Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: /AnGFLsMtW/EDCsHnCPmDYV6Yk+xu/Icc1wjp1EzJLQ=
Subject key identifier: 95:EA:5D:58:F0:ED:06:02:53:53:6F:D3:0A:A0:D5:3B:8B:D0:4C:48
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 019E20FF913F3404D2E0CED14115C8E97F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 11:01:20 +0000
Manifest this update: Wed 13 May 2026 11:01:20 +0000
Manifest next update: Thu 14 May 2026 11:01:20 +0000
Files and hashes: 1: Eo3L-3lPzBtGwSWfnMDXuxuu6nc.roa (hash: KayjLv1EKOAgncKf1kvYzIArRjjjosmZ3G86Nh3L73E=)
2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: zI0daV2qDRADwPvlOesShmOEL7hIdaa7EaiDyjQLVCI=)
3: uMgy9mSN4M6Tkk_b5KpTL6EISmU.roa (hash: iwm1H/C5w6/e24iulhDBPTWg/eHtZ2JKGfTV0V4+BsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:91:3f:34:04:d2:e0:ce:d1:41:15:c8:e9:7f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: May 13 11:01:20 2026 GMT
Not After : May 14 11:01:20 2026 GMT
Subject: CN=95ea5d58f0ed060253536fd30aa0d53b8bd04c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:fb:fc:83:ae:d5:13:8e:fe:10:9c:42:99:
b4:f1:36:61:ea:4a:87:66:86:30:32:bd:4f:83:09:
92:e9:a2:ae:b5:18:f7:1a:34:22:15:98:c8:14:f0:
9e:7d:36:f3:70:ba:37:24:f5:89:fc:59:6c:ea:be:
8f:23:9f:f1:b7:c9:77:30:c5:42:bd:e7:ad:fc:62:
1c:e0:e1:93:fc:5f:dd:7e:93:3c:4d:4d:e0:fc:44:
23:ec:78:41:98:5b:a6:76:c0:84:0a:1f:31:d2:72:
40:7e:e5:ef:a2:70:e4:85:fa:d1:11:c6:7f:c1:15:
45:bd:4d:70:fe:42:60:59:af:9b:f7:70:6e:c0:56:
d2:a5:85:05:9b:35:60:2b:0f:a5:94:c6:e4:d5:3b:
e0:c9:20:84:c7:ea:6b:53:3d:35:1f:22:75:73:49:
a8:28:13:c5:cf:19:05:f7:90:43:e0:5b:dc:fb:d9:
9a:89:0c:21:1e:46:5c:bf:66:53:5c:77:d1:a9:2b:
0b:70:02:5f:73:a7:89:fb:c1:c6:d1:49:04:9b:62:
20:98:3d:f3:e6:a9:55:a5:da:55:b7:46:99:09:7d:
8e:1a:bd:78:40:90:7e:4c:d9:df:85:08:e2:b5:5c:
ad:25:2d:98:3f:1c:fc:a1:a0:81:e0:a3:2a:24:78:
1a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EA:5D:58:F0:ED:06:02:53:53:6F:D3:0A:A0:D5:3B:8B:D0:4C:48
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e5:19:11:a2:bf:1b:0a:a5:d6:26:2a:e3:22:a6:0e:c1:e1:
89:c2:b6:e0:96:f1:6f:04:54:00:7e:be:e1:e5:b5:c3:4d:61:
46:22:1d:00:4d:33:86:f2:09:b8:28:f0:dd:18:4e:47:01:4d:
16:d5:1e:6b:02:43:6d:86:be:a2:3f:1a:f1:77:a4:dd:14:e0:
ee:09:29:93:bd:60:33:6d:93:d9:6b:f6:6d:24:11:d8:93:3d:
27:f1:97:ea:5b:f6:cf:57:34:a3:18:04:dc:df:26:dd:e3:85:
6c:e8:53:17:d1:95:43:b8:26:a6:1a:e0:2d:ed:e7:cc:8c:41:
57:14:e9:c1:61:d4:c8:8d:d0:d1:f4:7e:96:51:12:6b:6d:dc:
f3:ca:68:58:10:3a:46:30:4d:33:ae:82:3f:69:c4:c9:07:ba:
a9:03:f6:02:b3:f8:8a:ed:d6:40:fb:ee:be:03:68:22:f3:33:
a4:e0:5c:57:1a:88:1f:2e:87:9c:dd:39:ba:c5:4b:93:34:51:
fe:c9:ce:1f:42:bd:77:21:e6:ce:52:f8:27:a7:c8:e3:42:17:
c8:f0:b4:4c:df:0e:8d:63:41:00:7a:06:8d:29:31:55:67:43:
9a:ea:d4:68:1e:29:f9:57:d8:64:e0:4b:97:fd:ef:fd:19:2b:
18:a1:c8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:18 2026 by rpki-client