Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: S3b1YlKNFfDxPcZr8l/ousNKNnInGCFEc3hmBYhGqLk=
Subject key identifier: FF:CF:30:09:F6:6A:50:DA:07:4D:F7:FC:59:50:31:26:8A:8C:E4:C2
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 019D2960D03A5AE12F32A97648C4A0EC818D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 09:01:43 +0000
Manifest this update: Thu 26 Mar 2026 09:01:43 +0000
Manifest next update: Fri 27 Mar 2026 09:01:43 +0000
Files and hashes: 1: BvnR5KCMhsoLCz2hSAnbNfkHGk0.roa (hash: hDwrjYY17s8gLiCt6EYouA8sleyAadnkSLPmIcLH8nw=)
2: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: ep/QrRMd8UueZ6wOLOIh3Q/Fu9h9Ms9h4LtLC9lkHss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:d0:3a:5a:e1:2f:32:a9:76:48:c4:a0:ec:81:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Mar 26 09:01:43 2026 GMT
Not After : Mar 27 09:01:43 2026 GMT
Subject: CN=ffcf3009f66a50da074df7fc595031268a8ce4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:fd:e6:75:6e:32:55:4a:11:ab:62:28:04:97:
f5:29:ad:27:08:6c:58:9d:81:fb:c3:2c:08:0f:ff:
26:d7:9e:9f:82:96:19:26:24:54:6d:13:44:f2:24:
48:5e:2a:ba:20:35:89:84:f5:cb:58:32:62:21:3c:
a0:93:26:c9:85:17:47:fa:43:3f:53:21:59:63:bc:
75:c8:29:7f:83:18:4c:fb:1c:03:c4:8e:ef:d2:fd:
f3:4f:c0:59:fa:8d:3a:fa:ff:fb:bd:83:9d:a5:72:
74:10:7b:6e:bb:40:57:d7:a7:ee:b2:f7:f8:55:87:
e5:83:77:59:66:ab:53:e3:1b:51:9f:f9:03:bb:f7:
e1:55:a3:dd:8b:5a:8e:84:77:7f:35:59:f1:10:55:
d6:c3:9c:ff:5f:7e:c7:74:73:63:35:09:4f:58:be:
de:dd:ba:8e:a0:c7:ab:14:3e:de:c0:5b:36:8a:08:
22:85:79:84:68:42:75:a9:c6:52:b1:f5:e6:1f:ee:
2d:c6:64:fc:ac:15:59:9a:6e:67:62:6b:44:f0:ce:
0b:71:43:33:b9:e7:ac:63:44:ca:54:6e:a5:9b:f8:
6a:6b:f4:34:4f:ad:55:32:85:e9:c5:52:9c:a4:a8:
ad:f3:2a:73:90:3d:be:2c:07:76:00:e4:3d:7a:aa:
a5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CF:30:09:F6:6A:50:DA:07:4D:F7:FC:59:50:31:26:8A:8C:E4:C2
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2f:5f:d5:8b:c5:e4:9d:02:d0:2b:06:5e:04:1d:8e:b0:0f:
43:1d:9f:1a:13:ed:2e:5e:cd:85:d2:e9:c5:53:8e:08:53:96:
51:69:c9:5a:22:a5:a0:64:ee:d8:64:7b:67:cf:a0:81:88:39:
04:e1:6e:ac:b1:13:01:d7:e9:12:27:fe:47:af:75:7a:38:b2:
0b:70:60:87:20:3c:a2:70:f5:0a:71:4c:3e:6b:47:56:0c:78:
b4:73:57:5d:5b:e1:6a:23:b4:52:b1:49:1e:11:75:b8:ba:ff:
6e:84:ae:be:87:93:42:c8:5d:85:0b:f9:31:0b:40:aa:2c:2c:
3c:c1:1c:92:0e:85:e4:5c:d1:2e:aa:33:92:5f:a9:85:60:1b:
a2:47:50:4f:b0:da:32:43:d4:05:dd:d7:94:9e:e2:6d:17:f7:
91:bd:c2:35:98:87:8e:60:63:1f:b2:8d:91:3f:fd:ad:1c:2e:
1a:01:ce:66:e7:36:19:7b:b3:a9:eb:7a:fc:9d:00:25:02:3c:
a3:87:64:52:da:4f:1f:8e:49:6b:1c:59:c0:3b:7a:33:ac:e3:
e3:04:0a:39:c5:5c:bc:5e:73:ae:24:7c:4a:37:fe:94:07:bd:
42:2c:c0:23:06:d0:19:2c:83:f7:b1:35:71:22:cc:e3:48:88:
21:86:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:50 2026 by rpki-client