Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier: FB0M4uIyWBKSuSioYUs8OHaoYWRBQGRQYu5sN5fgfUM=
Subject key identifier: B0:64:4A:8C:12:B7:40:F4:42:AE:0B:D1:75:60:07:D8:0A:AC:5C:F2
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial: 019D26965741E0CF481A7F183E7728ED5222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 20:01:20 +0000
Manifest this update: Wed 25 Mar 2026 20:01:20 +0000
Manifest next update: Thu 26 Mar 2026 20:01:20 +0000
Files and hashes: 1: AIp9_RM31K0wW6st5d3M-6Aj0t0.asa (hash: 1ayURs+KBoPQdd0mGltNGGJP12vnONErmbl882xqTKs=)
2: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: KJVrspUzkANTNNzHXKignxaBeNBrSsY/8ZgSKsHke9Q=)
3: Y9TvfDZhPUnmvz8oc1zE1QlM5Js.roa (hash: LtiAP0I3hFV4EJMfOTIDWfqdKu5nKxB9W4yPTHv9hdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:57:41:e0:cf:48:1a:7f:18:3e:77:28:ed:52:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
Validity
Not Before: Mar 25 20:01:20 2026 GMT
Not After : Mar 26 20:01:20 2026 GMT
Subject: CN=b0644a8c12b740f442ae0bd1756007d80aac5cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:da:77:5a:e0:1b:b5:44:a0:e0:94:43:87:
ae:ec:da:2a:f3:54:cd:a5:4e:35:90:e4:54:38:55:
9f:43:ed:9e:1f:2f:31:e3:62:29:69:15:32:13:a4:
b7:56:44:04:ed:a5:20:36:6c:b0:9b:69:ad:08:73:
1f:b6:78:47:2b:2e:a5:ee:c9:d8:59:9c:52:19:13:
31:51:c4:41:4a:0d:ec:f3:f0:ed:8a:8f:d1:c2:94:
68:87:40:87:fe:90:59:d3:6d:0d:e8:9b:86:81:31:
c0:04:a7:ef:0a:8b:f4:d2:fe:b0:e1:92:18:95:23:
83:90:5a:db:6f:56:3c:f2:93:df:55:e0:1e:0c:57:
fa:9b:4a:2b:63:f3:71:89:68:3d:e8:fd:f0:69:b5:
60:c4:f6:b1:ff:f8:35:2e:dd:d8:42:58:27:d0:0b:
c4:4d:c2:c7:35:e5:ce:62:98:5a:ee:cf:d7:99:80:
cb:47:cc:17:83:ab:8f:21:f6:3d:65:cd:01:7c:8b:
cd:92:2a:40:03:58:e1:40:04:e5:80:a9:14:72:05:
07:7a:fa:df:87:2a:d4:68:1c:d5:1b:35:90:2d:f2:
c7:f2:9f:87:04:c2:05:92:60:db:70:a1:0a:03:90:
64:0c:b9:cb:ce:87:91:29:07:80:0d:9e:f8:b0:bf:
db:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:64:4A:8C:12:B7:40:F4:42:AE:0B:D1:75:60:07:D8:0A:AC:5C:F2
X509v3 Authority Key Identifier:
keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3d:16:92:8e:61:18:f8:8c:d8:ce:72:46:52:88:d9:72:9b:
e0:6c:bd:eb:70:f7:91:93:0a:41:bb:65:7b:6e:2c:80:18:29:
fe:af:d7:ed:b1:0b:47:ef:f2:ac:01:8a:6a:10:ff:c4:97:41:
8f:b6:bc:26:57:a8:d9:d6:56:34:a4:1f:e1:19:75:4d:32:11:
72:4a:b0:b6:b9:5d:b0:d7:d6:4c:c9:d5:ad:6c:ff:d2:47:88:
90:52:65:c1:be:2e:65:7a:e5:a1:79:74:99:61:e0:ab:81:f4:
9b:c5:2e:42:88:78:f7:76:89:af:a2:71:c0:3d:ed:6f:b9:03:
8b:f4:53:de:71:d7:f2:73:03:a5:93:5e:8c:13:16:b0:65:37:
11:33:de:69:db:f5:c0:ce:f9:e5:56:61:63:48:e3:eb:4d:fe:
ac:87:ae:6b:38:0e:43:8f:cd:84:b9:83:8e:b2:0a:5a:4c:2a:
9c:2f:33:4c:74:04:82:7b:ed:19:8c:d8:02:65:42:9e:a9:45:
dd:6a:e5:3e:aa:67:43:bc:fb:a6:3a:c1:94:a0:58:d2:ee:2d:
a8:5b:27:b0:df:ea:c5:5a:0c:20:85:32:06:01:76:1d:39:8f:
d6:a2:15:c0:b1:3a:54:8d:0b:de:21:87:ea:2b:8c:fb:b4:a2:
ae:2e:f7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:51:28 2026 by rpki-client