Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
File: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json)
Hash identifier: csea8fTG4rxhfrGt8UxFbNmYsETOAuWGCHJeh0HV0vA=
Subject key identifier: 37:BD:FF:FC:84:EA:10:F5:6C:B2:CB:6B:A6:4F:69:B8:0B:D2:30:72
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial: 01A0D8DF73F75280D69F4BE975D64AFB6147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
Manifest number: 1A79
Signing time: Fri 25 Sep 2026 14:01:57 +0000
Manifest this update: Fri 25 Sep 2026 14:01:57 +0000
Manifest next update: Sat 26 Sep 2026 14:01:57 +0000
Files and hashes: 1: 1Cy83jCl7kBGDNxqyufm78TXI0c.roa (hash: FaDgiWoM3k5efyXcsEBG7laf/bYAZ1lac2yh8oD/pOo=)
2: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: 6CRcSjOw0JmNEkc1IKaCI1apP31Zv9YHwC+z3MReSA4=)
3: Gcgb4fKcIntpFBriNxDOmx88O0w.roa (hash: HNBuGy0i9eOtKQLzxEokhQmLu275mcy6wh+QVvZD+oA=)
4: JGYsNj9H1c_XLokkyRvioL1Icvs.asa (hash: FsSg7M51c+/dkmTYhVW+tHhpAYi4anL4jcOUSvzQsF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:73:f7:52:80:d6:9f:4b:e9:75:d6:4a:fb:61:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
Validity
Not Before: Sep 25 14:01:57 2026 GMT
Not After : Sep 26 14:01:57 2026 GMT
Subject: CN=37bdfffc84ea10f56cb2cb6ba64f69b80bd23072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e5:f6:0e:bd:ed:dc:d7:31:30:25:6f:45:d5:
22:5e:f3:35:8b:69:2c:27:62:6c:87:52:3d:e3:94:
8a:c3:29:50:64:4b:90:41:ed:e0:ed:f9:b4:b0:9c:
76:fe:f8:90:0c:1b:16:e6:dc:54:e5:65:09:15:6f:
1d:2a:0a:8c:2d:56:a9:72:2a:7b:dc:5d:b2:a3:d2:
7c:4e:c1:21:d4:2e:e5:9c:79:b5:af:3e:a7:0b:a0:
be:5d:f0:35:19:00:2c:d2:87:ad:47:2b:c3:52:e6:
97:36:79:d5:aa:47:f6:75:1e:7b:5f:dc:5c:c3:0f:
58:c0:57:a1:22:f1:43:35:0c:ad:77:86:e7:84:1e:
c7:8d:d9:ae:12:3b:0a:83:f8:b5:52:18:59:fc:9c:
e5:ac:94:f5:cb:c2:29:cf:a7:1f:da:d0:82:3b:bf:
6e:63:a1:a6:7c:ff:7e:fd:5c:24:2e:a0:fc:4f:5c:
ae:fb:28:21:7e:6e:c1:63:89:b1:54:0c:09:60:98:
92:a1:90:af:f1:b0:c9:86:f3:f3:58:61:cb:05:f9:
ca:24:77:ba:16:2e:70:5f:22:b4:e3:f6:a7:65:ab:
4f:33:93:64:1a:3e:fc:5e:7d:6c:97:56:08:72:c8:
49:13:9b:d6:37:10:04:60:99:0e:f6:b1:9e:9e:f6:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BD:FF:FC:84:EA:10:F5:6C:B2:CB:6B:A6:4F:69:B8:0B:D2:30:72
X509v3 Authority Key Identifier:
keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:23:e3:eb:99:4a:d3:d2:a3:7b:cf:f5:45:78:82:f7:60:b8:
80:ce:71:8a:64:d1:8b:a4:4a:78:45:e7:83:04:de:56:ee:2a:
05:e6:88:16:f5:14:98:1a:03:f6:88:cf:57:73:94:32:af:f4:
9f:dd:4f:a5:31:69:78:b9:be:97:1c:16:40:ed:87:11:a9:91:
53:30:98:8b:87:c9:87:d6:2e:8f:6a:c2:37:db:f9:9b:7f:78:
08:27:1d:1b:45:70:97:93:bb:f6:53:f0:d3:89:94:f2:e4:6f:
c2:9d:36:f0:b4:72:36:68:a6:13:96:55:6d:3c:ac:f0:95:56:
80:ca:cf:b6:0f:ae:fc:eb:47:fe:6f:fc:1d:43:43:5f:61:a6:
87:e5:41:0c:28:c3:0a:bd:c4:90:d3:e8:26:73:b7:d8:16:9c:
c1:ec:ac:91:51:9c:ec:3c:fd:3a:f0:2e:b5:94:d8:eb:22:2f:
74:ea:59:46:31:4a:f6:9f:7f:c3:02:41:1f:13:e0:8c:a3:2c:
e9:15:6d:93:00:4a:42:07:8b:3a:c2:e9:16:62:b9:df:a7:1c:
bf:8a:d4:35:67:7f:a8:7c:48:08:e0:10:d1:60:89:75:e8:f8:
06:f3:19:c8:9a:d5:53:c0:ee:e3:a4:40:7d:91:20:97:ea:e9:
43:41:74:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:32:41 2026 by rpki-client