Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json)
Hash identifier: EvvmN7tF2MCm1fqR3xNKMt9lEuI+ZRzBnC/8ZpWGxqs=
Subject key identifier: 8F:B3:49:21:33:33:66:CB:92:60:2F:D7:7D:3F:E1:BD:6B:FE:4D:F1
Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Certificate serial: 019DF915D877CE235DFAD7EDCB6BB5A4485E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
Manifest number: 06A7
Signing time: Tue 05 May 2026 17:00:51 +0000
Manifest this update: Tue 05 May 2026 17:00:51 +0000
Manifest next update: Wed 06 May 2026 17:00:51 +0000
Files and hashes: 1: MjH0mCguKyAe-5Dh9UdmNGfhqQM.roa (hash: 5eB9gBDQyLuH02CzAyJcgsM/kGpWR1V5i1JQVlFMYBY=)
2: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: 6zNoqtsXq4AlVbInPuDbiSVjLk+mDKsAnkQM1DnLhCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:15:d8:77:ce:23:5d:fa:d7:ed:cb:6b:b5:a4:48:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Validity
Not Before: May 5 17:00:51 2026 GMT
Not After : May 6 17:00:51 2026 GMT
Subject: CN=8fb34921333366cb92602fd77d3fe1bd6bfe4df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:91:6a:dc:d8:1c:df:9e:df:74:f3:c1:7d:6d:
b9:78:79:f5:84:00:a3:f1:07:be:22:14:7d:3c:7f:
0e:33:fa:68:6e:a9:6c:b4:b2:81:42:66:41:88:ee:
c2:73:0a:34:e0:30:f9:4f:9a:9e:68:45:d0:3a:07:
50:94:fa:fe:46:87:b6:d1:7b:c2:3f:f4:73:bf:cb:
72:6f:5d:41:d2:ac:85:d1:35:a2:6f:01:8c:54:79:
ad:37:9e:c3:ec:c8:a3:5c:5e:74:7f:c5:f7:d7:2a:
17:67:01:d5:87:16:57:77:b6:3b:7f:5f:25:c8:64:
fc:10:17:0d:20:43:b7:16:0e:46:74:be:be:66:58:
23:25:87:9d:c2:f5:2c:3c:0b:1e:80:7a:3f:5d:dd:
f0:3b:48:8c:87:c1:09:ed:7d:a2:7f:0f:c0:71:c5:
aa:a9:b0:36:87:29:5e:c7:07:27:e4:6d:ee:ef:5a:
ec:30:2e:e5:b8:30:1d:c6:46:cc:83:99:7a:17:e3:
16:08:6e:ec:e8:de:64:b7:ce:9b:cf:c5:8e:2d:30:
26:a8:02:13:6d:c9:36:ca:8b:04:d4:18:bd:5f:25:
29:4c:01:42:cc:42:a4:6c:18:c6:3a:4a:54:b9:f6:
d9:de:5b:72:68:03:20:d7:e1:f6:f6:e9:70:7b:d8:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B3:49:21:33:33:66:CB:92:60:2F:D7:7D:3F:E1:BD:6B:FE:4D:F1
X509v3 Authority Key Identifier:
keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:06:c6:9b:68:d2:5e:56:c1:39:c1:80:77:48:4b:0c:03:6f:
8c:4f:5e:9c:61:69:a7:b1:d5:38:ff:91:61:9f:db:40:07:0c:
5b:90:73:80:fc:46:f5:58:f1:6e:7b:47:58:68:78:e8:46:df:
af:2f:dd:66:0c:c4:95:77:9b:0f:73:99:8c:55:dd:fe:17:2d:
87:03:25:c8:30:82:e9:01:66:66:2e:3f:da:68:09:28:38:60:
04:42:7b:8e:76:cc:a9:9e:8a:c7:17:9d:94:6b:db:3a:d0:b0:
28:09:5e:d3:ed:35:94:33:c7:96:09:17:99:53:81:0d:78:0e:
ef:03:37:c8:28:de:c8:b5:b0:af:d4:fa:3e:28:7a:db:fd:a9:
74:fd:58:e3:62:8d:68:c9:61:52:7f:9d:25:d1:22:f1:ba:61:
26:42:69:bb:a3:be:83:b6:19:ac:cd:62:9b:3b:af:aa:ad:f3:
17:22:f1:09:1b:ea:8c:de:58:df:27:5f:1c:b5:ec:74:1d:40:
71:39:c8:f0:43:ab:db:b2:05:31:70:39:59:af:91:0d:6a:44:
e1:43:72:c3:3e:e3:3f:75:9d:03:b0:04:19:fa:a4:50:f4:a9:
4b:69:56:b4:1d:4d:c3:d4:f5:b5:0d:70:23:6f:f9:6c:85:75:
18:76:2f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 20:11:13 2026 by rpki-client