Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
File: FFAQ3dLG97ZEpQAsseTuFixj0dc.mft (raw, json)
Hash identifier: FZMi6hl2Fsvn3Nu5Z6Z7SBXEOFOs3ITGYl93aqzuLsU=
Subject key identifier: A6:8F:3D:9F:37:6A:09:A3:FA:F8:9E:55:DA:E4:CE:F4:D0:EA:0F:D0
Authority key identifier: 14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
Certificate issuer: /CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Certificate serial: 019E1EA2FEEBBE44949EA847C92AA2748D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
Manifest number: 010B
Signing time: Wed 13 May 2026 00:00:58 +0000
Manifest this update: Wed 13 May 2026 00:00:58 +0000
Manifest next update: Thu 14 May 2026 00:00:58 +0000
Files and hashes: 1: FFAQ3dLG97ZEpQAsseTuFixj0dc.crl (hash: tP4/Hkt2cXchj2Imztg2xA8toTPJjPQ2Eq/s3OYE5/Q=)
2: vq82IEcQtF-WpfPnhIhgfebzHDk.roa (hash: 1OV+pDCPKjRkZqon595wjlus9Od7oqEkMW7DsdSGgek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:fe:eb:be:44:94:9e:a8:47:c9:2a:a2:74:8d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Validity
Not Before: May 13 00:00:58 2026 GMT
Not After : May 14 00:00:58 2026 GMT
Subject: CN=a68f3d9f376a09a3faf89e55dae4cef4d0ea0fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:63:de:c7:17:dc:8a:b5:f4:bb:45:1b:3f:ab:
53:6e:54:8b:7c:d8:e0:46:29:7c:fb:72:83:b6:45:
8a:36:63:98:c1:2b:f5:02:ec:37:63:6d:15:af:60:
7e:f2:cd:86:3f:85:18:a0:8f:05:28:29:b0:96:6a:
ab:5e:95:16:d3:01:e9:22:a5:10:bc:41:3e:3c:f6:
96:ac:4f:9c:e4:96:82:f3:0f:36:2d:97:96:b5:53:
f6:2d:8c:4b:3b:ac:e4:b6:80:c5:97:18:2a:64:c2:
a3:6d:b0:1e:08:f4:88:d0:fe:51:73:26:83:6d:5f:
2b:cd:39:c5:c2:7d:07:e0:8d:ca:9d:38:96:64:5b:
33:26:8a:60:0b:46:34:ec:ea:9b:43:28:4c:6e:53:
5b:0e:b3:e0:ca:74:14:19:f7:62:8a:f5:36:67:67:
ce:05:4b:e9:04:2a:b5:5f:88:fd:86:6c:7e:7c:78:
b7:ff:4b:81:24:5e:dd:2e:23:8b:01:7b:3d:1f:2b:
c0:73:43:29:d4:22:84:35:96:3a:5d:e4:0c:4d:5b:
e1:3e:29:ae:f4:06:bb:4d:44:02:66:f0:f1:28:49:
6a:92:9f:de:34:a3:a6:a7:73:db:f4:86:36:29:a3:
21:19:45:09:9d:5d:39:6b:06:99:d8:0f:16:ce:9c:
fe:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8F:3D:9F:37:6A:09:A3:FA:F8:9E:55:DA:E4:CE:F4:D0:EA:0F:D0
X509v3 Authority Key Identifier:
keyid:14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:24:c6:4d:97:7b:5c:30:7d:ed:30:f4:5a:e6:1b:4d:45:09:
6f:4f:33:ba:8c:7e:36:61:76:53:24:c2:d0:74:c7:d2:4c:af:
cf:d8:9e:5c:38:08:1d:11:7c:ab:9a:d2:5b:21:26:0a:da:8d:
4d:1c:99:4c:0e:21:17:92:f4:ca:97:c7:e4:b4:8e:43:73:42:
d6:6e:eb:24:4d:ef:70:dd:00:a6:5e:d6:d8:30:ac:3c:7f:a6:
a6:6d:ac:f8:3a:e5:36:7a:d2:3f:fb:86:00:ce:98:69:78:90:
93:fb:48:53:eb:fd:ec:58:22:25:ec:65:f6:64:a7:ca:cc:bc:
ed:a4:19:aa:64:45:0f:a6:c4:69:4a:cc:96:91:c5:54:b8:54:
9d:09:93:e2:dc:c4:01:0b:a2:3e:42:7c:2f:78:89:e0:cf:1e:
e3:fa:e6:3d:3c:4e:d6:78:7c:e9:f0:b4:c0:a6:16:eb:56:4d:
83:84:d8:dc:3a:fd:87:ff:5e:bc:98:1d:cb:a5:97:ac:a5:c2:
d2:55:4b:dc:b2:b3:f6:42:07:d5:69:05:43:81:1f:47:77:bc:
e2:dd:c2:13:9e:48:1f:86:0c:16:af:20:64:ab:f7:2e:55:70:
a9:70:14:af:24:6b:46:7f:3a:f3:f3:83:7c:f0:3b:52:c7:d7:
c3:86:22:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:32 2026 by rpki-client