Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json)
Hash identifier: IeoUicsxv9LKbjvcPoE/Q2yv/PGLWwTZOifz/hR+pxI=
Subject key identifier: AA:A8:D8:14:FF:88:06:8D:DB:DA:5E:64:99:0B:FC:E0:E1:0D:92:7C
Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Certificate serial: 019CAAFD243FB5C7E805CF6155695FBEA248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
Manifest number: 05FA
Signing time: Sun 01 Mar 2026 20:00:42 +0000
Manifest this update: Sun 01 Mar 2026 20:00:42 +0000
Manifest next update: Mon 02 Mar 2026 20:00:42 +0000
Files and hashes: 1: MjH0mCguKyAe-5Dh9UdmNGfhqQM.roa (hash: 5eB9gBDQyLuH02CzAyJcgsM/kGpWR1V5i1JQVlFMYBY=)
2: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: cmR8qTN4zbZErFtPGHS2m2U7GA+D4qTj/9O5eIdFE9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:24:3f:b5:c7:e8:05:cf:61:55:69:5f:be:a2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Validity
Not Before: Mar 1 20:00:42 2026 GMT
Not After : Mar 2 20:00:42 2026 GMT
Subject: CN=aaa8d814ff88068ddbda5e64990bfce0e10d927c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:62:65:48:73:6e:16:15:ff:cc:58:54:ca:
d6:83:28:48:fe:e6:a3:57:7b:52:92:1a:fa:3c:14:
ee:c2:b0:e8:0b:a9:c9:6a:4a:0d:8b:98:61:2e:97:
5f:01:e8:f3:8f:4b:4a:2b:60:c6:27:91:0e:73:16:
90:5b:59:36:71:86:c3:b1:b3:7e:63:15:ea:8f:ed:
98:34:46:ad:8d:67:bb:8d:03:0e:ab:91:72:1c:11:
45:2d:e0:45:1c:fd:a0:95:69:32:68:d8:88:bc:74:
cf:18:e0:55:83:2d:35:13:78:7b:89:8d:73:50:e8:
3b:bc:94:88:33:03:95:1e:03:8d:2d:46:ed:09:b3:
a8:d1:f4:62:60:6e:80:62:88:18:87:cb:df:4d:a9:
aa:53:98:f9:9a:87:3f:d4:78:96:5a:14:c8:5d:d6:
2c:a5:02:ea:a9:ec:cc:bc:8d:b7:99:ca:8a:72:7b:
45:d2:b0:34:01:22:80:aa:8c:76:9d:bb:89:b1:ef:
e6:38:3a:8f:a8:8d:ef:cf:21:52:89:81:75:f0:f9:
5b:f6:89:68:e0:5b:68:fd:87:6f:79:a7:35:f6:94:
aa:56:58:80:4c:6b:3a:f4:32:0c:34:e7:ef:63:78:
ae:8b:fb:5f:74:d5:75:13:3f:51:e0:74:d2:db:c8:
6b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A8:D8:14:FF:88:06:8D:DB:DA:5E:64:99:0B:FC:E0:E1:0D:92:7C
X509v3 Authority Key Identifier:
keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:bc:dc:1e:32:75:ce:e2:b6:ab:6a:bd:10:08:0d:2d:61:53:
9b:70:f0:45:9a:56:ad:3f:17:90:94:55:74:24:74:25:1d:01:
5a:62:4e:87:92:94:7e:cd:2c:a3:5c:aa:35:00:57:fe:9d:ed:
08:6d:3f:62:32:c4:3c:57:50:ff:37:37:32:6c:8c:b2:07:c3:
c4:73:67:a2:86:4e:be:83:17:2c:a4:96:9e:30:7a:73:77:0a:
0a:ca:f6:5a:ce:28:ee:2c:ef:f0:34:ca:a9:b8:62:56:b7:5b:
d8:01:37:6d:5c:67:9b:e6:3e:86:c7:e5:b2:ab:97:f9:a6:79:
3a:07:47:22:ab:dc:3a:98:a4:61:95:51:73:d9:f3:04:df:99:
e9:cf:ef:4f:f3:c4:e2:72:37:31:c0:60:4d:9d:78:03:89:a3:
61:db:84:0f:5f:df:7f:bd:1f:82:11:5a:39:ee:c7:91:86:07:
05:fe:5f:92:b7:71:04:2b:c4:c4:7b:b8:c2:e8:a7:dc:b5:57:
bd:fb:44:23:dc:b0:95:82:09:28:d0:23:5c:11:89:0e:50:cd:
95:49:26:e6:bb:63:a4:7d:63:f6:56:3c:7c:f7:5c:83:44:c6:
b8:33:91:9e:c3:e8:63:43:eb:2a:ca:98:ca:f4:9b:6d:4e:5a:
44:5f:af:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:57 2026 by rpki-client