Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
File: _cv3oqQ7GA1yKzdjHoea-huaXts.mft (raw, json)
Hash identifier: fFGIIVaLDxpjWaDICOoMdRYqGGa+eS45mEYaKAeTNwg=
Subject key identifier: EE:2F:F2:CD:CA:56:BD:59:40:57:DB:B6:04:F8:C0:78:54:6C:12:9B
Authority key identifier: FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
Certificate issuer: /CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Certificate serial: 019CADC7667FA81B2D5DE854883F33003A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 09:00:52 +0000
Manifest this update: Mon 02 Mar 2026 09:00:52 +0000
Manifest next update: Tue 03 Mar 2026 09:00:52 +0000
Files and hashes: 1: V5P32cfEgu92S1VlI1kMBBPo3Ag.roa (hash: T7KoapqHODXnycaN9qCgI68x/qZdCltg//u0iSK2v+k=)
2: _cv3oqQ7GA1yKzdjHoea-huaXts.crl (hash: DJ5MY6JfRf0VE8+kRDilmpPJ8Pk1aWksAgodQKf7ePI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:66:7f:a8:1b:2d:5d:e8:54:88:3f:33:00:3a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Validity
Not Before: Mar 2 09:00:52 2026 GMT
Not After : Mar 3 09:00:52 2026 GMT
Subject: CN=ee2ff2cdca56bd594057dbb604f8c078546c129b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:98:2b:56:2e:47:c0:ab:d4:c7:65:0c:fb:
00:dd:78:77:08:c3:a0:01:49:3f:fe:f4:71:ba:a0:
a5:94:5a:b0:9c:c4:fa:ef:b1:87:4e:0e:cb:c3:ac:
a5:d4:5d:4e:54:bf:9d:20:d5:e3:73:36:0f:32:6e:
72:f4:c9:5f:28:0e:01:21:09:d4:f5:72:54:21:36:
f2:20:66:08:72:d8:36:f0:08:28:33:32:6b:8d:1c:
a5:d0:33:c1:8b:71:76:4f:e7:fa:65:48:4a:0c:38:
54:1f:f9:bd:75:20:cd:0e:92:db:f6:05:75:3d:e2:
ce:4b:0b:70:3c:5d:58:38:c2:a4:20:9a:2e:7c:15:
d8:d2:c4:61:07:33:ff:04:93:a3:24:73:4c:79:01:
06:28:7c:45:2f:97:d7:7c:eb:59:9c:9f:63:13:a9:
dc:16:6a:34:db:e2:cb:c2:0d:ab:b8:1c:29:ce:62:
c2:04:87:a1:42:7c:f9:71:f5:18:37:2b:fa:b2:d9:
d4:8b:f4:d1:96:cd:3b:19:11:a9:d7:e2:1b:ca:18:
96:4b:8e:45:db:40:87:3e:1c:80:9f:52:06:b6:cc:
08:71:7a:bf:4e:6e:fb:c5:fe:9b:36:76:0e:6d:af:
d4:6b:39:c8:99:70:42:d1:c3:db:94:fa:71:5d:93:
de:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2F:F2:CD:CA:56:BD:59:40:57:DB:B6:04:F8:C0:78:54:6C:12:9B
X509v3 Authority Key Identifier:
keyid:FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3e:80:e1:d6:13:b1:d9:c3:13:99:d8:7e:33:81:44:e4:46:
7a:8b:ba:7a:8a:03:db:e5:34:d5:57:cd:49:a8:d7:16:e9:65:
12:7b:23:fe:6a:2f:74:f8:7d:13:2a:d1:13:fd:12:67:98:8c:
74:f1:4a:bd:63:e1:ab:fa:f5:38:b1:c6:a8:a8:9c:6d:4a:87:
d5:25:b8:d1:6d:58:28:f2:81:7e:e4:ca:5f:54:a0:c0:41:49:
db:76:50:c1:77:9b:85:9d:b1:ed:b6:23:0a:81:72:db:c8:0b:
d4:7f:4f:bd:1a:75:79:f1:42:94:df:94:60:a7:7d:8c:33:f7:
04:83:ad:9f:d8:10:c2:ff:be:82:d5:2a:e0:a3:d2:3d:c3:63:
79:b5:84:f0:02:7b:d8:14:56:b7:1e:e5:76:2f:14:82:21:6f:
ca:bf:2b:00:4f:e4:18:10:b4:5a:94:a1:70:e9:1f:d8:72:f2:
ef:9a:84:09:66:db:5a:28:3b:b6:0d:73:ad:3f:8c:72:12:fb:
5a:d1:91:10:2f:50:f2:6c:0a:ac:32:25:24:0b:1f:6a:61:7b:
f4:1a:38:d9:53:9b:6f:8a:96:24:80:06:29:0d:43:e1:7e:8e:
91:27:96:9e:3c:3d:db:dd:cc:0e:06:77:10:4e:0d:b7:28:b9:
5f:86:8e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:24 2026 by rpki-client