Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json)
Hash identifier: zN4PpAub4ynz0BkI5XwvJ5vq+zF6wG/+nnEgP20PIbQ=
Subject key identifier: 5C:92:8B:B9:27:59:B7:8C:CD:D5:46:62:3A:CE:1F:5A:4F:47:65:6B
Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Certificate serial: 01A0D4CB580FE720B2E44E7CF1BA49DC20AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
Manifest number: 0823
Signing time: Thu 24 Sep 2026 19:01:31 +0000
Manifest this update: Thu 24 Sep 2026 19:01:31 +0000
Manifest next update: Fri 25 Sep 2026 19:01:31 +0000
Files and hashes: 1: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: ACqSTELg7kXN/5wrton2ZkBRoe8syH7OsmZLMsNLHEA=)
2: p_zj4OSdAqCR4867NhK0flKlx14.roa (hash: hGOuLTSiLd6M1yp0vU60mwegnSaS4NS/nPDY8Bf3UTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:58:0f:e7:20:b2:e4:4e:7c:f1:ba:49:dc:20:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Validity
Not Before: Sep 24 19:01:31 2026 GMT
Not After : Sep 25 19:01:31 2026 GMT
Subject: CN=5c928bb92759b78ccdd546623ace1f5a4f47656b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0f:d4:4f:7f:2c:9f:25:48:09:eb:1f:f3:19:
2a:4d:15:0f:3b:c0:70:90:38:90:3b:0f:a8:22:21:
95:44:1e:ec:0f:7f:7b:8a:b7:6d:f9:71:59:76:7a:
5e:a2:40:3d:f5:ad:09:04:70:37:72:9d:09:81:12:
81:f6:02:45:52:ff:ff:05:f1:a0:15:9d:d5:03:39:
1e:bd:a4:f4:c9:1f:66:b7:f8:39:b1:5a:fa:76:21:
3e:bc:b4:c9:d1:8b:66:73:e2:4e:f5:55:ab:e8:22:
c0:90:5b:cd:6f:4a:4c:5d:d1:81:d1:31:66:67:d9:
4b:a2:6f:a3:78:2d:58:a9:5b:a7:ce:24:c8:d0:a9:
f5:14:02:c7:f2:52:98:8b:55:2a:1a:8b:be:60:9b:
94:40:d0:30:29:45:ba:64:e8:ae:9c:d0:4f:be:b1:
f1:1b:4d:3d:80:cb:1e:fb:cb:4c:81:8f:a9:13:b0:
54:f8:c2:0f:e6:c7:82:42:a4:df:b7:25:74:a8:26:
4c:da:93:85:cb:ab:4a:18:a8:a3:de:83:59:c7:f4:
6b:6a:cc:95:a1:46:cc:16:bf:79:2c:e4:a4:09:c1:
08:c2:9f:55:49:5e:ca:51:bc:75:74:4c:1d:0e:1d:
12:69:41:73:d8:f0:a4:94:89:de:84:da:85:81:ea:
c7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:92:8B:B9:27:59:B7:8C:CD:D5:46:62:3A:CE:1F:5A:4F:47:65:6B
X509v3 Authority Key Identifier:
keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5e:ac:2e:c6:2c:8b:c2:36:99:a8:38:d2:7f:66:d7:d8:28:
2e:3b:94:10:5d:51:ea:13:c1:2b:13:84:9b:a6:b2:bb:f8:a3:
34:83:8a:c2:29:cd:5d:7f:b7:0b:51:ae:84:4c:fd:a1:0b:12:
b6:45:a8:8c:22:b0:45:c3:5c:70:57:ae:d4:5d:87:a0:59:5f:
66:ac:15:19:3b:31:75:74:a9:c1:96:a9:33:6b:2b:7e:43:4c:
3e:f1:f2:98:48:33:77:0e:6d:71:34:1e:bc:8c:60:3c:c7:d5:
70:65:fd:d7:cb:da:12:b4:09:7d:07:86:3a:13:8c:f8:5e:a9:
29:1e:bd:8a:55:58:1e:82:09:b6:49:92:e6:c0:e7:08:1a:59:
7d:df:7a:55:a5:79:f4:34:82:5c:f0:9b:3c:72:6b:67:f8:be:
cd:f2:ca:6e:64:83:ae:bf:5d:90:9c:69:48:7a:cb:81:cb:38:
1e:8a:51:c2:2f:26:e6:6c:d2:86:f1:23:80:7d:6f:26:01:c5:
10:35:61:2a:2f:f9:1c:58:65:2b:74:2e:75:33:5c:2b:97:a4:
fb:a1:c3:37:9d:f0:93:9a:0e:9c:0f:8c:7b:84:c5:82:dc:a1:
8a:0d:ed:48:22:6d:a8:84:35:c5:74:63:2a:0c:df:f3:fb:5c:
f9:a6:9c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:13:41 2026 by rpki-client