Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
File: FFXKMFkjEziJJe4UQQCa0x1LtB8.mft (raw, json)
Hash identifier: +tAp7ZsGZvOuAKkXx5bLqlGol3xYmIJ8uaakmH+Irsw=
Subject key identifier: 2B:99:5F:67:7A:B2:B3:3B:2F:B0:01:7D:1A:79:A1:C8:1C:EB:5D:45
Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f
Certificate serial: 019E1D2272FAAC64B111F96C807D76AD33D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
Manifest number: 0358
Signing time: Tue 12 May 2026 17:00:57 +0000
Manifest this update: Tue 12 May 2026 17:00:57 +0000
Manifest next update: Wed 13 May 2026 17:00:57 +0000
Files and hashes: 1: 3xeqzOPmiV-ru_3aJ3kfdqxXzJY.roa (hash: jKc1RUJSnHc/SqsjGMbhRMXTEf3y6Iz/CxfH7c4pCy4=)
2: FFXKMFkjEziJJe4UQQCa0x1LtB8.crl (hash: 5CvaN2W5rFXbkPqfXjjbBwthImpRxbdu6XC/tvOHvoc=)
3: TyNOn4TNAx2omsJ5AvuxHJvXe0Y.roa (hash: J/zevkaEkdHJwCzHMRFaDsyeaoLiDWpPTHAZUSzBODU=)
4: W-lf8hwpKZ_Qz4QyYmLJuZ0Q150.roa (hash: 0CCMus3U6y/Vhpkh6RFJf4seKPVSo2QOmMSt3f+sxgc=)
5: WY4yKJ6FuiBdiFOznndYQM--z2g.roa (hash: 76Gd2waLyhSjE5zW3D9kYms7Etz3xgkY7SORNKkRpWI=)
6: ZQhaiJ1oc9r5-C3flapO26NGQ7I.roa (hash: plgNeQhV8RVh6yAaBxxXzVfBQT4+N5LviNtdc5/+xvc=)
7: Zf8BnsxBEzPifxA8SqDN9EEVzfs.asa (hash: goCO6KEz7zNZ6e8+cBVkdYSWfsyiMbes0UHqaLp/+8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:72:fa:ac:64:b1:11:f9:6c:80:7d:76:ad:33:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f
Validity
Not Before: May 12 17:00:57 2026 GMT
Not After : May 13 17:00:57 2026 GMT
Subject: CN=2b995f677ab2b33b2fb0017d1a79a1c81ceb5d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:51:31:44:b2:d9:c0:82:41:b1:97:d2:f2:8f:
0f:5f:5a:3d:11:eb:0b:57:da:9e:0d:63:81:f1:1e:
73:f8:32:05:53:0a:dd:9d:f2:ac:58:45:b0:f9:33:
1c:5d:ee:b4:5a:23:72:9f:2e:a6:34:f7:0b:82:cf:
50:b5:d3:d5:d4:08:4b:cd:1e:ac:6f:eb:11:8e:f6:
d2:71:80:e7:05:04:5d:22:13:bf:d5:48:a3:7b:f9:
11:b4:27:5d:6f:7a:00:fa:1b:48:80:ee:b8:d8:b6:
39:46:97:b1:29:6a:a9:36:ef:be:6f:18:58:07:30:
1c:98:37:1e:b3:05:cc:1b:69:4b:2a:85:66:4f:68:
2c:45:7e:95:56:f5:57:43:46:05:81:cb:0d:e4:3d:
2b:c7:5f:d7:df:0a:63:77:62:7a:63:6d:b8:49:cb:
b5:f3:91:f3:0b:f6:44:b2:4f:b3:fc:46:d9:23:bf:
d4:ba:24:57:b6:26:f7:0b:72:5b:b4:43:3a:d3:56:
38:db:04:3e:89:d5:22:cd:b4:b4:41:c1:a5:1b:5e:
82:ee:39:0a:9b:63:b4:1c:63:05:64:db:48:05:17:
27:d4:3a:45:b3:02:d8:03:0a:a9:07:ad:51:dd:5e:
24:b9:36:71:cf:39:a8:43:04:10:c1:de:3b:2d:17:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:99:5F:67:7A:B2:B3:3B:2F:B0:01:7D:1A:79:A1:C8:1C:EB:5D:45
X509v3 Authority Key Identifier:
keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:28:38:b9:73:fb:4c:58:8f:e5:42:be:db:d4:78:7b:21:f2:
3f:9a:6b:c2:0d:d0:f4:4f:23:41:1f:ab:80:a4:66:8f:42:f8:
fa:04:0f:6b:09:94:97:17:7e:79:2d:3a:74:53:ef:b4:c3:81:
2a:83:a7:f9:e8:32:19:f9:4c:12:53:ed:10:4e:7c:73:91:c0:
61:da:23:2c:07:b2:c8:14:4f:36:85:94:36:bc:a7:ae:b7:d4:
c4:1d:af:d3:a4:06:23:f3:dd:5e:db:94:db:35:66:e3:6b:66:
f6:3b:c0:0c:63:ec:8d:f6:08:2a:77:ea:d5:9f:14:b5:0a:04:
06:c9:eb:b2:53:d0:bb:94:f2:e9:3a:ca:d8:a3:42:7a:fd:81:
5b:94:d6:5a:90:c1:a6:d0:8c:ad:9a:9f:e9:cc:f8:f4:b1:05:
f9:05:aa:a7:f7:67:e5:2b:1b:b4:03:78:89:69:41:91:7b:97:
f4:6b:99:13:59:49:a2:7e:ff:9e:77:d6:13:f4:c8:bc:81:dc:
8b:9d:6c:8c:a4:0a:ba:dc:7e:a1:85:0b:91:d9:9c:c7:e5:05:
bf:bb:92:15:83:05:ac:c9:61:29:0e:07:ec:6a:dc:22:4a:ed:
bd:64:23:91:af:bb:97:4b:88:81:22:e5:2a:4a:29:dc:36:26:
7d:72:49:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:18 2026 by rpki-client