Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
File: ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft (raw, json)
Hash identifier: 5w9dvSvhaCkKD8GStmHIv3YZvmDkL/8qLwAFOY7MRDs=
Subject key identifier: 3B:F4:7A:AE:94:E0:F0:D2:3D:15:01:79:1B:74:C1:8C:24:6E:1E:58
Authority key identifier: 7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21
Certificate issuer: /CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821
Certificate serial: 019D284E05FAB020DB6ED0BD69341C1A37A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 04:01:35 +0000
Manifest this update: Thu 26 Mar 2026 04:01:35 +0000
Manifest next update: Fri 27 Mar 2026 04:01:35 +0000
Files and hashes: 1: cUjXL3AkU0vzCeL7XNA5hx74zv4.roa (hash: M5YlQ4HoZ45gNTliPTDu0USjnaLFnkhBumUlmweXtD8=)
2: ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl (hash: UpYcyFaOuJRQ8wiVeF+Z9Qm/NOudNWu8SCZaTD8Z2Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:05:fa:b0:20:db:6e:d0:bd:69:34:1c:1a:37:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821
Validity
Not Before: Mar 26 04:01:35 2026 GMT
Not After : Mar 27 04:01:35 2026 GMT
Subject: CN=3bf47aae94e0f0d23d1501791b74c18c246e1e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:0d:74:3c:d8:2a:5c:39:dd:90:42:8f:df:
61:ce:65:0e:11:1e:7c:93:98:50:af:8f:ca:d2:98:
d7:a0:04:2d:27:61:bf:0d:bb:fa:59:b2:35:4f:0d:
40:c6:8e:71:9a:eb:53:c8:54:15:07:16:44:6b:16:
26:89:3f:f7:89:10:1b:3b:c4:63:59:81:8d:a0:e9:
e5:e6:ad:fb:2c:63:78:0a:35:03:aa:c3:5c:23:cc:
a3:cc:44:d2:d3:c9:5b:4c:8c:84:41:f3:26:58:05:
72:e7:b6:40:ad:ea:a7:d9:06:96:b7:a6:c0:f5:35:
ce:66:f4:f8:ac:b3:3a:e8:c0:c1:2c:db:9b:64:ae:
de:e7:9f:20:ce:95:ec:ed:16:3c:d9:89:e3:a9:d0:
20:9e:61:ec:44:e7:77:d1:23:e0:ac:56:07:40:8c:
94:0a:95:98:91:82:17:13:69:df:8e:af:1d:3c:a1:
f4:07:25:74:d3:bf:18:59:19:01:72:a5:bf:8f:e7:
74:09:b4:86:d6:1e:b1:e2:a1:24:c9:53:bf:67:1d:
11:01:8d:96:67:7f:8b:a9:b3:00:b4:88:ac:c1:09:
4f:d3:39:8c:c4:84:50:c8:ff:6f:09:bb:38:a0:ae:
dc:70:41:b4:3b:cf:72:a9:0c:b9:ba:4c:b1:80:6a:
4a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F4:7A:AE:94:E0:F0:D2:3D:15:01:79:1B:74:C1:8C:24:6E:1E:58
X509v3 Authority Key Identifier:
keyid:7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:dc:64:81:4f:48:c9:81:b3:62:0b:ad:5c:58:bc:9e:eb:22:
5f:a0:c8:82:7b:6f:28:01:65:20:cf:88:6e:5c:56:fd:4f:03:
d1:bf:9f:89:86:6a:1f:68:8c:72:00:9e:64:f0:1b:f8:3f:77:
b3:33:9b:23:89:15:73:f0:1b:0c:24:f7:a1:21:41:68:96:4b:
33:03:cc:99:09:6f:64:90:d3:29:6a:d9:19:7e:04:ed:bf:24:
02:f8:01:78:b5:db:30:8e:67:2f:a3:70:0f:7a:0e:63:97:ac:
91:1a:cc:d3:c5:73:5b:9a:fc:63:90:d7:a0:f0:b3:53:55:59:
12:5b:2f:e5:ff:81:2f:4d:a2:69:cf:7e:16:f1:96:28:95:a3:
b1:cc:07:26:7a:28:31:71:80:5d:02:c8:c7:d5:5c:05:ee:c6:
13:a3:cb:8a:6c:c7:8a:78:b2:26:e1:1e:bc:10:c0:2c:51:a8:
1c:49:55:01:43:96:63:16:2b:7b:2a:38:4d:30:dc:2b:e1:7b:
d3:52:e4:d1:13:d3:ab:c4:a1:71:cc:6b:10:37:6c:2b:4a:44:
4e:6d:ca:bc:0a:38:fc:b7:82:92:dd:7c:e0:9b:5d:a6:e7:4a:
67:77:0b:46:19:e4:76:d4:13:ec:56:81:bf:09:d1:16:b9:27:
82:e3:d2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:59:20 2026 by rpki-client