Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
File: x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json)
Hash identifier: BrAE/cj//lwIh5VyLyCSHsKovlZqZ742gz3MDnDW9H0=
Subject key identifier: 39:38:5A:35:B4:EF:39:7F:FB:F1:8B:E1:24:E2:19:14:27:A3:4E:A1
Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Certificate issuer: /CN=c77549551405d9948c662dfe4de24de055daff5e
Certificate serial: 01A0DFF3A411CECD1C2108F8C4E64E16E8E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 23:01:21 +0000
Manifest this update: Sat 26 Sep 2026 23:01:21 +0000
Manifest next update: Sun 27 Sep 2026 23:01:21 +0000
Files and hashes: 1: voGrppNhCGHuRZLwsuAkj7Qr9qY.roa (hash: PhKSVss4XujDromY1GHIug1qUmjQzQEMDbCWKPHUiJY=)
2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: MS/SH5gTPtx9LQLfaM31UESX6VgMfB+sfhH1qeXxi4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:a4:11:ce:cd:1c:21:08:f8:c4:e6:4e:16:e8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e
Validity
Not Before: Sep 26 23:01:21 2026 GMT
Not After : Sep 27 23:01:21 2026 GMT
Subject: CN=39385a35b4ef397ffbf18be124e2191427a34ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:75:c1:99:bb:d2:c9:8e:0c:44:3d:78:87:
c7:1a:32:e0:66:91:32:f2:8b:13:fd:11:3d:ca:97:
f1:3b:10:1f:81:65:f7:63:35:e5:d8:78:6f:33:a6:
fc:c4:8d:3c:ee:c0:ee:d5:11:8c:e6:aa:ba:27:02:
a1:0a:f9:52:69:f1:7a:78:fd:4a:31:0f:c2:d9:64:
64:99:22:61:62:ff:10:7f:8f:9d:a6:e1:6d:ab:bf:
c0:09:b0:bc:7b:d8:6b:b2:ec:12:45:d2:57:f4:3d:
0a:ca:b5:23:d7:b4:07:a3:b8:69:e5:5f:a4:47:80:
68:af:2d:5e:5c:b1:8a:15:59:20:74:43:7d:53:55:
1c:32:37:7d:24:5a:9d:2a:03:4d:3c:31:c5:cf:f9:
3c:b2:60:15:f7:7f:2e:36:a3:3d:34:b1:d1:86:be:
7f:30:c7:b8:a8:3d:33:fa:a6:f7:86:cf:b9:47:f1:
d8:1b:45:5b:ad:f7:13:3f:8d:90:b5:f6:74:06:1f:
b9:e5:60:ae:cf:bf:b1:79:e9:8a:5a:27:37:ae:71:
82:57:c6:a6:7f:47:83:d5:78:ee:4d:45:23:df:5c:
6d:dd:e5:22:f0:46:b4:59:75:f3:e8:42:c1:ca:44:
84:ca:79:bc:81:6e:a4:a3:d7:4d:11:2a:8b:54:c7:
8a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:38:5A:35:B4:EF:39:7F:FB:F1:8B:E1:24:E2:19:14:27:A3:4E:A1
X509v3 Authority Key Identifier:
keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6d:d0:91:f2:c0:fe:6c:77:24:0d:d1:d3:f6:d1:3f:0c:51:
e9:39:c7:3a:86:b0:c5:1b:27:7f:25:ba:9e:c8:ec:e1:54:43:
56:7a:2e:25:25:1a:ff:07:9c:b1:de:69:e1:69:5b:f1:18:f9:
63:16:34:90:b5:b4:4d:b4:1c:58:ee:ee:22:b0:37:13:ee:64:
e3:a6:31:9f:52:1a:b8:c1:f4:dd:df:6b:78:49:ca:8d:c4:63:
4e:dd:a2:c6:52:3e:ae:95:6a:c4:fa:43:f4:93:df:ef:c2:12:
97:49:d0:1d:2a:05:d3:68:7a:52:d5:b6:aa:e0:89:b6:09:8c:
79:48:bc:3a:07:bc:a5:11:64:f9:c9:e1:85:d9:a0:15:91:0a:
ff:6c:d9:c1:93:ac:71:6f:ee:85:24:dd:67:5c:cb:8d:d8:7b:
65:75:ec:ab:30:03:aa:a6:89:e9:1a:d4:60:03:1f:1e:2a:f8:
48:99:f8:7c:f6:1c:55:7a:30:42:2d:17:80:e1:c0:7a:8e:0a:
34:60:78:b2:69:ac:3b:87:5c:c6:21:b8:35:38:55:13:00:60:
0d:b0:5b:18:88:96:7b:ec:91:77:8f:6e:ba:6f:c2:2c:0e:a5:
12:ef:b9:24:90:fa:3b:67:3b:b8:0f:2a:6a:30:d8:7f:39:cd:
08:02:65:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:32:06 2026 by rpki-client