Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
File: edQ3WEq9tIITYw3KpfAMnSw8wXk.mft (raw, json)
Hash identifier: KSsWHZc9BzBGgj0EHkorPGGdAOcsbQyHQI//vdyX5N4=
Subject key identifier: DC:34:B8:2D:53:2E:FE:E8:55:B9:96:DC:F7:39:3B:47:08:36:C3:A8
Authority key identifier: 79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
Certificate issuer: /CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Certificate serial: 019CAAC6666D2670E843C2EB13C016CF09A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
Manifest number: 12F5
Signing time: Sun 01 Mar 2026 19:00:54 +0000
Manifest this update: Sun 01 Mar 2026 19:00:54 +0000
Manifest next update: Mon 02 Mar 2026 19:00:54 +0000
Files and hashes: 1: edQ3WEq9tIITYw3KpfAMnSw8wXk.crl (hash: TaGKKKDDWFHxqAUJRdJ1mUdtytgVyxPyiEkoNo9xMUo=)
2: o2ujZ5WYldu5AZ-vxsOFgZG5-2g.roa (hash: WLtxFHhgeLjy2SQKVLToiGcZPrDlIVzRMO9KiBUqjsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:66:6d:26:70:e8:43:c2:eb:13:c0:16:cf:09:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Validity
Not Before: Mar 1 19:00:54 2026 GMT
Not After : Mar 2 19:00:54 2026 GMT
Subject: CN=dc34b82d532efee855b996dcf7393b470836c3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:64:81:6b:54:c8:13:c1:f9:5c:47:ff:b0:c8:
90:71:8c:21:0f:06:da:3d:48:63:94:b1:75:a9:fb:
44:dd:42:76:f0:6d:3c:e3:f3:bd:32:80:a6:07:b1:
ec:fc:f7:1d:7b:ea:eb:1e:7d:c1:de:89:88:eb:b9:
9d:2a:68:45:21:7c:ea:e7:26:f9:a8:64:5d:70:b8:
07:71:e2:f6:42:de:11:f6:e9:a1:2b:1b:ba:10:4d:
fb:e0:ff:6f:d1:b4:08:39:4b:65:fd:9f:30:21:1b:
97:c1:70:a5:30:f4:5a:1e:0b:a5:bd:7a:28:63:6e:
ac:a5:3e:b4:45:ac:55:be:29:26:6c:9f:0a:67:84:
93:90:38:a4:f3:2e:1f:b8:3f:3c:be:17:cb:5f:2b:
39:d0:47:82:85:b0:f9:29:f1:1d:1a:80:21:a2:9e:
37:e4:21:df:4e:38:2f:45:c0:78:33:e3:42:df:56:
01:7d:bd:f1:37:75:99:68:36:37:63:ff:db:54:84:
25:d6:de:ea:12:87:ad:b2:5f:9c:ba:22:ff:d3:59:
50:51:3e:07:59:f7:67:38:89:b9:a5:e1:ee:fb:cb:
b6:bc:1b:90:28:d9:63:7d:ce:6c:93:d3:e8:ae:e3:
95:c3:df:bd:0c:b9:eb:15:b9:4e:ef:bd:27:6b:a4:
89:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:B8:2D:53:2E:FE:E8:55:B9:96:DC:F7:39:3B:47:08:36:C3:A8
X509v3 Authority Key Identifier:
keyid:79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:86:12:ed:43:d5:80:9e:8e:9d:8e:e6:e7:b3:93:39:b3:b0:
e3:0c:3d:54:c8:71:c9:f2:87:a6:6c:c8:c6:58:c7:1b:94:fe:
37:53:f1:09:16:25:fe:52:e6:93:12:ba:0c:e3:36:1f:b0:a5:
b5:e5:ef:df:fc:3f:6b:c7:0b:45:af:97:85:bf:72:32:18:04:
f4:98:9c:d1:f9:ff:22:30:21:c8:76:c2:e2:80:b9:8a:0d:b3:
fa:1c:60:00:cd:50:d9:a8:2e:f8:7a:67:32:5d:f0:93:1b:48:
a5:cf:cb:53:b7:d3:06:03:4f:6f:73:3a:6f:ce:18:0a:71:47:
c0:05:1c:5c:12:71:d3:f6:35:b0:92:c6:53:34:47:76:3a:29:
6b:43:7d:b6:a0:4d:d2:ef:5a:1e:36:08:e8:69:93:d7:9e:b3:
96:e2:bc:b7:58:98:e7:f0:46:a5:58:1a:df:1e:4f:fa:96:d9:
fe:cb:1b:2b:7a:8d:df:1b:1a:33:ee:5e:30:87:c5:ed:c9:fb:
32:f5:72:76:fe:1f:47:74:7b:a1:04:c3:dc:ef:21:37:08:32:
ed:25:fe:56:9c:d8:e4:7b:31:af:9c:2e:b6:d6:7a:01:f7:f5:
77:5e:ae:4f:cc:52:48:c9:8b:e3:66:b7:5d:a4:fb:eb:be:96:
4d:74:cc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:10 2026 by rpki-client