Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json)
Hash identifier: ocf+jubkB0gtYa9ME9hkKtHW6fwXfnsNDOvJaawincw=
Subject key identifier: 78:7C:21:4A:7A:CF:77:BA:29:EA:9E:CF:46:8E:6C:C8:40:B4:A4:44
Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Certificate serial: 019FAB634D992B95236A0369DF8CAD1610F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
Manifest number: 0789
Signing time: Wed 29 Jul 2026 01:00:39 +0000
Manifest this update: Wed 29 Jul 2026 01:00:39 +0000
Manifest next update: Thu 30 Jul 2026 01:00:39 +0000
Files and hashes: 1: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: T9TB0cfDjLXNx0OUDhSxUXbvskvvp+wFd0m5K/b3wPI=)
2: p_zj4OSdAqCR4867NhK0flKlx14.roa (hash: hGOuLTSiLd6M1yp0vU60mwegnSaS4NS/nPDY8Bf3UTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:4d:99:2b:95:23:6a:03:69:df:8c:ad:16:10:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Validity
Not Before: Jul 29 01:00:39 2026 GMT
Not After : Jul 30 01:00:39 2026 GMT
Subject: CN=787c214a7acf77ba29ea9ecf468e6cc840b4a444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:da:ad:82:09:b7:e7:c3:92:21:a3:1b:10:
e7:a8:a7:ad:82:9d:4c:e7:54:0d:24:47:58:3e:c4:
65:ca:19:b1:02:82:ae:2d:7a:09:6e:37:ae:0f:36:
0f:80:bc:00:4e:59:98:72:01:b5:93:de:aa:ed:f6:
5a:2c:47:71:52:54:9f:dd:19:26:3d:a5:08:b1:8a:
e0:ca:d4:98:7a:c1:19:b1:2e:24:fd:37:16:a6:dd:
11:04:d1:64:c6:ed:bf:e0:0e:f4:b6:28:62:04:ea:
7f:08:22:5d:1a:9a:04:f0:60:61:00:62:81:a1:4f:
d5:7b:a0:4e:a0:1b:e8:20:52:26:1f:02:96:47:2f:
e6:7c:43:9f:db:8f:f5:69:75:2b:02:81:89:fd:5e:
52:95:a4:ab:d6:fd:d8:25:10:5c:42:8b:3f:46:a9:
f2:72:a5:00:c8:0a:76:03:97:25:8d:2a:8e:4e:5d:
be:d8:f0:4c:c1:e7:79:a3:7b:3d:69:5c:70:19:0f:
f7:ee:39:ed:93:68:d0:73:91:b6:26:e2:7b:4c:60:
97:41:8b:e7:e7:32:f3:aa:75:f5:79:f3:fd:bc:72:
3b:fa:98:a4:a8:16:01:bc:3c:7b:f6:da:7e:17:e0:
ec:ef:66:bc:85:c2:f7:c6:f1:27:af:0b:9e:ff:36:
7f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7C:21:4A:7A:CF:77:BA:29:EA:9E:CF:46:8E:6C:C8:40:B4:A4:44
X509v3 Authority Key Identifier:
keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:97:8d:21:a9:eb:76:5e:4d:9d:40:7d:c3:9c:92:56:62:50:
1e:df:4a:4a:a2:e2:72:30:84:25:b9:64:17:52:a8:4e:3f:a9:
7e:9a:4d:2e:b1:01:9b:1b:d5:99:96:c4:bf:d8:62:1e:0c:42:
b4:c6:d3:09:23:5b:47:47:7f:0c:8d:9e:d0:71:2e:25:10:16:
c2:fb:f1:aa:d7:56:9f:10:da:0d:4f:b2:28:f9:c2:43:ef:eb:
87:42:40:c0:46:43:c0:4b:30:58:00:e4:d7:78:50:db:ac:5c:
a1:66:45:d8:c5:6a:74:af:e9:88:c7:8f:37:4f:79:71:36:95:
00:0c:8c:a4:44:76:57:e0:cb:01:63:2c:e3:60:cc:0f:f3:19:
04:a1:80:78:08:77:a3:b1:f4:67:e8:6f:66:ef:ee:48:9c:52:
58:6b:f1:46:05:6f:1e:61:90:60:b3:5d:c7:7f:79:f1:0a:74:
98:de:3a:d8:1a:a0:f7:92:76:56:9b:b5:f9:a5:82:90:d7:2b:
da:3c:dc:fd:5a:19:89:43:d4:b4:4d:cf:ab:2d:a3:eb:d0:10:
e4:ce:c8:3c:b9:a4:38:aa:09:c3:ae:ef:e9:ab:e5:52:f9:96:
02:1e:8d:80:cd:72:b3:ec:ad:00:c3:ae:65:55:2c:4e:6b:51:
cb:ba:2b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:21 2026 by rpki-client