Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json)
Hash identifier: piA0sJ5GEQQ0sEnPn468EKh8Nkil9hG1Lktu5PMhUto=
Subject key identifier: C5:D0:D9:DC:8D:0B:79:2D:A5:58:06:C4:85:FB:61:A2:38:BB:47:BD
Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Certificate serial: 01A0D2DE5FF40DE12F52A293C59228DBDDC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
Manifest number: 0822
Signing time: Thu 24 Sep 2026 10:03:03 +0000
Manifest this update: Thu 24 Sep 2026 10:03:03 +0000
Manifest next update: Fri 25 Sep 2026 10:03:03 +0000
Files and hashes: 1: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: NZD5m4eBDZ5sF7l8CgOHHYd3vRpPTAGZOEdx6S4k5oI=)
2: p_zj4OSdAqCR4867NhK0flKlx14.roa (hash: hGOuLTSiLd6M1yp0vU60mwegnSaS4NS/nPDY8Bf3UTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:5f:f4:0d:e1:2f:52:a2:93:c5:92:28:db:dd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Validity
Not Before: Sep 24 10:03:03 2026 GMT
Not After : Sep 25 10:03:03 2026 GMT
Subject: CN=c5d0d9dc8d0b792da55806c485fb61a238bb47bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:09:09:11:1e:1b:87:2b:39:2c:d4:6a:cb:
0d:e7:5c:14:a7:3e:af:09:92:68:26:07:8f:c9:29:
c8:7f:86:49:53:47:84:15:30:ba:46:77:48:7d:35:
5d:0f:1b:09:30:c7:e2:a4:7f:2e:32:fc:34:90:87:
e0:bb:fa:4b:64:30:7a:c1:32:d3:b1:69:ca:a2:a0:
de:69:b2:46:64:a6:c7:26:06:5f:02:b1:52:56:2c:
8d:75:00:14:b5:e2:4d:27:fd:9c:a1:1a:88:50:75:
36:5c:1b:37:c7:b6:f9:74:47:99:76:43:12:a2:d1:
4f:e7:4d:99:ff:81:6a:57:a6:db:77:ba:f5:fc:88:
9c:c7:e6:92:14:56:40:2e:71:11:98:3d:25:46:c4:
1f:7f:17:e1:ca:3e:e0:02:93:82:d7:25:ba:67:74:
fd:39:d5:1d:ba:90:f0:91:83:30:bb:de:ca:cd:84:
87:81:60:50:d0:44:08:a2:08:f5:0c:3b:57:33:4e:
42:ae:4f:ea:08:57:9d:88:7c:d0:28:01:b2:7a:d8:
bf:c0:26:34:0f:a8:4b:bb:43:12:b8:61:2a:96:52:
78:19:fb:18:d7:81:70:37:e6:99:64:2e:5c:32:17:
15:26:be:4d:2b:cc:47:67:35:dc:f5:6d:a1:2c:18:
25:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D0:D9:DC:8D:0B:79:2D:A5:58:06:C4:85:FB:61:A2:38:BB:47:BD
X509v3 Authority Key Identifier:
keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c9:89:9c:42:8b:d7:f0:b3:79:67:c3:cc:3c:a8:ba:04:50:
77:00:58:c9:f6:1c:bd:23:8a:ee:7e:8c:91:9c:76:c4:80:99:
de:84:60:a3:10:20:2b:9e:70:56:65:7e:b8:61:81:ef:d1:66:
95:95:0a:40:a8:55:52:d5:16:cd:86:23:63:0f:15:47:1d:69:
24:cc:d0:64:55:7d:fc:4a:9e:76:ca:d1:51:61:3c:80:a3:7a:
2f:53:e7:93:c4:64:85:21:16:f7:fb:66:98:3b:e8:ad:a3:a9:
30:34:db:9b:36:38:39:65:09:36:14:22:92:86:73:5f:13:9d:
3f:5f:b8:7e:7b:5d:3b:37:f1:74:97:05:4e:e8:56:78:14:b5:
57:b4:1e:64:b1:70:7b:52:70:88:bc:82:e8:1e:be:20:42:c9:
a7:9c:88:ca:36:78:3f:4d:69:3d:79:1e:b3:7c:94:ed:94:b3:
ac:d7:6c:e8:f2:32:40:e2:f8:37:ec:d5:f9:a7:09:93:e2:f9:
f5:6f:29:be:ae:72:83:04:49:82:6f:e1:4e:bb:41:a8:a1:e8:
18:cb:03:e5:8b:fa:dc:d1:e8:d5:6a:9e:93:f3:bf:5c:f2:21:
46:89:3c:b1:d1:6a:d6:b0:62:94:82:8d:d7:d8:17:0d:45:a7:
08:20:2a:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDS3l/0DeEvUqKTxZIo293FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNzExMDU0YTg5NDQ2YTc2ZjQ5M2NlMmMxMjdhOTQ4ZWJh
NGE4ZmYwHhcNMjYwOTI0MTAwMzAzWhcNMjYwOTI1MTAwMzAzWjAzMTEwLwYDVQQD
EyhjNWQwZDlkYzhkMGI3OTJkYTU1ODA2YzQ4NWZiNjFhMjM4YmI0N2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufQJCREeG4crOSzUassN51wUpz6v
CZJoJgePySnIf4ZJU0eEFTC6RndIfTVdDxsJMMfipH8uMvw0kIfgu/pLZDB6wTLT
sWnKoqDeabJGZKbHJgZfArFSViyNdQAUteJNJ/2coRqIUHU2XBs3x7b5dEeZdkMS
otFP502Z/4FqV6bbd7r1/Iicx+aSFFZALnERmD0lRsQffxfhyj7gApOC1yW6Z3T9
OdUdupDwkYMwu97KzYSHgWBQ0EQIogj1DDtXM05Crk/qCFediHzQKAGyeti/wCY0
D6hLu0MSuGEqllJ4GfsY14FwN+aZZC5cMhcVJr5NK8xHZzXc9W2hLBglbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXQ2dyNC3ktpVgGxIX7YaI4u0e9MB8GA1UdIwQY
MBaAFP9xEFSolEanb0k84sEnqUjrpKj/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iOGZjNTUtYjRjZC00ZDFmLTk5OTAt
NDdhYzM4OWQzMjYxLzEvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iOGZjNTUtYjRjZC00ZDFmLTk5OTAtNDdhYzM4OWQzMjYx
LzEvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcmJnEKL
1/CzeWfDzDyougRQdwBYyfYcvSOK7n6MkZx2xICZ3oRgoxAgK55wVmV+uGGB79Fm
lZUKQKhVUtUWzYYjYw8VRx1pJMzQZFV9/EqedsrRUWE8gKN6L1Pnk8RkhSEW9/tm
mDvoraOpMDTbmzY4OWUJNhQikoZzXxOdP1+4fntdOzfxdJcFTuhWeBS1V7QeZLFw
e1JwiLyC6B6+IELJp5yIyjZ4P01pPXkes3yU7ZSzrNds6PIyQOL4N+zV+acJk+L5
9W8pvq5ygwRJgm/hTrtBqKHoGMsD5Yv63NHo1Wqek/O/XPIhRok8sdFq1rBilIKN
19gXDUWnCCAq3w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:59:31 2026 by rpki-client