Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
File: x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json)
Hash identifier: aa2LpiWyPbVxjkQwISmwrQVkwfoxChSZWSeG8yMBces=
Subject key identifier: FD:F5:0A:B7:ED:FE:CD:69:B6:98:0E:FC:C6:08:CF:39:50:AE:22:B8
Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Certificate issuer: /CN=c77549551405d9948c662dfe4de24de055daff5e
Certificate serial: 019F91DAB698BFACC8550A5AB3384BA473AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 02:00:57 +0000
Manifest this update: Fri 24 Jul 2026 02:00:57 +0000
Manifest next update: Sat 25 Jul 2026 02:00:57 +0000
Files and hashes: 1: voGrppNhCGHuRZLwsuAkj7Qr9qY.roa (hash: PhKSVss4XujDromY1GHIug1qUmjQzQEMDbCWKPHUiJY=)
2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: D0s3tqPJE6F14W/fFGDucaw9OQMeUox8U6PbgZCTO5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:b6:98:bf:ac:c8:55:0a:5a:b3:38:4b:a4:73:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e
Validity
Not Before: Jul 24 02:00:57 2026 GMT
Not After : Jul 25 02:00:57 2026 GMT
Subject: CN=fdf50ab7edfecd69b6980efcc608cf3950ae22b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:24:de:0b:3b:92:cf:8d:62:61:ac:83:b2:
04:82:b5:af:c0:05:d5:46:fa:72:e5:49:ca:2b:8c:
29:94:14:ea:86:dd:52:b6:02:45:00:38:81:2f:ea:
86:04:fd:b6:7e:66:1d:88:06:86:2c:80:50:1f:8c:
8a:21:87:ba:33:52:b4:f8:40:8b:9a:94:75:58:2c:
6a:dc:e2:45:90:c4:9f:d2:ed:fa:bc:fb:a7:a7:30:
83:4b:cd:87:06:f1:ac:13:21:c3:fd:96:99:dc:d8:
b2:08:df:e0:a1:f3:21:00:3b:0c:7c:88:40:bd:9c:
a1:5e:e5:19:8c:84:3c:3d:f2:f9:2f:4b:24:b0:aa:
92:5f:5b:44:6b:b8:8d:f0:45:fb:fd:91:61:8c:d4:
74:f5:55:dd:7f:d4:5c:23:ee:cc:a2:7c:af:1d:03:
9b:34:11:1a:c0:11:0c:46:84:63:5b:9b:23:af:ea:
77:82:55:e2:5c:20:71:e7:b0:a3:60:44:40:41:54:
f1:1b:bd:ed:01:b3:a8:cf:ed:69:ee:10:66:8c:4a:
00:67:5c:30:b7:33:1b:6b:e1:3d:55:7a:8e:7c:11:
43:47:13:5b:9f:7e:b7:37:70:d5:6d:fb:36:91:c8:
72:fb:47:c6:a6:2e:0d:89:ac:3c:84:ac:85:56:48:
f5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F5:0A:B7:ED:FE:CD:69:B6:98:0E:FC:C6:08:CF:39:50:AE:22:B8
X509v3 Authority Key Identifier:
keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:62:a4:04:0d:a8:58:f0:e4:42:5d:92:50:33:86:d6:04:b7:
02:16:b2:95:38:69:67:85:67:8d:d2:7b:ca:b7:e2:b8:52:a7:
4e:75:a0:fe:42:2c:ad:24:df:b7:d1:69:e7:a3:aa:a3:d5:20:
55:b9:65:c4:92:5b:8e:46:ef:49:78:4d:8f:50:a6:72:f7:6d:
6f:b3:22:43:45:d1:df:d0:dc:28:fc:fc:83:72:f0:24:20:a8:
d6:be:70:38:37:8c:b2:58:b3:f4:d4:60:e6:3a:70:33:bd:9a:
c6:40:4c:8c:38:36:5c:4e:4d:94:55:7b:80:d5:5f:5b:da:e1:
3f:6c:06:d3:0c:bc:fe:de:41:19:48:65:ce:f3:9a:84:14:d5:
4a:6e:31:9d:b9:23:75:73:06:1e:de:c2:6c:32:cb:45:8d:d1:
e8:79:d2:a6:d4:73:f4:b4:5e:76:d0:f8:33:ea:c9:b2:b8:fc:
65:ff:8f:cb:40:06:de:93:51:23:d5:d7:69:6b:6a:8b:53:35:
17:56:37:ce:9b:58:d2:1e:c0:29:3e:72:7b:3c:0f:fb:e4:61:
05:52:0f:0a:92:a6:95:65:2c:41:4c:c9:59:e8:b1:c9:53:08:
30:58:a7:c7:02:d7:95:af:7f:74:f1:d7:a3:d6:28:24:ff:b9:
a9:93:fc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:01 2026 by rpki-client