Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
File: ffyQHUowe9oPOwv2XTEEaCINxeE.mft (raw, json)
Hash identifier: siTXx2etUajZleWZPKK2O06rre0H8v1Y5qZsSMv5VmY=
Subject key identifier: 53:FC:EF:03:C8:ED:E6:5A:C9:DD:A3:AD:09:27:84:DD:7F:22:8D:5E
Authority key identifier: 7D:FC:90:1D:4A:30:7B:DA:0F:3B:0B:F6:5D:31:04:68:22:0D:C5:E1
Certificate issuer: /CN=7dfc901d4a307bda0f3b0bf65d310468220dc5e1
Certificate serial: 019D28167C771FC062867C6806EE313FFAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffyQHUowe9oPOwv2XTEEaCINxeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
Manifest number: 02DC
Signing time: Thu 26 Mar 2026 03:00:55 +0000
Manifest this update: Thu 26 Mar 2026 03:00:55 +0000
Manifest next update: Fri 27 Mar 2026 03:00:55 +0000
Files and hashes: 1: GYmEwPAMEH9Te7ebMN58xkv8xk4.roa (hash: TSDals2siONH2EhU+VSK+TSjCRIiaaKgOUfAXsKPPPw=)
2: ffyQHUowe9oPOwv2XTEEaCINxeE.crl (hash: 5mXk3qhPxmu/XFa8U5Y+4hig6cPlgBAHhZbYAfsSQqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffyQHUowe9oPOwv2XTEEaCINxeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:7c:77:1f:c0:62:86:7c:68:06:ee:31:3f:fa:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dfc901d4a307bda0f3b0bf65d310468220dc5e1
Validity
Not Before: Mar 26 03:00:55 2026 GMT
Not After : Mar 27 03:00:55 2026 GMT
Subject: CN=53fcef03c8ede65ac9dda3ad092784dd7f228d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:11:4d:67:46:1f:b8:bf:7c:b8:8b:d3:08:
5a:17:ed:2a:ee:75:0a:f1:f9:19:0e:80:7a:c4:c7:
d4:25:41:e3:09:64:d6:ee:dd:0a:9a:03:17:26:9e:
03:0e:13:3a:6a:05:d5:bd:40:6e:73:fd:db:d1:7c:
73:55:0a:3a:fd:f4:37:47:f5:d0:95:63:66:3c:a3:
b4:54:a4:44:5a:87:7a:5f:74:ac:70:fc:d9:52:1a:
09:81:91:64:93:b7:04:a5:e2:ea:b1:e5:86:a7:7a:
50:32:80:a3:9c:f6:09:50:da:cb:da:ae:cc:81:e6:
a2:ba:7c:82:89:8a:09:4a:ef:e0:fa:08:a3:f3:92:
8f:db:04:2e:1a:a8:9c:92:18:80:78:b5:c7:f7:37:
42:18:b8:ad:58:1d:85:be:da:06:4a:f3:00:8d:b0:
e1:1a:00:8a:64:a3:85:a8:d8:e5:9c:0b:d6:03:b2:
3b:25:72:1a:ec:90:df:f8:4a:72:cf:8a:b7:57:f3:
8f:09:86:7d:30:90:a7:09:83:44:c3:b2:39:37:b2:
e1:87:22:b5:bb:94:77:cd:bc:85:b8:46:be:9b:ae:
35:d4:7e:a9:f4:54:65:02:27:2e:26:0b:b6:21:95:
ff:13:d1:6d:e8:9a:0c:4e:15:78:d2:27:88:cf:d0:
3b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FC:EF:03:C8:ED:E6:5A:C9:DD:A3:AD:09:27:84:DD:7F:22:8D:5E
X509v3 Authority Key Identifier:
keyid:7D:FC:90:1D:4A:30:7B:DA:0F:3B:0B:F6:5D:31:04:68:22:0D:C5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffyQHUowe9oPOwv2XTEEaCINxeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9e:6c:a8:74:a9:af:c3:26:4e:c6:70:78:0a:1d:79:80:5a:
a2:ad:09:f5:e9:75:93:f8:41:f9:9e:79:f4:20:11:07:2b:ef:
6a:0b:dd:d9:34:cf:68:af:72:f4:30:60:6a:09:c0:5f:4f:4c:
69:48:06:07:1f:63:f3:8a:c2:2f:8f:fc:a1:d4:af:ba:be:27:
bb:69:1f:ed:37:87:84:86:3d:f5:66:1c:8b:0d:9b:cf:df:9c:
d4:b4:0d:79:c0:ce:f3:ee:75:4c:f1:91:5e:3f:2f:a8:b6:ed:
38:53:33:f6:98:29:9f:3b:a0:f2:c6:80:87:88:f5:8a:fa:07:
ef:e4:ec:62:39:a1:75:1f:ac:39:9e:2f:5e:ec:5e:57:6b:22:
4a:57:a2:34:f6:99:da:40:e5:19:e9:71:57:e7:f2:23:c3:45:
9d:5f:d7:5d:8a:79:21:dc:d4:79:17:59:c1:2f:d0:87:16:fb:
38:3e:24:ce:50:3f:46:7f:71:48:61:da:90:c1:b6:9d:fc:7a:
a8:4a:82:ef:65:be:77:ef:36:51:63:80:75:64:68:89:07:ef:
23:4f:d6:c8:ea:88:3c:20:63:0f:4b:fd:85:e8:3a:1a:66:da:
c4:92:79:73:8d:80:7e:5d:3e:9c:b0:ef:c8:83:db:60:09:8b:
5e:d7:5d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:34 2026 by rpki-client