Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier: 0cxdZxpedaXBkPDudxvN8gBJ+4+9Tz12Zr6P0CFVLFg=
Subject key identifier: 8F:6D:9F:67:C9:F8:30:4F:78:76:40:9A:D6:8E:6F:22:69:65:23:DD
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial: 01A0D3B8DDDC83E786AC58181BFBA25A433C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 14:01:43 +0000
Manifest this update: Thu 24 Sep 2026 14:01:43 +0000
Manifest next update: Fri 25 Sep 2026 14:01:43 +0000
Files and hashes: 1: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: rRq7w5hvXIFbkAPWW+oi6mlfUux6NW4X+42U8PacqH0=)
2: ZWBJxYdw0yqefP_6w5hTElTjn_w.roa (hash: ka3/3w04e1WBZfQiP+cb8ld/BzE1PNW9ESTV22owMjY=)
3: nQOGLsDTu8U8pFDRgHktBs12LXo.asa (hash: fwzFvF5IHbE+z4rN1nerwJCzmr6g02nn5C2pFL2CM0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:dd:dc:83:e7:86:ac:58:18:1b:fb:a2:5a:43:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
Validity
Not Before: Sep 24 14:01:43 2026 GMT
Not After : Sep 25 14:01:43 2026 GMT
Subject: CN=8f6d9f67c9f8304f7876409ad68e6f22696523dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:3c:80:a7:85:3b:ec:ac:78:00:8a:ef:21:
34:14:cf:24:12:de:a0:26:e4:29:4f:bf:d9:0d:11:
f0:bc:c3:a2:8d:22:40:a2:a9:dd:23:b9:c1:e5:5b:
c1:a8:05:7f:31:bd:6e:4f:35:ef:f2:5b:e6:86:ed:
b1:90:38:b4:e5:a6:bd:ce:ef:27:a2:13:a7:7b:be:
c5:c9:98:0b:81:f0:37:67:4f:35:8b:4c:25:4c:12:
df:de:c0:fa:37:a4:b3:b4:4c:22:47:8c:34:98:07:
ed:92:c3:46:05:69:9c:88:d4:80:28:e5:72:f9:c7:
cb:6b:0c:61:4f:4d:a5:c7:ff:c3:1e:3e:b4:2a:d4:
56:a1:d6:68:17:d6:a2:fe:de:2c:64:de:e7:c8:dd:
c6:96:fd:90:b0:46:cc:31:25:a7:a8:a4:16:89:01:
73:55:47:0c:60:94:00:68:61:36:b1:8d:4c:35:b5:
f7:7d:e8:0c:7d:cf:fd:b9:57:67:86:16:8c:80:78:
20:6a:27:d7:cd:d1:2a:3a:0e:3f:ca:30:0a:f0:57:
1b:cf:2e:78:37:a0:92:b8:64:88:41:db:cb:f4:06:
c5:57:b9:7c:19:59:85:ec:66:31:1d:eb:aa:7e:cd:
43:50:62:a7:e4:52:9d:c1:0c:21:66:c7:47:49:56:
bf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6D:9F:67:C9:F8:30:4F:78:76:40:9A:D6:8E:6F:22:69:65:23:DD
X509v3 Authority Key Identifier:
keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:35:fd:b4:13:94:4d:ba:d1:04:3f:e5:f8:39:70:3e:6a:7d:
45:35:a5:c0:33:39:84:00:95:a6:8b:05:16:db:bd:8b:60:39:
04:1d:88:b4:54:21:62:aa:bb:70:55:79:41:26:4b:87:2f:31:
eb:64:54:90:10:35:85:52:4c:3b:0b:e5:81:b1:11:57:df:67:
c8:38:d4:98:be:7a:69:43:f6:59:ab:c6:af:98:f9:50:84:58:
2d:c7:74:70:6b:a0:ad:38:13:4e:2d:e2:be:a4:c7:d3:37:b4:
46:ae:6b:8c:93:59:8b:93:6b:13:3a:7b:75:1c:99:b9:13:af:
81:37:18:93:c5:5e:59:b4:8b:2b:52:94:2d:70:e1:e6:8f:13:
e5:6d:bf:9a:e3:b9:51:09:d1:42:77:e0:17:95:13:5a:11:fc:
30:23:f7:e5:f1:42:89:1f:f5:c4:65:14:6c:d8:23:9e:13:fd:
a7:9f:f3:f8:c8:35:18:56:86:e8:9a:a9:d8:dd:35:24:a0:64:
51:62:f8:8f:42:0b:f3:f9:f8:21:d8:73:ac:cf:0a:d9:2d:bb:
0b:8e:9b:c2:7c:f7:4e:33:25:cf:31:76:da:10:cc:4b:22:71:
bf:98:92:cd:d3:0a:cb:98:aa:71:f5:7d:30:e2:e2:9f:c9:47:
c1:b2:31:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:03:18 2026 by rpki-client