Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier: 4XPSWYZhJJUT+R92PwLuNPcjyFGmMw7rwEYKckmAxEA=
Subject key identifier: BC:31:37:77:05:44:65:54:C2:42:98:53:92:3D:8E:F7:54:6E:7C:A6
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial: 01A1DE399FEBD289B4DC722126A44F9F3C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 08:01:20 +0000
Manifest this update: Sun 15 Nov 2026 08:01:20 +0000
Manifest next update: Mon 16 Nov 2026 08:01:20 +0000
Files and hashes: 1: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: yRsb41tCwDmsDhowD3PanGvFZ4/+djI5bw1UdOPr1ow=)
2: ZWBJxYdw0yqefP_6w5hTElTjn_w.roa (hash: ka3/3w04e1WBZfQiP+cb8ld/BzE1PNW9ESTV22owMjY=)
3: nQOGLsDTu8U8pFDRgHktBs12LXo.asa (hash: fwzFvF5IHbE+z4rN1nerwJCzmr6g02nn5C2pFL2CM0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:9f:eb:d2:89:b4:dc:72:21:26:a4:4f:9f:3c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
Validity
Not Before: Nov 15 08:01:20 2026 GMT
Not After : Nov 16 08:01:20 2026 GMT
Subject: CN=bc31377705446554c2429853923d8ef7546e7ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:1e:74:a5:6b:1a:06:b8:62:aa:30:12:d9:
59:d4:be:99:8a:f0:ea:14:9e:0c:9e:10:ea:52:4d:
a5:d2:18:40:d4:b2:c5:1a:c9:2e:c7:73:65:c2:24:
36:eb:5d:50:b8:21:79:d1:44:83:ee:4a:a5:19:a3:
86:b7:07:2f:51:2b:63:56:54:b5:02:54:c3:18:d4:
1f:3a:5a:1f:ef:5d:a9:3f:6b:3b:c9:52:e2:00:fb:
c3:ba:b9:ab:57:3c:c6:8b:66:be:e9:3d:9b:5c:d5:
ab:ec:1f:2b:4e:9b:05:66:34:71:22:4d:a8:9f:73:
d0:32:72:a1:0f:b9:6e:16:4a:fd:9b:8e:98:94:fb:
5e:dd:ba:bb:b5:28:14:0d:b4:ba:92:94:1c:ca:56:
c3:11:2c:36:fc:4e:b3:f9:e8:ce:4f:1d:2b:bf:e9:
70:dd:6d:76:bb:be:96:73:01:6f:20:66:22:a3:e2:
d4:26:ac:d2:94:81:bd:73:8e:f2:15:bb:60:a8:2a:
0d:b5:b6:58:75:3d:a9:23:ec:85:bd:e2:0b:9f:d4:
72:35:65:8e:08:42:96:cc:8f:dd:eb:d7:38:d9:1a:
11:db:26:97:15:0f:c4:f3:15:4c:4e:27:b8:e1:6e:
58:0b:74:12:e1:6d:b9:75:16:6f:38:a4:f1:83:4a:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:31:37:77:05:44:65:54:C2:42:98:53:92:3D:8E:F7:54:6E:7C:A6
X509v3 Authority Key Identifier:
keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f1:ae:da:c9:89:72:86:a8:4c:72:fc:92:6f:25:ef:6e:c3:
48:ef:bf:33:9a:7a:bd:9a:fd:39:9f:e8:ea:dc:17:c7:73:1c:
a1:e0:1b:ab:e8:7a:94:df:65:6e:d1:40:24:0a:30:f4:cf:a6:
32:6b:60:f5:3f:5d:b7:5d:47:85:c7:ee:8c:7a:db:88:e1:68:
02:01:20:b3:24:1d:1e:51:23:ff:d0:6d:4f:49:e2:7b:9a:b9:
dd:4c:57:f7:f2:b7:57:73:bd:66:ce:7a:c0:e5:22:31:0b:b4:
01:88:ea:ef:6d:80:cc:84:90:24:9c:60:99:13:84:68:93:39:
65:df:e4:18:33:d8:68:c3:3a:64:bb:12:fa:29:08:4c:46:9b:
d5:30:78:55:d5:fb:2e:05:8b:e2:73:ee:c6:57:5c:2f:0c:4e:
f8:3d:b0:1b:3d:10:ed:8c:3e:f9:ab:71:08:d9:78:b6:b8:72:
8d:3d:24:c1:09:db:8c:aa:0c:0a:72:6a:fa:03:02:9d:19:3f:
44:a1:1f:58:f3:a0:eb:e4:9d:e6:f1:01:ed:cb:23:de:01:c1:
66:a4:ca:b1:0c:db:a2:90:be:6c:98:29:1c:fb:2b:42:e0:c6:
e3:1d:a2:71:8b:29:9d:d4:90:f0:12:cd:a1:6e:23:1b:ec:a9:
f0:ec:d5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:07:45 2026 by rpki-client