Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
File: ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft (raw, json)
Hash identifier: 1ATPKEPnz5Q76HB76HRHj1XcFLRPksY8f4QrcaDQcbw=
Subject key identifier: FF:ED:25:1E:66:74:77:7A:30:4F:0A:1C:CC:3F:8C:D2:74:2B:03:0D
Authority key identifier: 7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21
Certificate issuer: /CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821
Certificate serial: 019D37C0BA2522582984F4A70F15158C9E76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:01:10 +0000
Manifest this update: Sun 29 Mar 2026 04:01:10 +0000
Manifest next update: Mon 30 Mar 2026 04:01:10 +0000
Files and hashes: 1: cUjXL3AkU0vzCeL7XNA5hx74zv4.roa (hash: M5YlQ4HoZ45gNTliPTDu0USjnaLFnkhBumUlmweXtD8=)
2: ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl (hash: 78U87L1/cbc+4cB5tan0W7T7Qv2CHC0cDiSIaFAQ3iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ba:25:22:58:29:84:f4:a7:0f:15:15:8c:9e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821
Validity
Not Before: Mar 29 04:01:10 2026 GMT
Not After : Mar 30 04:01:10 2026 GMT
Subject: CN=ffed251e6674777a304f0a1ccc3f8cd2742b030d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3f:01:f8:84:3d:2c:96:aa:dd:97:38:3a:9e:
9c:f7:92:35:bc:ca:cc:44:32:c2:63:13:71:04:d4:
f4:47:11:0f:9c:b7:e5:7e:68:16:be:f8:40:76:af:
7f:f9:bf:dc:73:5e:be:b0:94:54:a2:aa:b7:17:23:
e4:02:bb:52:2c:ba:9d:46:54:87:8b:ed:8a:5c:7e:
77:ac:17:77:83:46:99:9b:c2:7d:06:aa:62:a4:ea:
5a:fc:17:18:33:49:ba:36:3b:8d:81:32:61:bf:06:
ad:b5:e4:21:7f:c4:1f:1e:2d:b6:42:bd:40:59:0c:
c4:aa:31:4f:d0:a4:95:46:f1:47:2a:8f:ad:e7:14:
41:8a:4b:26:76:f7:43:cb:3c:b6:f5:ef:17:1d:68:
4b:ce:ea:bc:d7:ec:7a:01:c4:f4:65:45:3c:ca:67:
53:63:c2:b0:84:5f:51:f3:3a:83:7e:46:aa:26:7e:
87:10:18:c3:a7:52:13:90:86:7a:88:dc:ff:61:27:
05:be:b7:ab:9a:e1:d2:28:71:ad:c5:92:c2:93:e3:
76:6f:50:ad:06:6f:2c:c9:f0:c4:56:51:1c:d7:4d:
34:55:d7:72:df:39:01:d4:b4:f9:4f:25:ce:ee:97:
41:5f:72:87:b4:2e:72:97:e3:21:b3:54:e7:86:f1:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:ED:25:1E:66:74:77:7A:30:4F:0A:1C:CC:3F:8C:D2:74:2B:03:0D
X509v3 Authority Key Identifier:
keyid:7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:98:7c:8c:d5:8d:89:10:69:e7:7b:c3:98:ce:25:8d:b1:db:
39:fe:a7:e3:48:78:d7:98:ad:b2:7b:3c:c0:64:fd:47:17:f0:
cf:34:bc:46:7a:67:d6:30:51:d2:6a:07:87:1e:30:b9:f7:15:
84:e0:8f:35:15:eb:49:e7:cd:f0:69:41:c1:b4:1e:2f:e1:c8:
e8:db:9e:6b:24:9b:f3:ec:5b:1f:1d:b1:b0:f7:0e:be:a2:4d:
90:80:9b:48:f1:95:65:a1:8e:3e:e6:22:20:a9:53:4c:f4:a2:
e6:a9:46:75:88:03:f5:31:18:f6:95:d1:68:6d:ec:84:ba:0e:
ca:dd:0a:4b:cc:2b:35:08:cc:b8:40:df:c8:69:26:34:90:df:
a6:1c:ee:c9:05:06:cf:f1:33:c1:79:66:7a:c4:60:08:e8:00:
b0:9b:f0:37:a6:bd:d9:44:e6:65:ac:0f:27:54:74:e0:32:52:
0e:5d:9f:80:3a:ae:a0:f5:c7:fd:13:2a:79:36:9b:5e:61:11:
3c:f0:83:72:1b:50:eb:01:84:9d:f3:f9:68:af:ed:c6:5b:de:
b5:e3:bd:de:17:74:9e:7f:8a:c4:d5:5e:32:99:80:16:e7:a2:
d4:3e:96:00:56:b9:e5:f5:61:37:b2:71:4f:a4:7e:5e:13:49:
91:45:f8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:02 2026 by rpki-client