
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File: Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier: ftg9/lJS7TXKyzX9jzL3shjz0TFkT78lcDLknWA8+vM=
Subject key identifier: E5:AE:1D:72:72:65:26:59:39:08:68:AC:3E:FE:55:94:46:A2:92:79
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 019D29CE9C140078FBD419AD440608E691A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number: 18B1
Signing time: Thu 26 Mar 2026 11:01:39 +0000
Manifest this update: Thu 26 Mar 2026 11:01:39 +0000
Manifest next update: Fri 27 Mar 2026 11:01:39 +0000
Files and hashes: 1: 1Yk3wLsSFqIceQz9okyZeYwSmUU.roa (hash: XuNQlAxXibSKzFFM3alxNEJs9SFC+R0bjfD85sz3lps=)
2: 2rNvx3N9jKo76idv1HsGHAcnnwk.roa (hash: eczcKAWkF5L/9LrtvswF4lmskTN97duPXq74deE4ZjY=)
3: 89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa (hash: gJOB7b6DwbK+XopIODXerFY7Dl/1i2NMhMaK+LjT9Lk=)
4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: dg9NJ1Scb7yE0nSZIepPqzkkMlKbwNWyQMQcTzof4EY=)
5: XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa (hash: eJBUNPOd5UiGzU5DENLhYsoGYS/OErO6pyZfCeZ9+DI=)
6: Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa (hash: yIwR/WFk+tPJZkyXjHRduYJCHgmO7w46d3yBhaQ1ujQ=)
7: _AlvkImBx9fT_58A-ot68g3ZAWg.roa (hash: msAI/PDOB8nUEhgzHGsqD3SG29keFYFQtvJbuYgfbh4=)
8: e6E78PhXHpGFjckaurV7HRo45Qc.roa (hash: /P55Uaooj8U1yQTcKMlV6RxlENtuteMc4CS0XE887QU=)
9: pc9jqeFvGm_Ya7ftOHGOywYXqHk.roa (hash: hvmbpnMOx6aLgariBv7H4no6hWJ9AktUdxssOvOvSNs=)
10: wEsor2MQvIFzGGLmwfUZgbYVkto.roa (hash: asdhK4hFtXHqOa5kFwrF3vv+JxQieRNKL69DY1/povE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:9c:14:00:78:fb:d4:19:ad:44:06:08:e6:91:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Mar 26 11:01:39 2026 GMT
Not After : Mar 27 11:01:39 2026 GMT
Subject: CN=e5ae1d7272652659390868ac3efe559446a29279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:a5:12:5c:50:37:f2:c5:b6:22:2b:20:99:
c3:fe:60:71:0c:53:7d:0f:43:f6:37:8a:1e:0f:bc:
01:57:82:b2:c3:0b:52:0a:32:36:6a:f0:47:a8:f4:
00:cd:b2:54:4d:aa:03:b9:44:6e:5d:ab:72:7d:b2:
cb:ab:7d:5e:cd:68:78:f8:f4:a1:1f:55:6a:cf:4c:
22:2c:57:91:b6:9e:74:9a:e2:ec:e7:98:3f:8e:06:
ac:20:63:5c:34:0f:61:f1:b6:00:db:cd:26:bc:8d:
ea:0e:a7:e8:6b:89:90:73:df:b4:56:5d:44:dd:54:
8c:9a:e1:d7:6b:d3:cd:78:60:2b:c9:15:7f:ba:7e:
b8:e1:97:48:90:0b:da:c4:4e:97:d3:2a:b0:f5:3d:
0d:87:db:ac:0b:17:b6:31:e4:de:75:8a:5d:29:c9:
a6:af:53:54:9e:a3:50:72:d4:b2:35:e1:2f:48:92:
95:9f:ee:31:84:34:35:d3:80:20:bc:a7:82:9f:44:
0b:2b:ac:e2:3d:9c:cf:74:fe:33:c3:a8:e2:87:50:
ba:5e:64:0c:6e:83:7b:9e:2f:ad:0a:28:18:50:6d:
dd:d5:f4:72:76:c6:d4:16:6e:61:37:27:17:fa:23:
b0:20:f4:52:27:a8:ef:7a:f3:98:ad:d3:d8:b5:c2:
49:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AE:1D:72:72:65:26:59:39:08:68:AC:3E:FE:55:94:46:A2:92:79
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7e:ad:66:c5:87:69:83:04:94:23:37:dd:2c:c7:12:31:63:
1f:b2:b9:be:2d:3b:ef:59:cf:03:f1:88:f7:bb:0c:85:42:c2:
d3:ef:0e:6e:a7:aa:d0:2f:da:90:7d:fe:f4:46:38:68:e0:09:
4c:9f:61:53:e0:9c:e8:ac:7d:35:d7:78:c1:5e:e3:ff:cd:38:
d3:83:bf:04:c0:db:a8:7b:ea:5f:e2:70:c3:c3:c5:c8:0c:0f:
e7:38:54:5e:67:4f:49:9e:12:d1:20:f4:2f:34:fd:47:5e:28:
6d:51:38:90:d1:b2:64:09:16:16:42:f1:e4:21:6f:f6:49:78:
8e:e2:37:a3:5f:1f:e0:5f:88:4d:98:f3:f7:88:ed:50:57:5d:
a7:49:5f:82:96:eb:c5:fb:78:8c:f4:54:b1:a0:d4:75:31:ab:
7b:3e:6f:a8:b9:85:cd:12:53:47:f0:fd:30:b8:df:36:02:78:
9a:7c:5a:f8:3a:cc:76:56:62:6b:89:88:6e:3a:7a:f1:29:52:
51:b1:c5:b1:37:aa:5d:7b:e8:2d:b5:cb:6a:40:19:c3:5f:f2:
c7:7f:fb:cb:79:bf:ba:42:0d:87:f5:61:a6:0b:5d:e4:95:bf:
97:9c:e3:7e:6e:6a:28:c6:d0:eb:14:9c:ea:62:ac:be:97:76:
99:8a:14:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:53:01 2026 by rpki-client