Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json)
Hash identifier: sz5KOuKWB8ax0DFpSEtsJpBqNZK9oFUCMcU6mMe7VSY=
Subject key identifier: A2:FC:E5:50:CA:99:02:28:00:81:9E:83:A5:0A:63:CB:4E:B6:67:26
Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Certificate serial: 019D2696311A44ABAB9E8D2801BEC01792AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
Manifest number: 063A
Signing time: Wed 25 Mar 2026 20:01:10 +0000
Manifest this update: Wed 25 Mar 2026 20:01:10 +0000
Manifest next update: Thu 26 Mar 2026 20:01:10 +0000
Files and hashes: 1: MjH0mCguKyAe-5Dh9UdmNGfhqQM.roa (hash: 5eB9gBDQyLuH02CzAyJcgsM/kGpWR1V5i1JQVlFMYBY=)
2: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: 1YEkw0pXyGfSFwnLuUJSpJk2/Fg1en4Jl/drYBhxErU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:31:1a:44:ab:ab:9e:8d:28:01:be:c0:17:92:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Validity
Not Before: Mar 25 20:01:10 2026 GMT
Not After : Mar 26 20:01:10 2026 GMT
Subject: CN=a2fce550ca99022800819e83a50a63cb4eb66726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:ce:2c:1d:a2:ea:31:ba:c8:4e:e8:70:e9:
62:f7:ae:ff:a1:a4:d4:52:7a:f5:c8:01:77:dd:fc:
b2:79:4d:d2:f6:ed:5f:34:d1:67:59:00:e9:b6:9d:
cd:a9:0f:82:8c:fa:4e:12:59:6e:ea:19:7f:df:e9:
ce:4c:0e:89:3a:fc:81:b0:19:04:c8:03:8a:c0:8e:
e4:90:41:48:09:9a:1d:46:cb:3b:e6:a4:61:23:31:
e4:70:e8:6b:91:b5:8e:4e:18:fe:2e:3b:74:08:98:
06:69:14:99:02:5e:cd:bf:ee:72:48:a3:b0:a7:6b:
87:c6:1b:57:ac:44:fb:78:02:5f:fe:00:22:f6:a9:
39:fa:34:a5:5e:a6:3c:70:31:36:de:11:c7:48:08:
35:c1:b8:c9:5a:a4:ea:ac:ee:b7:27:9d:23:49:6d:
f6:2c:28:d0:0f:4a:ab:38:c3:d5:44:c7:c5:a5:51:
a7:59:72:d2:f7:48:e5:4e:67:02:f5:ce:43:13:ea:
7d:4c:34:53:7a:be:33:f1:8f:3a:be:d7:9d:23:c2:
30:7c:72:1f:72:9f:da:1d:77:4d:b0:55:c1:3c:b4:
4d:5d:7c:a1:7e:8f:df:2a:d4:f3:f0:3c:f8:8d:d4:
70:36:8b:65:1d:35:bf:19:dc:df:65:41:78:e6:69:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FC:E5:50:CA:99:02:28:00:81:9E:83:A5:0A:63:CB:4E:B6:67:26
X509v3 Authority Key Identifier:
keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5e:a3:45:c3:06:10:a5:e0:fa:1d:7e:cb:66:ce:98:89:7d:
36:e8:e3:89:4e:0e:ff:b6:78:8e:1f:dd:1a:17:55:99:71:c5:
9e:6d:b9:84:af:7f:b4:ce:49:2b:0a:5f:3e:0e:8f:28:46:ae:
84:9f:c2:0a:25:fb:ec:44:01:68:7a:8d:49:39:ec:03:11:06:
96:01:3d:1f:92:f1:fd:f3:4d:5a:59:a7:08:a4:b6:c0:30:1d:
84:e1:a4:57:0e:e4:4d:f8:36:cd:ba:1d:cf:6a:bd:4c:b9:c6:
4a:2b:7a:5e:e4:04:e9:5f:43:ea:4b:49:ae:20:c5:b9:17:25:
ad:d1:62:62:fc:20:07:c5:82:09:6d:d7:11:40:73:6f:a7:29:
63:26:ea:af:86:1b:a9:bf:38:ff:14:45:32:b8:02:ad:ea:da:
b1:00:a6:aa:f1:46:a7:af:10:84:f4:41:fb:f9:39:f2:7a:65:
23:ab:2d:80:f7:0e:81:4c:13:08:11:bd:a7:90:b2:af:a0:34:
2c:26:48:bc:cc:e9:2f:54:82:27:68:79:23:15:45:48:c1:26:
be:2d:4e:97:56:89:55:c6:d0:56:60:88:51:87:c6:af:b3:cd:
7b:6e:2a:a4:8d:62:f9:ec:e3:fd:42:ec:31:bc:1d:b2:0d:e2:
9b:55:eb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:52 2026 by rpki-client