Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
File: fi3yT4V3zASMPHn7jbFIPnt14l0.mft (raw, json)
Hash identifier: eMzVCjCHR697H9gviEMhnjHkWhO+CU2z9IjDUuHPI/A=
Subject key identifier: EC:A2:5B:AE:6A:7A:FD:1C:C6:15:07:19:FD:C2:A2:F3:CE:CC:18:7E
Authority key identifier: 7E:2D:F2:4F:85:77:CC:04:8C:3C:79:FB:8D:B1:48:3E:7B:75:E2:5D
Certificate issuer: /CN=7e2df24f8577cc048c3c79fb8db1483e7b75e25d
Certificate serial: 019D26964960A59BC302086F3EFDFCE8060D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
Manifest number: 030F
Signing time: Wed 25 Mar 2026 20:01:16 +0000
Manifest this update: Wed 25 Mar 2026 20:01:16 +0000
Manifest next update: Thu 26 Mar 2026 20:01:16 +0000
Files and hashes: 1: SHg6DlIPYSjJdqUQkcfbowdEENo.roa (hash: uNxz49s0oCVTfxNZpUTxqGddLoqN/nonyiaoh+e/0+g=)
2: fi3yT4V3zASMPHn7jbFIPnt14l0.crl (hash: 0hbkl2HzrKyIML5mrP/dOTabc1VclaDbsgQCfdu3U2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:49:60:a5:9b:c3:02:08:6f:3e:fd:fc:e8:06:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2df24f8577cc048c3c79fb8db1483e7b75e25d
Validity
Not Before: Mar 25 20:01:16 2026 GMT
Not After : Mar 26 20:01:16 2026 GMT
Subject: CN=eca25bae6a7afd1cc6150719fdc2a2f3cecc187e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:15:87:d1:a0:7c:c1:54:e8:3f:08:7b:44:
ec:62:a5:55:ea:0d:5f:61:13:f6:ae:85:c1:12:2a:
80:a2:cb:31:02:f9:88:79:22:f6:46:3b:b7:9a:ea:
3c:06:45:61:d4:ba:02:10:e4:81:eb:af:9f:e8:2c:
e9:b6:5b:68:00:49:6f:74:fe:b1:6f:0c:6b:9f:e3:
fa:dc:4c:95:9f:d2:a3:b4:e1:b8:bd:52:da:04:0e:
6a:d9:42:9e:1a:7f:fc:da:7a:62:58:80:f4:b9:de:
59:d2:2c:c4:2a:34:2b:ef:22:6e:3e:ba:da:cf:25:
d3:eb:67:95:d6:f2:d4:dc:e9:83:88:db:bc:7e:f6:
d9:86:ea:2d:19:95:1d:0b:b5:e2:75:78:66:67:c2:
36:36:e8:84:ac:67:30:c9:ee:d9:af:41:8b:12:45:
81:8c:06:be:f1:cb:c1:f2:3d:d0:c1:64:9e:77:47:
c8:43:20:ba:46:25:ba:69:cf:79:48:21:47:f1:49:
f8:5f:d3:c8:e3:4f:c6:37:15:a3:38:9d:a7:98:f8:
2f:35:89:ce:33:7a:ee:31:36:88:10:b7:fc:84:e3:
4f:df:8d:77:81:70:bb:3f:aa:99:a6:05:9d:3e:b1:
c2:1b:10:fb:ea:ca:59:ed:d9:2b:e8:48:6b:5b:a8:
7d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A2:5B:AE:6A:7A:FD:1C:C6:15:07:19:FD:C2:A2:F3:CE:CC:18:7E
X509v3 Authority Key Identifier:
keyid:7E:2D:F2:4F:85:77:CC:04:8C:3C:79:FB:8D:B1:48:3E:7B:75:E2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f3:f0:76:f7:d1:f6:47:b8:18:d1:36:6e:86:9c:80:d4:c3:
3e:06:13:d9:b6:c3:09:cd:14:02:a4:b8:25:09:35:dd:04:c5:
3f:b1:3a:6f:fe:c3:a6:35:41:bf:d4:63:6b:d4:e6:a5:f0:b1:
7c:2a:ea:5f:de:9e:99:c5:f8:58:c8:b0:17:ee:1b:7b:56:40:
1a:24:b5:14:24:30:f3:d6:f9:83:7d:79:5c:3e:9c:6c:b6:b5:
9b:a3:bf:8e:20:6e:64:d2:70:97:86:be:cf:6b:57:b7:1d:f8:
41:e3:69:d9:15:cc:90:8a:a2:80:e4:fc:b3:c2:91:52:6a:ad:
7a:b3:20:2d:5e:6a:11:80:fc:0a:ea:8d:a9:f5:3c:03:8f:71:
47:ab:d3:90:5d:d2:a9:24:b1:ab:19:46:87:39:e9:67:a0:ae:
11:8c:6c:24:12:cb:82:2e:9f:96:8c:b0:90:59:72:4f:c5:48:
21:91:d7:54:4f:74:e1:3e:38:f9:31:9c:de:05:cd:8d:09:fc:
f9:47:19:4f:32:3c:47:73:36:ad:d0:cf:08:99:2d:91:73:5a:
fd:36:78:b3:45:be:30:eb:35:e0:95:41:ef:33:87:f1:e6:1e:
3e:23:76:b4:47:c8:c2:bb:88:b4:41:2c:1b:c9:a6:5b:47:4f:
63:fa:a9:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlklgpZvDAghvPv386AYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMmRmMjRmODU3N2NjMDQ4YzNjNzlmYjhkYjE0ODNlN2I3
NWUyNWQwHhcNMjYwMzI1MjAwMTE2WhcNMjYwMzI2MjAwMTE2WjAzMTEwLwYDVQQD
EyhlY2EyNWJhZTZhN2FmZDFjYzYxNTA3MTlmZGMyYTJmM2NlY2MxODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu0Vh9GgfMFU6D8Ie0TsYqVV6g1f
YRP2roXBEiqAossxAvmIeSL2Rju3muo8BkVh1LoCEOSB66+f6CzptltoAElvdP6x
bwxrn+P63EyVn9KjtOG4vVLaBA5q2UKeGn/82npiWID0ud5Z0izEKjQr7yJuPrra
zyXT62eV1vLU3OmDiNu8fvbZhuotGZUdC7XidXhmZ8I2NuiErGcwye7Zr0GLEkWB
jAa+8cvB8j3QwWSed0fIQyC6RiW6ac95SCFH8Un4X9PI40/GNxWjOJ2nmPgvNYnO
M3ruMTaIELf8hONP3413gXC7P6qZpgWdPrHCGxD76spZ7dkr6EhrW6h9JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyiW65qev0cxhUHGf3CovPOzBh+MB8GA1UdIwQY
MBaAFH4t8k+Fd8wEjDx5+42xSD57deJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmkzeVQ0VjN6QVNNUEhuN2piRklQbnQxNGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lYjk0MDItMzUzYS00OTY3LWEzMTQt
Yjc3NWYxY2NhYzZhLzEvZmkzeVQ0VjN6QVNNUEhuN2piRklQbnQxNGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9lYjk0MDItMzUzYS00OTY3LWEzMTQtYjc3NWYxY2NhYzZh
LzEvZmkzeVQ0VjN6QVNNUEhuN2piRklQbnQxNGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPPwdvfR
9ke4GNE2boacgNTDPgYT2bbDCc0UAqS4JQk13QTFP7E6b/7DpjVBv9Rja9TmpfCx
fCrqX96emcX4WMiwF+4be1ZAGiS1FCQw89b5g315XD6cbLa1m6O/jiBuZNJwl4a+
z2tXtx34QeNp2RXMkIqigOT8s8KRUmqterMgLV5qEYD8CuqNqfU8A49xR6vTkF3S
qSSxqxlGhznpZ6CuEYxsJBLLgi6floywkFlyT8VIIZHXVE904T44+TGc3gXNjQn8
+UcZTzI8R3M2rdDPCJktkXNa/TZ4s0W+MOs14JVB7zOH8eYePiN2tEfIwruItEEs
G8mmW0dPY/qpmg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:07 2026 by rpki-client