Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json)
Hash identifier: /H2z2FNYRCT93rukyIzm0gpblepfQ0yahPevCCUZ0vo=
Subject key identifier: 18:C9:40:25:F2:10:96:D1:06:FC:77:74:2C:59:72:D9:B8:76:99:00
Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Certificate serial: 019D0F6963AC55B4E98A13321E418BD540E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
Manifest number: 062E
Signing time: Sat 21 Mar 2026 08:00:58 +0000
Manifest this update: Sat 21 Mar 2026 08:00:58 +0000
Manifest next update: Sun 22 Mar 2026 08:00:58 +0000
Files and hashes: 1: MjH0mCguKyAe-5Dh9UdmNGfhqQM.roa (hash: 5eB9gBDQyLuH02CzAyJcgsM/kGpWR1V5i1JQVlFMYBY=)
2: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: 7Ymo/sTu3zRuINsmwIKBCnw0RJ5c+Ob1IVdu1T4YpTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0f:69:63:ac:55:b4:e9:8a:13:32:1e:41:8b:d5:40:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Validity
Not Before: Mar 21 08:00:58 2026 GMT
Not After : Mar 22 08:00:58 2026 GMT
Subject: CN=18c94025f21096d106fc77742c5972d9b8769900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:89:35:16:d1:30:ab:40:4a:41:7e:25:08:75:
32:9d:d8:e5:e8:67:c5:42:a1:eb:06:6d:b2:e1:bb:
44:8a:f7:b2:62:f1:60:a1:e0:8e:5f:49:c2:ba:93:
e3:f3:b1:34:2c:de:ec:f9:60:88:0e:9c:83:09:86:
8a:33:67:7e:00:4c:11:5a:c1:94:b7:af:8e:8a:17:
d5:36:dd:3c:20:aa:76:60:d7:b7:6a:7a:00:ca:62:
53:67:b0:44:c3:48:ef:27:e1:13:e5:a3:df:d3:58:
d7:6f:fd:ed:db:4d:50:41:bc:dc:e2:b8:21:8a:7c:
cd:cc:c8:6b:ec:c3:38:4e:3d:9e:44:41:68:15:e6:
67:5f:38:dc:d5:1b:8f:c5:a7:5a:33:da:11:21:0a:
c1:8f:a7:ea:fe:95:d7:a1:20:df:e2:d3:fa:5f:66:
9a:53:de:af:e7:b2:80:7a:b6:37:8c:f7:9f:c8:d1:
ad:cb:22:f0:dd:14:67:62:77:a7:52:d9:21:8d:c0:
59:af:75:63:e3:59:39:ec:23:43:2c:18:70:c3:93:
d9:73:94:f2:85:f0:77:08:48:e3:5f:e8:a9:97:78:
cb:99:c7:1a:ec:84:12:aa:e4:8b:74:96:29:ea:6f:
08:ab:65:73:b7:31:8f:2a:72:4c:0d:c1:28:d2:44:
2d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C9:40:25:F2:10:96:D1:06:FC:77:74:2C:59:72:D9:B8:76:99:00
X509v3 Authority Key Identifier:
keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:16:dd:c1:05:36:b1:39:a8:5e:1a:e0:f9:55:0c:b0:ee:e4:
2d:d3:ab:ae:bf:7b:88:d4:0e:6b:fe:51:b8:42:6e:5e:a4:aa:
f2:72:bf:67:ad:f1:1d:72:8a:ba:18:51:2c:5e:d9:b9:b8:9a:
80:9b:01:d1:57:99:ec:b3:bd:30:8f:0e:6c:3b:68:ae:27:79:
cf:2e:30:1d:a6:37:e9:62:d4:4e:6c:9d:98:5c:ec:25:f1:63:
c8:05:70:5d:48:49:3f:8b:c0:e4:f1:0a:e2:d4:f2:a8:76:9f:
fe:d0:52:4b:25:12:8d:0e:92:c1:8b:2e:28:a2:5b:49:67:0a:
6a:94:2e:2d:ca:9f:c4:f0:fb:0c:5c:6a:70:6a:ec:c3:b6:80:
4d:f6:a7:35:d6:f0:2f:3a:1d:57:c9:f0:82:d6:36:8e:c4:93:
fa:04:94:cc:21:64:cb:cc:58:03:14:78:7a:18:42:f8:6a:27:
63:28:f8:48:da:78:0b:8d:68:34:8f:b0:c6:26:64:d6:2a:8e:
91:6b:4f:bd:5c:bf:1f:c5:e8:5b:cb:b1:b4:8a:e0:0e:7f:43:
a1:23:2c:7f:51:9c:a8:46:f3:61:52:0a:dc:02:5c:83:ec:3c:
d8:df:ef:87:66:1e:3f:fd:bb:3d:cb:61:22:57:d1:6d:d2:1d:
d9:8a:8c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 18:32:05 2026 by rpki-client