7E:C5:56:D5:42:62:DE:04:64:64:96:0A:6B:D4:55:C7
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial: 019E1DC7AE816624699BCF2BB7859022B76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 20:01:26 +0000
Manifest this update: Tue 12 May 2026 20:01:26 +0000
Manifest next update: Wed 13 May 2026 20:01:26 +0000
Files and hashes: 1: AIp9_RM31K0wW6st5d3M-6Aj0t0.asa (hash: 1ayURs+KBoPQdd0mGltNGGJP12vnONErmbl882xqTKs=)
2: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: nUGCFM+eWsfsunNKN9oDTLwy716rWYrrtZe1YYQBT1U=)
3: Y9TvfDZhPUnmvz8oc1zE1QlM5Js.roa (hash: LtiAP0I3hFV4EJMfOTIDWfqdKu5nKxB9W4yPTHv9hdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:ae:81:66:24:69:9b:cf:2b:b7:85:90:22:b7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
Validity
Not Before: May 12 20:01:26 2026 GMT
Not After : May 13 20:01:26 2026 GMT
Subject: CN=b30f96817ec556d54262de046464960a6bd455c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:4b:57:a8:24:87:6f:74:f9:48:56:d1:51:
ba:db:0b:4c:b6:f3:7c:68:cb:f1:b2:00:2e:d2:86:
7e:75:92:dd:96:f6:58:ab:1a:9e:83:fb:8a:d1:4b:
09:e4:88:3a:61:79:ad:4b:37:f5:f0:de:1c:c6:70:
5e:22:70:bb:eb:ea:ca:23:9a:3d:c8:26:13:48:40:
dc:31:bd:53:50:49:89:cb:7b:ce:8a:e5:03:ba:14:
25:65:37:16:46:73:69:cb:f4:a0:08:56:e2:4b:2a:
c8:26:5e:d9:8c:11:30:96:01:86:c3:03:81:25:ac:
b6:ca:c0:54:93:ce:cf:8b:d3:90:d4:ef:43:53:53:
e6:55:1d:f9:16:b5:3d:5b:af:52:5e:8b:f6:8f:52:
ef:d7:04:1d:8e:70:b2:a5:59:07:d3:e6:d5:5a:68:
ad:3d:b3:36:96:cb:28:bb:01:14:2e:70:81:c4:69:
29:9e:70:07:e3:ec:6a:e2:33:c2:5d:47:41:b8:3f:
39:ef:87:87:11:09:8d:98:72:bb:50:99:59:ff:4b:
d3:d1:1d:61:ab:8a:d0:1a:fe:eb:18:a8:13:16:d9:
c7:f1:41:09:df:5f:b0:74:f5:56:ae:71:c3:90:43:
85:86:6b:ff:38:d0:3e:ab:b4:10:1f:a6:71:0b:9a:
7c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0F:96:81:7E:C5:56:D5:42:62:DE:04:64:64:96:0A:6B:D4:55:C7
X509v3 Authority Key Identifier:
keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:57:e0:77:fc:e5:f4:37:c7:23:8f:70:cb:75:6b:9a:94:b4:
4d:73:98:1f:16:44:cb:59:6d:34:a5:13:89:ab:8a:82:ba:12:
1a:4d:69:95:35:9e:cf:4d:98:e0:05:df:b5:87:08:6b:99:60:
8d:a7:dc:bb:ad:79:ef:67:d1:95:ab:e5:32:c6:79:ab:fe:b0:
9c:56:75:ea:61:fc:f3:be:00:47:a4:2a:83:f4:ae:c5:1a:53:
06:55:6b:00:19:9d:9d:07:39:d7:01:ce:69:fb:4a:0a:01:80:
a3:17:02:f1:8d:80:9d:2f:78:05:61:31:df:50:6a:93:f7:ff:
12:70:52:d2:d2:09:2c:cf:9c:67:ae:2a:ad:e2:65:20:1f:c2:
3a:db:42:62:76:74:52:4a:b4:ed:0e:8b:0d:73:8b:3f:e5:d4:
da:07:7e:52:ec:41:36:02:43:29:3d:5c:2c:78:24:7d:be:fa:
9b:c4:d5:c0:a8:56:cf:3c:4f:d1:00:89:cf:3c:5b:27:9a:45:
6a:87:08:04:46:90:af:f9:62:6b:85:33:f4:e5:d7:32:17:9b:
8b:d7:43:30:a9:f5:8c:20:d3:c6:1d:04:1f:ab:c8:5b:90:c6:
43:c0:02:02:d3:f1:61:78:b9:06:ee:37:cc:4e:25:33:16:20:
9b:60:34:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:48:48 2026 by rpki-client