Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
File: FFAQ3dLG97ZEpQAsseTuFixj0dc.mft (raw, json)
Hash identifier: 0uxL5qExW7aL9gvehCB7D9nQ0RxPUP2qjxAuQUlgTjE=
Subject key identifier: 2E:40:91:B3:1F:82:0D:F7:59:21:07:18:29:FE:F3:9E:4C:68:BF:C5
Authority key identifier: 14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
Certificate issuer: /CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Certificate serial: 019F935AEE07786D3B313AD985BBDD353D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
Manifest number: 01CE
Signing time: Fri 24 Jul 2026 09:00:37 +0000
Manifest this update: Fri 24 Jul 2026 09:00:37 +0000
Manifest next update: Sat 25 Jul 2026 09:00:37 +0000
Files and hashes: 1: 8-KHbyQ_KYn0snvY9x30CBtJw18.roa (hash: 80kk3Ul4i3TWv/R5PMNMesb+6kDgT0CnH8s73ujvE20=)
2: FFAQ3dLG97ZEpQAsseTuFixj0dc.crl (hash: JmRus4DNYaD5+sAWIj3qC0Vh9w3iBz8S98SYz8SC774=)
3: YGtlZnWeERw8AsqsnIvt3Avrp8g.roa (hash: wjBYM93Z9LSZQjBjOvD3I1KwuCypmMdncWxGSLsNk2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:ee:07:78:6d:3b:31:3a:d9:85:bb:dd:35:3d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Validity
Not Before: Jul 24 09:00:37 2026 GMT
Not After : Jul 25 09:00:37 2026 GMT
Subject: CN=2e4091b31f820df75921071829fef39e4c68bfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:c5:df:19:42:54:ab:2d:16:d7:5d:c2:c7:
16:77:7d:e3:3c:3e:01:a2:8d:5c:82:c9:81:d1:15:
4d:70:52:dd:f8:6a:af:84:fc:ab:b8:cd:1e:1e:b9:
6f:a4:ae:8b:30:e1:d8:e9:ee:72:c1:96:3b:d6:9c:
de:48:c9:32:c5:15:f2:5a:41:5b:1a:ef:05:9c:4a:
07:92:0c:3c:f0:c2:64:e5:bd:6f:e7:b6:50:9e:5a:
62:13:07:20:fb:cf:f0:5c:10:65:d1:bf:63:8c:d8:
2d:a8:e4:0a:e1:ff:c7:9d:f9:ae:95:68:5c:01:7e:
98:42:5b:4e:f5:b7:0a:e6:9b:42:00:3b:82:f3:43:
06:fd:9f:af:63:84:a5:00:b7:4e:c6:12:99:c1:85:
14:fd:c7:c8:35:93:73:8a:3c:ae:6e:78:22:96:3d:
43:68:7a:7b:84:f7:be:e9:4b:c6:63:6a:06:e1:2e:
0c:3b:64:80:2c:e9:85:76:91:5d:29:a0:48:55:94:
9f:85:85:9a:a6:24:c5:04:df:ec:bf:68:e3:14:31:
4c:28:5e:1b:ea:02:b1:58:51:bb:ef:2a:6c:7d:15:
0f:89:cd:e9:00:7f:ee:38:8e:34:bd:84:92:d6:01:
86:24:98:71:e3:8b:98:f3:81:72:0e:56:35:13:61:
47:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:40:91:B3:1F:82:0D:F7:59:21:07:18:29:FE:F3:9E:4C:68:BF:C5
X509v3 Authority Key Identifier:
keyid:14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3d:01:48:a3:a8:80:07:be:f8:12:ce:a1:df:20:23:1b:ba:
db:e7:b4:2e:ba:2a:40:a9:3f:56:0d:48:fe:f2:fe:d0:90:c5:
d9:32:2b:39:a5:2e:e3:58:7d:1e:2f:df:32:1c:4b:2b:c0:b2:
96:74:36:db:23:57:27:4a:35:7c:56:4f:0f:7f:ad:1f:ac:fa:
76:32:2e:7e:49:43:54:26:28:26:a0:c9:43:c7:63:77:00:d9:
2c:17:69:30:af:18:34:81:12:c2:bd:40:0b:d8:56:53:f1:e3:
22:31:2f:15:ca:c9:67:07:00:68:3c:29:94:89:cb:cb:ca:88:
ce:44:ff:9f:01:87:8a:ad:e4:08:74:05:f1:d9:91:ae:0b:ec:
30:01:1a:b1:13:0b:f2:9d:fb:56:63:8c:cc:e5:ec:5d:c9:59:
81:04:4f:08:17:56:23:d8:30:48:83:a7:c7:99:e5:ec:39:bc:
b6:50:d0:73:c9:cb:b3:58:3f:07:f1:e3:7c:09:49:e5:94:cf:
9d:cd:74:f9:67:c5:ae:a7:4d:31:cd:0f:70:9b:b9:26:01:03:
f6:97:ed:45:21:87:1d:9d:a2:98:61:82:28:43:6e:7d:96:7c:
f1:d5:36:27:75:6f:71:bd:a8:07:9d:78:24:2c:09:f2:93:85:
27:a0:83:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:40:29 2026 by rpki-client