Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json)
Hash identifier: zaJDkaANO1t08ORztX3c5vTTvNjr4d0lWpJcaX+JpUs=
Subject key identifier: 7F:1C:52:DC:50:D3:43:03:A5:34:CE:AA:1F:0C:39:38:F3:62:22:F1
Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Certificate serial: 019D98862E0CBD0D4DDF0DF60AA7BD7C32EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
Manifest number: 0675
Signing time: Thu 16 Apr 2026 23:00:23 +0000
Manifest this update: Thu 16 Apr 2026 23:00:23 +0000
Manifest next update: Fri 17 Apr 2026 23:00:23 +0000
Files and hashes: 1: MjH0mCguKyAe-5Dh9UdmNGfhqQM.roa (hash: 5eB9gBDQyLuH02CzAyJcgsM/kGpWR1V5i1JQVlFMYBY=)
2: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: FwSX6oIelZW60dncBM1+C5m3GL7E+5n97/8kpzqv24s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:2e:0c:bd:0d:4d:df:0d:f6:0a:a7:bd:7c:32:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Validity
Not Before: Apr 16 23:00:23 2026 GMT
Not After : Apr 17 23:00:23 2026 GMT
Subject: CN=7f1c52dc50d34303a534ceaa1f0c3938f36222f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:b4:b5:f3:87:cf:77:c4:71:9d:35:02:bc:
d6:bc:af:53:95:b5:a7:f1:7e:4a:9c:9d:4a:31:b6:
97:d4:48:52:ac:18:56:fa:e4:9b:78:e7:5e:1e:77:
fd:8d:a4:45:52:86:dd:8d:27:08:75:96:6a:ae:02:
55:29:6a:15:2b:b8:af:e0:89:b7:6b:f6:14:1b:cd:
17:68:de:61:d9:c4:70:79:18:ac:84:bd:03:09:d0:
34:fc:7b:8a:fa:64:02:48:b6:bd:7b:6a:cf:72:7d:
cd:c1:a4:4f:b2:08:9a:35:1c:34:db:54:4f:18:01:
1d:a0:cc:29:10:96:f7:99:57:2b:30:1b:30:92:d6:
40:91:01:ae:bd:66:0f:16:eb:eb:f6:c6:37:e2:d9:
67:e5:9d:8a:de:97:ae:14:c4:0a:60:d7:c5:ee:58:
48:3d:6c:ad:5c:f4:34:d9:d5:1f:8d:4f:a2:c8:67:
7e:8c:88:1b:c7:bf:b3:30:4b:d5:2d:83:e2:83:b8:
f0:25:41:7d:d7:93:56:ca:47:2e:68:40:7d:e1:48:
f3:8b:ad:56:f5:53:f6:37:15:64:13:5f:93:ef:ff:
2d:3e:d1:32:6b:4e:76:0a:41:b2:4e:90:27:11:6b:
52:34:0a:8c:64:22:62:b2:43:eb:b6:d8:38:7b:ee:
5a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1C:52:DC:50:D3:43:03:A5:34:CE:AA:1F:0C:39:38:F3:62:22:F1
X509v3 Authority Key Identifier:
keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e9:0e:54:2a:96:7e:26:02:c9:34:f3:aa:fb:eb:09:1c:89:
55:f7:87:c2:e1:81:98:8c:95:21:7a:a6:0b:ff:bc:81:de:9f:
8c:7f:a9:92:f3:24:67:80:ed:cc:e5:bb:5a:bd:0b:bb:2e:f1:
2f:e4:2c:db:e1:da:03:f4:af:04:3c:08:e9:58:36:f2:92:1f:
ab:4b:a4:2b:e4:09:47:f4:27:3a:23:09:4d:2d:fe:f5:c6:69:
c0:df:4e:05:dc:c9:c2:76:72:23:df:3b:95:e7:37:85:95:75:
ca:f8:55:aa:53:f7:73:91:bd:9c:65:7d:cc:fd:f2:0f:4b:da:
5d:5a:03:56:06:fc:6e:57:cb:e5:ad:68:24:88:96:ab:86:57:
12:92:46:9a:45:83:89:9a:1b:67:5b:51:c7:25:fb:63:3e:82:
82:a3:af:ce:f6:f0:f7:0c:9b:a2:24:bc:b6:79:ed:4e:fa:e4:
27:fc:67:55:55:25:18:7a:58:44:31:4e:b6:2c:9c:1a:1b:62:
df:b7:aa:bf:12:92:62:57:96:6f:ea:62:b1:65:b0:7f:cd:42:
45:1c:28:f8:8b:79:41:7f:0e:a3:1a:69:f4:42:55:ab:e7:6e:
1c:bc:02:5f:96:ed:fa:e3:a2:18:0d:dd:f6:ae:94:17:c1:0c:
4a:db:14:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yhi4MvQ1N3w32Cqe9fDLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNzExMDU0YTg5NDQ2YTc2ZjQ5M2NlMmMxMjdhOTQ4ZWJh
NGE4ZmYwHhcNMjYwNDE2MjMwMDIzWhcNMjYwNDE3MjMwMDIzWjAzMTEwLwYDVQQD
Eyg3ZjFjNTJkYzUwZDM0MzAzYTUzNGNlYWExZjBjMzkzOGYzNjIyMmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH60tfOHz3fEcZ01ArzWvK9TlbWn
8X5KnJ1KMbaX1EhSrBhW+uSbeOdeHnf9jaRFUobdjScIdZZqrgJVKWoVK7iv4Im3
a/YUG80XaN5h2cRweRishL0DCdA0/HuK+mQCSLa9e2rPcn3NwaRPsgiaNRw021RP
GAEdoMwpEJb3mVcrMBswktZAkQGuvWYPFuvr9sY34tln5Z2K3peuFMQKYNfF7lhI
PWytXPQ02dUfjU+iyGd+jIgbx7+zMEvVLYPig7jwJUF915NWykcuaEB94Ujzi61W
9VP2NxVkE1+T7/8tPtEya052CkGyTpAnEWtSNAqMZCJiskPrttg4e+5a0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8cUtxQ00MDpTTOqh8MOTjzYiLxMB8GA1UdIwQY
MBaAFP9xEFSolEanb0k84sEnqUjrpKj/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iOGZjNTUtYjRjZC00ZDFmLTk5OTAt
NDdhYzM4OWQzMjYxLzEvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iOGZjNTUtYjRjZC00ZDFmLTk5OTAtNDdhYzM4OWQzMjYx
LzEvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATukOVCqW
fiYCyTTzqvvrCRyJVfeHwuGBmIyVIXqmC/+8gd6fjH+pkvMkZ4DtzOW7Wr0Luy7x
L+Qs2+HaA/SvBDwI6Vg28pIfq0ukK+QJR/QnOiMJTS3+9cZpwN9OBdzJwnZyI987
lec3hZV1yvhVqlP3c5G9nGV9zP3yD0vaXVoDVgb8blfL5a1oJIiWq4ZXEpJGmkWD
iZobZ1tRxyX7Yz6CgqOvzvbw9wyboiS8tnntTvrkJ/xnVVUlGHpYRDFOtiycGhti
37eqvxKSYleWb+pisWWwf81CRRwo+It5QX8Ooxpp9EJVq+duHLwCX5bt+uOiGA3d
9q6UF8EMStsU6A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:45 2026 by rpki-client