Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft
File: ffgoIInih2ZRITPUI2r0FaN709I.mft (raw, json)
Hash identifier: 6BfL+C/cDd2C8su01jlr/+GqLhc1cSKhUDoJlZXdq/o=
Subject key identifier: 5E:D1:BD:67:29:18:76:BF:A2:51:1F:20:BF:EE:01:7F:C3:0A:2C:9A
Authority key identifier: 7D:F8:28:20:89:E2:87:66:51:21:33:D4:23:6A:F4:15:A3:7B:D3:D2
Certificate issuer: /CN=7df8282089e28766512133d4236af415a37bd3d2
Certificate serial: 019D26CD65559DD1D99C5808B33741E54055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft
Manifest number: 05C7
Signing time: Wed 25 Mar 2026 21:01:28 +0000
Manifest this update: Wed 25 Mar 2026 21:01:28 +0000
Manifest next update: Thu 26 Mar 2026 21:01:28 +0000
Files and hashes: 1: VI88t701xOomwQbkq2A0MsUHhaE.roa (hash: RAWKc0L395XKof6Gm/hGtX8RP6I3bbR74YcCWfoMv7g=)
2: ffgoIInih2ZRITPUI2r0FaN709I.crl (hash: /fmEK87u6lD+tYXPOHcrGHqxVMSL0MheUfacu3N1juY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:65:55:9d:d1:d9:9c:58:08:b3:37:41:e5:40:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df8282089e28766512133d4236af415a37bd3d2
Validity
Not Before: Mar 25 21:01:28 2026 GMT
Not After : Mar 26 21:01:28 2026 GMT
Subject: CN=5ed1bd67291876bfa2511f20bfee017fc30a2c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:b5:a4:68:c6:24:c8:f1:44:7b:db:53:7a:
4e:49:b4:99:21:36:95:3f:a5:b3:2d:8f:03:35:6b:
57:7c:86:3b:9e:4d:d3:0e:85:9b:45:7e:e4:da:34:
3d:17:c0:90:7f:8c:9b:2e:9b:b8:aa:4c:90:d9:c5:
68:56:aa:4e:1c:27:5c:94:c3:e0:17:9a:5f:6c:f6:
36:7b:4a:ad:71:26:ec:71:f0:3b:9c:dc:15:f3:8f:
4f:63:fe:80:e2:9c:04:d3:56:bf:46:46:e7:59:f3:
14:3b:26:97:f1:d1:15:13:e8:6c:3c:8c:f4:fd:65:
b2:39:e8:ae:2b:6f:c7:8d:aa:45:7c:0f:2a:44:e7:
22:91:0a:24:08:92:77:bc:f0:8f:92:57:f1:bc:24:
3a:68:9d:57:68:da:ae:d3:10:94:db:4d:05:38:e2:
e4:ea:b6:6f:b9:33:bc:21:12:30:04:d0:c6:1b:25:
9e:f5:df:5e:b2:62:8a:32:92:36:db:cd:4d:33:d0:
92:42:84:b0:b2:ba:94:f9:55:5e:7b:6b:e7:b0:c4:
17:1d:ab:66:e7:5e:b1:ac:f4:94:c5:a1:dc:2d:2f:
5e:b8:99:f3:92:38:3a:0b:26:ee:5e:d8:35:c7:4d:
2a:a7:7a:f5:01:91:cd:f5:f2:9d:8b:cc:d0:69:87:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D1:BD:67:29:18:76:BF:A2:51:1F:20:BF:EE:01:7F:C3:0A:2C:9A
X509v3 Authority Key Identifier:
keyid:7D:F8:28:20:89:E2:87:66:51:21:33:D4:23:6A:F4:15:A3:7B:D3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e6:67:45:b7:22:d4:16:2a:bd:e6:c6:ad:96:12:f5:dd:66:
7d:fb:64:0f:b0:dc:1c:f4:59:2d:64:d8:a3:8f:ca:1c:ce:8e:
c4:ef:e5:00:4b:0d:67:39:25:15:a8:f3:f0:19:bb:84:64:6d:
b6:62:c6:9b:8b:67:7a:c2:ba:dc:82:7a:3d:34:5d:ad:40:28:
b1:a5:c6:cb:1f:27:7f:97:54:c0:80:8e:25:e8:81:ed:a9:7b:
d6:72:f0:70:1d:2a:a2:98:8b:4d:81:36:07:60:14:bb:fb:20:
3a:f0:f7:35:21:e0:c0:32:51:10:cc:84:16:89:28:c0:ca:00:
f5:39:e4:89:0b:11:ad:8b:e5:4a:0e:3e:79:17:02:fc:3f:f4:
e4:ce:64:3b:a4:dd:43:03:7e:09:7c:be:0a:17:b4:3e:80:8e:
12:38:cb:88:b6:f6:cc:58:50:37:2b:3e:88:25:90:a0:b0:b4:
1f:6e:7a:23:52:3b:35:d8:a3:3b:dc:7a:b8:0b:42:96:91:40:
66:4e:85:25:ac:fc:e2:a1:fc:54:a6:bb:b0:a0:fc:d8:eb:49:
2d:dd:a9:2a:5a:0e:2f:84:d8:ac:e5:45:89:4d:af:81:e2:7d:
88:35:2e:ff:82:02:43:ef:9d:c7:81:2f:0b:7a:37:7c:54:9e:
f2:42:c0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:20 2026 by rpki-client