
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
File: ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft (raw, json)
Hash identifier: e4I+7Q9zxh+hBb/eamnvNNhuY//YGzO1Jvqg4qQvEgI=
Subject key identifier: 9E:C8:62:82:CF:2A:85:38:4F:1C:91:C7:E0:81:16:F1:07:65:EB:6B
Authority key identifier: 7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21
Certificate issuer: /CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821
Certificate serial: 019CAAC6C6D2C3A4755ECD2FC3978FDDDA92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:01:19 +0000
Manifest this update: Sun 01 Mar 2026 19:01:19 +0000
Manifest next update: Mon 02 Mar 2026 19:01:19 +0000
Files and hashes: 1: cUjXL3AkU0vzCeL7XNA5hx74zv4.roa (hash: M5YlQ4HoZ45gNTliPTDu0USjnaLFnkhBumUlmweXtD8=)
2: ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl (hash: YKXm43xVQaOfqsHKTvd21/QDoaO4TiuxzFzBfyUAZZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c6:d2:c3:a4:75:5e:cd:2f:c3:97:8f:dd:da:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821
Validity
Not Before: Mar 1 19:01:19 2026 GMT
Not After : Mar 2 19:01:19 2026 GMT
Subject: CN=9ec86282cf2a85384f1c91c7e08116f10765eb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8e:73:33:e2:45:70:a4:ee:eb:4d:91:8f:58:
b4:52:d0:9a:7a:d9:a3:b6:a9:46:b2:55:04:fd:7b:
5c:62:11:81:fb:a3:78:45:f4:d1:bc:d3:50:b9:f5:
fa:f9:78:05:41:fc:59:df:dc:95:13:f1:c3:ce:db:
f4:78:49:2a:68:0a:ad:9a:f8:34:70:44:b7:45:70:
87:3a:d3:58:d8:57:27:e5:8a:25:2a:50:6f:ab:33:
54:ff:ef:b6:84:54:28:1f:51:18:af:fc:af:b2:4a:
c4:bd:13:fe:6d:c7:c2:6e:82:ae:64:85:d7:ff:a4:
94:bd:7c:01:1f:b8:b2:5d:5f:92:bc:45:06:6d:24:
30:13:06:d5:fe:8e:8f:e0:65:02:2b:09:10:98:d8:
25:e2:bb:3f:d6:8c:16:28:19:62:d2:7c:70:04:9e:
d9:0d:1a:99:f8:c9:b9:83:56:20:31:55:38:64:a1:
6a:e8:84:cc:99:fc:b6:4a:fc:e0:ef:f9:b1:ac:e5:
b2:4b:96:94:46:74:92:5a:98:ed:a3:5c:67:1f:48:
17:11:16:58:34:4d:f5:53:66:e0:03:13:a7:3e:47:
80:b9:2c:c7:ec:c3:5c:f9:91:00:d0:0b:84:86:b6:
d9:a9:21:1e:f2:1a:25:78:5a:0d:3a:ef:18:51:5f:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C8:62:82:CF:2A:85:38:4F:1C:91:C7:E0:81:16:F1:07:65:EB:6B
X509v3 Authority Key Identifier:
keyid:7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a0:cd:a9:a7:d6:8a:e3:e8:56:f0:7f:97:91:37:08:9d:75:
83:74:20:35:a9:cb:de:de:1c:dc:c0:21:a2:dc:4c:fa:fe:75:
f8:3b:bc:2d:61:74:14:ec:2a:2f:65:23:72:36:8e:c8:b4:a9:
f1:08:88:62:2f:87:9e:ce:c9:53:0d:02:cc:00:29:a5:fc:0d:
e3:c1:4b:8b:c0:d8:ed:4a:cf:45:85:9f:01:7e:3d:f2:de:7c:
74:67:ac:af:75:e0:a3:bc:42:d8:4c:3b:b6:ae:d4:0f:74:fc:
95:b2:60:c4:2a:ea:d7:13:a3:f2:4c:19:2b:28:90:76:1c:a2:
a6:9f:55:ea:27:dd:90:3b:72:f5:d1:fb:9b:50:67:af:f5:8b:
e3:4d:94:58:c8:cb:ea:d5:dd:8c:40:76:9c:f5:a7:31:29:12:
1f:19:f9:a9:3b:b2:4e:62:6c:32:81:28:2a:b7:a0:23:5c:8e:
1f:d4:d9:6b:24:a7:44:c7:ec:ba:57:ac:5b:7d:64:bc:f4:7b:
90:7e:eb:13:71:51:2a:08:21:de:83:2e:09:b0:b3:05:e8:04:
c9:82:48:38:52:30:ad:bd:0b:1c:db:3a:21:25:70:fd:0c:70:
0e:39:43:e1:c1:18:88:38:eb:79:0a:b1:57:49:b1:8c:68:49:
3e:8d:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:32:43 2026 by rpki-client