Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: GwEEjdu/5sBPyTI2GkGLdQVPVmeqfivXwKEpHVLpU+8=
Subject key identifier: A0:F2:FB:AA:BE:6F:BC:94:5E:1D:22:36:CD:05:1B:45:67:C3:A9:4D
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 019D27E03AFEAFD1E370C7A1BA21CE2F8A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:39 +0000
Manifest this update: Thu 26 Mar 2026 02:01:39 +0000
Manifest next update: Fri 27 Mar 2026 02:01:39 +0000
Files and hashes: 1: Eo3L-3lPzBtGwSWfnMDXuxuu6nc.roa (hash: KayjLv1EKOAgncKf1kvYzIArRjjjosmZ3G86Nh3L73E=)
2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: ou9QPIK7DH7oVIdI/LhX3WxrZmkyxODosFGDr9XS7g0=)
3: uMgy9mSN4M6Tkk_b5KpTL6EISmU.roa (hash: iwm1H/C5w6/e24iulhDBPTWg/eHtZ2JKGfTV0V4+BsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:3a:fe:af:d1:e3:70:c7:a1:ba:21:ce:2f:8a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Mar 26 02:01:39 2026 GMT
Not After : Mar 27 02:01:39 2026 GMT
Subject: CN=a0f2fbaabe6fbc945e1d2236cd051b4567c3a94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:cd:14:a4:45:50:78:91:75:41:ae:fe:4c:
91:50:0d:b5:57:ca:cb:da:5d:67:de:46:d4:bf:db:
43:23:96:68:2d:ca:f9:2d:71:92:3a:80:69:9b:05:
4e:18:47:98:ea:8d:71:da:fe:d9:ab:d2:f5:e7:98:
dc:04:25:9f:f4:a9:e7:b2:fb:23:f6:7a:40:bd:32:
97:be:26:6a:fd:74:83:03:06:f4:77:25:9d:e0:97:
b5:ba:1b:9c:55:c9:fa:c1:a6:57:6d:d0:7d:f9:65:
17:b4:5c:77:cc:9a:73:84:07:2a:d5:8a:e0:89:73:
95:49:4e:c5:73:9d:78:3c:ce:6e:bb:0f:2d:b0:e0:
98:d3:39:18:f2:a1:23:38:d4:ba:6b:9d:79:c7:4a:
5e:fd:bb:da:d8:46:c4:6a:4e:4f:0b:04:8e:c6:77:
b7:ee:d5:f5:ff:20:5f:18:39:01:50:de:af:35:c7:
ec:e8:c6:e3:68:ad:38:00:ad:04:a6:df:ea:95:f1:
e0:6e:f4:d0:70:c8:ed:1c:c9:16:f1:62:b1:71:96:
08:3b:20:81:31:e9:63:4e:61:99:bf:b1:45:df:1d:
78:a4:d4:40:46:4f:8e:21:de:e9:4b:b3:03:25:cc:
36:c6:89:56:3e:af:56:31:84:a6:9a:45:6c:fa:d1:
0e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F2:FB:AA:BE:6F:BC:94:5E:1D:22:36:CD:05:1B:45:67:C3:A9:4D
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e9:92:77:7e:f3:91:41:2c:8a:28:1a:e1:d8:55:1a:d3:44:
f0:a2:e5:64:34:78:c4:ad:69:ce:a3:aa:c9:76:f3:b7:a0:4e:
28:73:d4:cc:f8:3f:54:d5:2b:fd:f9:9f:c2:d9:8c:13:e6:53:
59:11:d1:6b:18:58:ee:b6:13:5d:fe:16:5c:b6:df:77:54:67:
e6:60:9e:bd:c1:00:06:d6:a7:14:5e:ad:8a:dc:fb:88:b1:aa:
13:f6:6b:6a:4b:34:ed:f9:e5:06:d6:27:95:90:2b:fc:79:72:
99:40:ab:3b:b2:a1:87:eb:e2:3f:82:44:d6:96:73:e1:3d:6c:
50:1c:ff:5f:40:9b:3b:19:9b:aa:be:19:2f:c3:26:41:cb:c0:
0e:36:92:34:1a:0f:46:17:98:66:2a:13:49:72:8e:75:dc:5e:
84:c9:43:72:a0:97:90:90:5f:a7:01:cf:74:32:c9:ef:43:e1:
0a:70:b9:12:64:f8:1a:43:4c:39:77:8c:48:e7:c5:a4:c0:e1:
0f:fe:79:3d:0f:bc:b7:dc:f6:52:87:a0:17:82:b3:17:6d:c6:
53:bc:5a:19:6f:d0:3b:62:e6:ec:a9:9b:7b:de:46:65:55:61:
c7:8b:3f:9a:67:e0:9f:29:b9:e2:ab:85:e3:7e:2d:af:60:f4:
d9:a0:b2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:40 2026 by rpki-client