Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
File: FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft (raw, json)
Hash identifier: J7xi4rFLNLt4vAERJfKbUUfaZTepRSEbvdBWPbo1ap0=
Subject key identifier: 09:D7:94:9B:5B:D6:5D:18:0A:4D:83:0C:08:E4:49:76:28:3F:5F:AE
Authority key identifier: 15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
Certificate issuer: /CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Certificate serial: 019D2A0518381BDAC352376E4DCC55BD7136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
Manifest number: 0634
Signing time: Thu 26 Mar 2026 12:01:10 +0000
Manifest this update: Thu 26 Mar 2026 12:01:10 +0000
Manifest next update: Fri 27 Mar 2026 12:01:10 +0000
Files and hashes: 1: 5KwTCXGaEmxfineap3j8xC_SkiM.roa (hash: iGdOA9kuMVNiObXLidash5z/PzOjRgRSWtuN684ej3Q=)
2: FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl (hash: 9vTEGEh7c9pKqPehmL494g4SKkjJVy/PYDSWLT0VuzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:18:38:1b:da:c3:52:37:6e:4d:cc:55:bd:71:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Validity
Not Before: Mar 26 12:01:10 2026 GMT
Not After : Mar 27 12:01:10 2026 GMT
Subject: CN=09d7949b5bd65d180a4d830c08e44976283f5fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:10:57:89:e8:2e:ac:32:0f:a5:2a:fd:67:79:
e6:60:52:b9:b1:dd:dd:72:33:c9:9d:83:59:a9:5a:
26:d5:66:54:d6:be:62:35:c6:a9:96:98:f7:cd:bb:
46:89:4f:c1:49:d7:63:fc:ff:c4:a4:29:4a:a3:c3:
f4:dd:f4:78:96:32:68:3e:6a:e2:68:b0:59:50:5a:
0e:42:1c:f8:e1:40:c6:62:ad:23:75:f1:7c:4d:7d:
3a:c5:d1:79:49:03:0a:aa:f8:5b:49:ce:f4:90:49:
4b:9e:41:56:be:8b:a4:60:86:bc:0f:6a:2a:ba:cc:
37:b0:18:10:59:31:e5:16:d6:3e:85:26:08:59:69:
26:e3:b4:e8:2a:71:70:cb:95:23:3c:b3:34:c1:a6:
b9:d1:5b:6d:16:b1:fa:95:50:63:d6:43:3d:42:dc:
b2:d8:97:bf:d3:a3:b3:c6:4f:84:0b:7a:30:18:0b:
f2:0a:c6:9f:82:98:b5:1c:4b:76:31:3a:3b:b0:56:
b4:d1:6f:9c:72:62:b7:3e:a7:94:26:f3:38:83:c3:
80:d2:f9:c2:83:df:45:40:aa:f2:9e:3b:73:8e:ac:
11:37:af:25:d2:ee:f3:d6:6d:4f:a2:1e:36:31:95:
95:09:9e:c4:9d:9b:9c:c8:e4:bf:22:0b:72:01:39:
e6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D7:94:9B:5B:D6:5D:18:0A:4D:83:0C:08:E4:49:76:28:3F:5F:AE
X509v3 Authority Key Identifier:
keyid:15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:27:28:ca:0c:a0:a0:b7:7d:50:04:51:6b:9a:32:85:d3:ac:
63:5f:d9:1e:01:44:b2:c3:47:08:5d:19:8c:90:ca:fc:e5:1a:
56:0a:e4:1c:b5:b4:63:1c:a6:40:b7:dd:5d:47:03:7d:c8:37:
8a:b5:c9:76:a7:e0:e8:aa:f1:58:bf:05:74:40:9a:ef:69:88:
69:a0:00:0d:6c:6c:0a:2d:50:22:4a:5a:42:da:dc:c3:c4:50:
7e:2a:78:51:14:53:2a:a7:85:b6:37:e9:bc:95:e6:b7:8d:e1:
a4:2c:d6:ac:f9:fe:2d:ac:03:ee:11:a1:74:38:45:0a:25:7d:
7a:55:5e:b7:dc:95:ca:9a:05:a3:30:a8:ea:75:16:42:e2:61:
a4:8b:fc:df:a0:12:8e:2b:8e:bc:10:1e:fd:7e:5b:be:29:81:
36:09:e3:06:d2:8a:6e:ad:c8:8f:d0:97:3e:83:a1:00:c7:d3:
9c:3f:df:60:20:9f:8f:bb:b2:73:ad:6b:57:b3:59:38:dc:02:
52:b5:16:82:8a:8a:9a:0a:da:da:42:88:d8:4a:3b:8b:2f:b9:
39:fb:23:32:d1:6e:fc:53:61:23:45:b6:50:10:cb:e2:d1:73:
54:eb:1a:ef:f4:be:21:d3:92:76:96:26:81:d4:f9:17:d9:2c:
fe:b8:a6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:56 2026 by rpki-client