Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: rb1TodttaxUz7S8qYASpbMB9+AJU3X7FwjYlw0uVQ9o=
Subject key identifier: 34:7E:FC:35:D4:E5:A5:42:5E:33:38:86:B2:AA:6A:17:21:23:44:1B
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 01A0F8D786AF7BC1F17D17682A2048E44D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 1A82
Signing time: Thu 01 Oct 2026 19:01:09 +0000
Manifest this update: Thu 01 Oct 2026 19:01:09 +0000
Manifest next update: Fri 02 Oct 2026 19:01:09 +0000
Files and hashes: 1: Eo3L-3lPzBtGwSWfnMDXuxuu6nc.roa (hash: KayjLv1EKOAgncKf1kvYzIArRjjjosmZ3G86Nh3L73E=)
2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: LQ4+osRpKchikLvp6Yb7w0brqz7MbnKdccDRG0QIHoE=)
3: PEiD2fXY8MTybS2F517gf0un5yo.roa (hash: QNquho6Cc22D4ZGcJ11pg3kLKNMl0b+Ez3eOGTC66KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:d7:86:af:7b:c1:f1:7d:17:68:2a:20:48:e4:4d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Oct 1 19:01:09 2026 GMT
Not After : Oct 2 19:01:09 2026 GMT
Subject: CN=347efc35d4e5a5425e333886b2aa6a172123441b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:3d:e5:29:66:ef:29:19:cf:5a:be:b9:13:
6c:b7:9b:bd:02:e9:b3:67:3d:de:46:2d:d9:20:e1:
9b:0e:bc:98:81:a6:f3:7f:67:c7:37:e4:b6:01:d1:
3e:d2:f7:e7:6e:40:fe:0a:c2:7c:7e:8b:ed:9c:f9:
ca:78:96:50:6e:b6:96:67:d6:c5:85:42:68:e2:d9:
5f:2a:44:59:10:bf:41:5d:1e:c5:95:fe:d4:02:4c:
21:a2:9d:79:bc:f3:9b:00:e2:95:76:ae:63:5f:27:
f5:f4:56:bc:01:55:67:5d:8b:14:2b:96:b5:92:09:
f0:8e:22:5d:77:86:d9:29:d9:35:b2:73:bf:b4:b4:
a3:7e:ea:21:e6:9a:53:36:a0:a2:fa:3b:97:e1:34:
e8:4f:60:c9:cc:03:6c:c9:55:6f:15:43:d9:7e:60:
3a:b4:5f:d1:9e:c9:68:0a:e5:d3:01:71:c7:91:65:
da:3a:45:4c:f2:4d:a5:df:ee:99:e4:0d:fc:11:84:
47:05:fb:a6:90:08:ce:28:f7:3c:22:d7:17:0e:a1:
38:f8:d2:7b:d5:35:e2:21:d6:82:36:7a:f7:2a:af:
f9:62:b2:92:90:0b:b6:b0:74:24:47:81:9c:35:b1:
25:9b:ff:c6:f3:25:8c:9e:e9:48:65:74:d9:b1:fa:
17:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7E:FC:35:D4:E5:A5:42:5E:33:38:86:B2:AA:6A:17:21:23:44:1B
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5b:7f:10:4a:76:67:4a:85:35:65:41:c6:ef:ae:c3:41:6f:
9b:92:35:81:47:8b:b1:88:e9:02:07:41:1c:be:4e:7c:40:66:
17:cc:63:b1:72:62:c7:42:f3:41:89:5c:2c:77:4c:11:14:fe:
49:6f:29:49:21:a4:77:7f:bd:8d:42:b8:f4:d2:5a:08:0c:9c:
cf:e1:4b:72:2c:26:58:d7:c0:7b:1a:7e:93:bd:d7:2a:71:9d:
00:9d:a2:31:0a:16:68:51:63:ae:b3:ba:d1:37:6d:ab:33:ba:
70:40:53:7d:f0:d0:8e:b0:b0:53:b1:d2:ad:5c:47:80:40:bc:
0c:c7:66:fd:c9:6d:70:6b:21:f0:73:e8:dd:24:e2:bb:2e:d6:
e6:91:78:b0:87:9f:1e:b6:3a:cb:da:7c:f2:33:fa:a6:88:4d:
da:9c:f9:d1:77:2f:ac:9f:35:ca:2e:50:1d:4c:7b:dd:d3:a1:
00:86:a8:b6:7e:e9:50:8b:98:49:f9:93:ce:4b:1e:c2:ef:d3:
7e:b4:4c:16:cb:d4:4e:34:b1:6a:32:9b:cd:97:1d:4a:fe:bd:
41:81:3f:d6:4f:18:31:cf:b2:d2:07:3e:02:81:93:34:47:8e:
99:b2:40:81:ba:79:d4:f4:dc:5f:10:fe:eb:e4:eb:c2:c5:58:
9f:f2:34:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:56:25 2026 by rpki-client