Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.mft
File: _eV3-qI1cXrhNDjh1S6ktOPaVJg.mft (raw, json)
Hash identifier: kZXeSj2wBih4CqPnHtepQW6SYrLpDsXJ1rzaggtxEQ4=
Subject key identifier: FF:D9:33:12:61:80:0B:6B:97:85:CA:EA:AC:0F:77:09:C1:42:49:4F
Authority key identifier: FD:E5:77:FA:A2:35:71:7A:E1:34:38:E1:D5:2E:A4:B4:E3:DA:54:98
Certificate issuer: /CN=fde577faa235717ae13438e1d52ea4b4e3da5498
Certificate serial: 019DE634416C32397D001E4F9A29D7BFCFDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.mft
Manifest number: 08
Signing time: Sat 02 May 2026 01:01:17 +0000
Manifest this update: Sat 02 May 2026 01:01:17 +0000
Manifest next update: Sun 03 May 2026 01:01:17 +0000
Files and hashes: 1: UmYNZqum_4Kzkh8HDuLm7ufNeuA.roa (hash: bxqxiGhnIQdSZRzDN0jWAaCALi/Ef7zdBHHxbobaTq0=)
2: _eV3-qI1cXrhNDjh1S6ktOPaVJg.crl (hash: PnsaD+wDz9nyw24aHoapgJVXuzfCdIlC5uGXducEiGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 May 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e6:34:41:6c:32:39:7d:00:1e:4f:9a:29:d7:bf:cf:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde577faa235717ae13438e1d52ea4b4e3da5498
Validity
Not Before: May 2 01:01:17 2026 GMT
Not After : May 3 01:01:17 2026 GMT
Subject: CN=ffd9331261800b6b9785caeaac0f7709c142494f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:a3:e9:f9:1c:f5:9e:e3:50:57:4c:0c:40:
be:5a:6f:5e:24:7c:d2:23:13:2e:02:9f:fa:3d:bd:
a0:0a:ab:bb:8c:40:c9:ba:ed:e3:08:df:ff:c4:43:
51:19:ee:66:e0:4c:1f:e1:32:c6:03:d1:20:60:e2:
6c:54:b1:ed:29:31:76:3b:87:b9:ea:9b:c8:0f:68:
b8:46:b9:82:6f:66:c2:45:cc:cb:16:55:b9:f1:fe:
3b:76:19:0b:39:5f:c4:bd:63:c3:4d:4e:2c:1e:55:
b6:78:0e:34:68:2d:6f:f8:2b:88:ad:8c:1d:c6:7e:
72:f8:1c:4a:52:35:1d:45:c3:35:0d:81:c8:b7:57:
77:aa:f1:9c:7f:52:96:d8:91:9b:d7:bc:87:00:4c:
45:8d:51:a5:e3:c5:b3:aa:dc:74:7b:9f:81:4b:04:
e8:97:b7:98:c8:1f:37:cb:0c:26:48:cc:ab:6d:51:
ce:c3:35:9f:97:de:9e:a6:56:00:8d:ee:48:f3:c1:
de:22:60:0f:a7:b4:48:25:af:f0:a7:da:e4:e7:fd:
75:42:da:9b:0c:7e:ba:87:9e:6a:91:3a:d7:b2:d0:
84:5a:59:8d:13:b9:36:d2:85:5a:61:f1:14:a2:7b:
1f:db:b2:24:d0:fb:f6:78:2e:96:3b:d1:80:13:86:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D9:33:12:61:80:0B:6B:97:85:CA:EA:AC:0F:77:09:C1:42:49:4F
X509v3 Authority Key Identifier:
keyid:FD:E5:77:FA:A2:35:71:7A:E1:34:38:E1:D5:2E:A4:B4:E3:DA:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:15:46:3c:24:46:c3:30:46:89:f9:78:ce:72:01:60:08:f8:
a1:bc:29:17:a9:76:14:e5:99:3d:9b:2b:13:c6:9d:6b:d5:57:
46:e2:13:05:4e:f3:27:e2:30:3f:26:5d:34:e3:14:50:1e:67:
54:80:5a:ec:48:77:61:05:7e:44:91:d0:8c:eb:a1:37:cf:ca:
07:16:32:06:53:16:ac:fb:65:26:de:50:ec:8e:6c:3b:39:2f:
65:19:f3:41:64:fc:bb:d9:5c:5b:63:5b:77:d7:53:a4:fb:0f:
61:ba:b5:8f:33:81:de:51:74:8e:d4:06:49:b1:aa:b2:78:12:
09:ce:80:7a:3f:73:51:68:60:15:76:d1:51:99:25:a5:06:fa:
95:84:3b:0c:c0:8b:9c:3a:5b:65:68:e3:a0:2c:30:45:b6:6e:
4a:b2:55:19:2b:4d:66:9f:3e:59:b4:ba:82:1e:b7:a8:6c:2d:
05:4e:3e:1c:b2:ae:23:98:0d:90:5a:b2:a9:6c:f8:76:90:fc:
19:67:78:d2:22:db:01:8a:3d:02:30:49:bf:dd:90:ea:ca:ea:
df:16:b2:40:08:e4:0d:8c:33:e5:45:46:58:69:73:bd:de:5f:
a0:04:57:14:15:94:c1:b5:57:e3:e5:6c:35:fb:c8:bc:f8:61:
e4:5c:22:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 11:09:56 2026 by rpki-client