
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
File: x3_gBdfljsAzypq6h-BgYCFTNhc.mft (raw, json)
Hash identifier: 6rbOk33X/Q9apwFzOsfkXF+eopitOUD3+QD2ko4wGcM=
Subject key identifier: 19:57:1D:D7:B9:D1:9A:DF:5D:81:DF:B9:83:14:32:09:CF:8F:FF:AF
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Certificate issuer: /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial: 019D2771D355A12A255BAD3CFDF08CEFE345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
Manifest number: 0D2D
Signing time: Thu 26 Mar 2026 00:01:04 +0000
Manifest this update: Thu 26 Mar 2026 00:01:04 +0000
Manifest next update: Fri 27 Mar 2026 00:01:04 +0000
Files and hashes: 1: 7873A-doZHT3z3WdUC9-3ek1dsM.roa (hash: GiS1ksDLyImHjpb2W7ngtoEXY3bCfhYHNgRK23R2O8Q=)
2: SJYIkLcX_CNS1SprQ_soGckZIGQ.roa (hash: eDm4/cj9IxvpczJ1uU/Y+99aLmMJiA5yew/A11GEYVs=)
3: rf5y8gSq5wsa5gp2pUsrZdvorF4.roa (hash: LhVJmNP7LYW2COhuVTfB4/5Ch+7vx0bLlcnCO+/fQfk=)
4: x3_gBdfljsAzypq6h-BgYCFTNhc.crl (hash: nyw/Xw02Cc8rd0tlgSdZ7VpELVHuCCGQzK3ajKblLVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d3:55:a1:2a:25:5b:ad:3c:fd:f0:8c:ef:e3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
Validity
Not Before: Mar 26 00:01:04 2026 GMT
Not After : Mar 27 00:01:04 2026 GMT
Subject: CN=19571dd7b9d19adf5d81dfb983143209cf8fffaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e5:65:fa:7e:fc:ce:bb:c4:07:26:6a:dc:9f:
a2:2c:ea:0e:07:00:c2:38:c8:4e:ba:4f:bd:fe:10:
61:cc:d6:d1:5b:33:42:4d:60:8c:89:e1:40:72:57:
a2:13:83:20:02:45:00:64:0c:94:87:fc:cd:cf:3d:
07:fa:4c:45:a5:54:d5:d5:69:45:52:f4:79:22:7a:
f6:c6:2d:fc:a4:e1:98:a2:e4:64:58:4a:e6:07:c6:
28:55:a2:ba:fa:12:c5:ac:8a:ba:b1:eb:1f:17:ec:
a2:61:a4:8d:83:35:c0:a8:05:78:36:74:e1:00:26:
f7:95:54:46:e5:58:88:3a:01:03:ff:09:5d:f8:0e:
8d:e1:1e:c4:2f:ff:0e:d3:9f:c8:d8:1e:8f:8c:09:
59:93:7d:77:2b:b6:f6:67:77:59:7c:b3:68:38:1a:
0f:23:3e:5c:4c:7a:2f:8b:9d:5d:e6:58:19:d7:a0:
af:ef:e0:98:27:27:6f:f0:e2:e3:c6:ff:ba:69:cd:
e3:e4:22:13:5d:e2:cb:e3:04:53:3a:99:6f:15:1d:
4f:77:0b:63:55:86:4a:38:e6:10:85:27:d9:f0:9b:
ec:fc:8a:b1:3a:2a:20:a9:33:66:b5:ba:a8:77:6d:
45:48:17:f8:76:35:34:9e:19:09:3c:66:3b:35:bb:
6d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:57:1D:D7:B9:D1:9A:DF:5D:81:DF:B9:83:14:32:09:CF:8F:FF:AF
X509v3 Authority Key Identifier:
keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9b:a3:e4:c4:f1:1c:74:ab:dd:4b:fb:a5:74:6b:a0:9c:6f:
54:1c:8f:6e:c2:db:c3:bf:18:30:c1:93:2e:19:03:ea:14:c6:
67:4c:d9:70:6c:d8:82:ca:52:20:22:00:01:e4:bb:3f:1f:96:
a0:09:a3:81:55:1d:9d:da:61:87:6c:dd:51:ef:a1:45:54:10:
62:d4:f0:ad:61:94:97:e3:cf:9d:29:72:35:46:cf:d5:8f:9a:
22:38:90:d8:90:cc:33:54:ad:31:6d:ca:37:6e:46:fc:a6:76:
35:74:e4:16:75:5b:14:29:ad:64:eb:06:85:4b:c0:06:2f:8f:
2e:f5:14:d9:f2:57:3b:90:d3:51:3d:5a:07:aa:5d:8b:e0:15:
ae:e0:a3:9a:67:51:98:87:75:ff:bb:15:0b:5b:db:9a:08:b3:
3e:fc:fa:9d:c1:c1:39:1b:7e:9d:2d:cc:7a:af:f3:76:06:48:
41:b1:f3:43:92:0b:cf:b7:c7:2c:40:ce:1f:b3:4d:58:69:75:
87:3a:16:72:26:63:5f:aa:26:1e:3c:4a:3e:8b:d0:75:bf:0e:
f5:8e:20:9b:83:e6:a6:fb:b0:e7:f2:d0:38:d7:44:e6:af:21:
35:6e:f6:73:65:76:c8:ce:f4:74:e1:85:5f:4d:76:2f:fe:91:
a7:8e:36:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:06 2026 by rpki-client