
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json)
Hash identifier: LS/XHqRkX6CUeNauoRTB8AEfnd2xhi9HbCNAk1IJK40=
Subject key identifier: C2:3E:FD:28:AF:73:AC:B4:33:C8:9D:7F:B9:7E:38:C8:3D:A1:34:B4
Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Certificate serial: 019EE28C38DB22DC69D2B43000E61547FDE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
Manifest number: 0721
Signing time: Sat 20 Jun 2026 01:01:40 +0000
Manifest this update: Sat 20 Jun 2026 01:01:40 +0000
Manifest next update: Sun 21 Jun 2026 01:01:40 +0000
Files and hashes: 1: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: TirCLhiRjRKsN4WUCC5QOpWcAeu67NxHMe6TI3YExtY=)
2: p_zj4OSdAqCR4867NhK0flKlx14.roa (hash: hGOuLTSiLd6M1yp0vU60mwegnSaS4NS/nPDY8Bf3UTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:8c:38:db:22:dc:69:d2:b4:30:00:e6:15:47:fd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Validity
Not Before: Jun 20 01:01:40 2026 GMT
Not After : Jun 21 01:01:40 2026 GMT
Subject: CN=c23efd28af73acb433c89d7fb97e38c83da134b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:52:9b:30:c7:07:aa:a1:4a:68:13:93:86:d8:
f2:4c:f0:4d:81:89:18:76:93:0f:f2:27:ea:38:53:
c2:7d:82:9e:fa:be:f0:a7:fc:75:3f:07:8a:98:a9:
df:e2:71:a7:d7:34:81:64:57:1a:86:44:76:29:84:
1e:07:cb:f3:5d:02:6c:12:f1:db:ca:2a:17:0d:21:
63:b8:7b:e8:51:fd:39:15:d1:84:f6:05:ad:67:95:
65:d4:1f:a2:d8:62:8c:c9:03:4f:17:ea:8a:9a:c7:
30:be:72:ca:68:ae:f0:69:3d:36:5e:1e:ff:de:58:
08:f1:fe:84:7d:1c:c4:4d:70:19:76:11:be:bf:31:
e9:fc:09:08:c9:4b:57:3d:42:b4:ca:de:cf:7d:2a:
83:1b:0d:f9:0d:d9:d9:b7:74:6d:2f:86:90:88:96:
6c:64:68:3d:e8:89:dd:11:0d:ab:5e:a1:09:4e:d9:
30:49:50:1d:e7:51:42:82:46:ac:0a:ee:ce:b4:b5:
36:5c:fc:a6:9b:5a:59:40:16:17:c6:39:04:87:81:
5f:d2:af:74:92:e7:de:4b:b7:82:63:85:ce:3f:ed:
ae:9c:a3:85:ab:a2:9d:c6:e3:8c:32:56:a7:bd:bc:
c0:64:97:90:c6:98:c6:69:d0:28:b9:56:9f:2f:03:
eb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3E:FD:28:AF:73:AC:B4:33:C8:9D:7F:B9:7E:38:C8:3D:A1:34:B4
X509v3 Authority Key Identifier:
keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b2:30:5c:db:f8:b2:e5:16:4f:d1:2c:43:68:f6:b4:29:64:
74:1b:53:1e:ce:2d:2a:d3:85:0e:1f:fd:06:b9:af:66:41:5c:
fd:71:7b:b4:67:15:56:52:55:32:ac:f3:db:a1:d8:f6:21:25:
93:b7:6a:bd:4d:7e:53:4a:6f:89:77:cd:36:bb:0f:36:6a:24:
95:a5:96:a9:c3:61:95:4e:8f:fd:cd:46:fd:1b:e7:db:d2:42:
87:69:8e:c7:4c:d1:a0:e9:82:cf:c0:0e:db:3c:01:ca:b2:f1:
b6:0a:3d:7c:57:26:1a:1e:0c:2a:d2:be:55:f7:03:76:28:ad:
91:77:3a:51:b9:1d:52:12:2a:2f:5a:d1:6b:d3:4b:d2:ab:ed:
9f:4e:ff:1c:21:7c:ec:c0:5a:7a:77:fc:dc:e5:62:4f:ae:fc:
60:b2:29:50:2d:16:dc:4d:5c:4f:89:c5:65:be:4a:fb:fa:f8:
63:a5:bc:aa:fd:8f:fb:b9:31:c5:28:07:19:cb:91:85:4f:84:
f7:5f:4b:68:5e:95:f5:85:bf:08:9b:9a:4f:32:81:e7:61:0a:
59:f2:f0:9b:6a:16:f9:92:34:77:83:c9:85:57:71:50:02:e3:
9a:63:e9:44:be:cf:4c:0f:fa:88:b0:af:b3:ae:b6:b5:04:9b:
1e:26:5c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:02:17 2026 by rpki-client