Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json)
Hash identifier: 5m67EcE3kxlaLIIKg53T53nb9Fv9DGkD0X+uWF47HK4=
Subject key identifier: F7:9E:90:A4:61:8A:62:F7:00:61:70:B1:66:E6:9E:8E:74:2F:B7:DA
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 019D2772A9C7E862EDEB79EA2D04320F0176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
Manifest number: 1892
Signing time: Thu 26 Mar 2026 00:01:58 +0000
Manifest this update: Thu 26 Mar 2026 00:01:58 +0000
Manifest next update: Fri 27 Mar 2026 00:01:58 +0000
Files and hashes: 1: A8hQT388ItEqoQYFOhqCCsEIlTI.roa (hash: 97e6isQPIjw70otEwzd0gLtQm2r1Kv7FnFS5tJziJjw=)
2: F_3SEAz-EKjAxo_g2p-mjUGzRIs.roa (hash: j/8Kr9e/zq+L0yS9GkMCdBYgA7yMxgnitG1QiH62Ck0=)
3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: +F+MapjS6DBWKp2FeztOS2mBVAHsewDXwa35PDgVGyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a9:c7:e8:62:ed:eb:79:ea:2d:04:32:0f:01:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: Mar 26 00:01:58 2026 GMT
Not After : Mar 27 00:01:58 2026 GMT
Subject: CN=f79e90a4618a62f7006170b166e69e8e742fb7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:c1:85:78:56:01:f9:d5:a2:a2:f6:91:11:
73:c1:77:50:ea:e8:46:3d:46:71:21:83:e4:9c:74:
74:1e:bc:37:3d:e2:a0:40:d2:b8:c2:1e:fc:46:fe:
0b:92:66:77:2b:ff:84:0d:f4:21:dd:c5:e4:83:69:
b2:1e:c2:35:23:62:3f:10:b2:b2:66:4c:63:8c:98:
78:64:4e:60:55:9f:82:32:e7:f0:02:ec:72:06:39:
54:ea:10:50:39:1e:f1:72:26:31:23:2f:2d:53:6b:
5c:b7:96:17:a8:02:00:a0:43:b5:75:96:2a:2a:a5:
3f:f2:13:5d:fc:9e:14:28:b2:ce:3b:21:9a:9c:0e:
ff:e9:ef:d0:2f:b1:71:3b:c3:e7:cb:a5:e1:b1:ad:
79:af:51:d4:ae:fb:55:1b:10:55:99:6c:81:29:e5:
14:85:79:3c:15:ca:7b:48:ff:c2:63:9c:15:73:38:
a1:06:8a:da:92:b8:b7:90:f3:85:51:86:06:0d:ee:
d7:68:aa:86:74:5d:29:08:3d:0f:b4:2d:f1:69:bb:
5b:b3:3a:3e:ac:d4:43:c6:6a:ca:8b:f4:43:41:9b:
1e:8c:fc:9b:fc:97:7f:1f:2a:d9:e2:f4:57:93:63:
b7:a5:b7:20:40:9b:c2:04:7a:06:0e:f1:0e:fc:83:
c3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9E:90:A4:61:8A:62:F7:00:61:70:B1:66:E6:9E:8E:74:2F:B7:DA
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:11:0a:ad:6a:75:4b:c4:1f:3d:46:7c:d4:5f:04:5c:2c:80:
41:69:35:42:fa:6e:8e:2e:1d:e2:d7:7c:09:61:3c:ff:c1:46:
61:55:13:82:a8:a6:ca:51:4a:1c:e0:e1:6e:9c:ea:e8:d6:08:
47:c1:ab:a0:f4:b3:d0:b4:15:11:89:1c:f1:f6:32:f4:db:2d:
53:cb:1d:dc:90:79:5d:74:65:4e:06:40:ca:20:8c:d6:4b:80:
c6:60:ae:d2:fe:62:c0:54:64:df:b0:a5:fa:91:4c:94:ca:39:
66:5f:f1:0b:d2:79:87:30:53:b3:f1:e9:3e:03:0a:89:d7:05:
37:79:ca:e6:6f:de:d2:7e:15:4c:ed:dc:67:6d:e7:e1:4c:5f:
67:43:54:b9:5d:fc:b7:16:e9:75:5d:61:68:c8:7d:73:f4:0e:
72:4e:f9:65:11:a8:1e:d1:ed:b2:8a:b0:02:33:88:35:99:9a:
74:a6:f9:d7:9c:f2:33:78:16:20:0a:8c:48:9a:6b:6f:16:18:
1e:5f:c7:0e:0d:f1:db:ac:4e:d3:18:cc:ef:72:29:90:46:e2:
27:84:76:78:32:5e:87:b5:df:f7:6b:b4:0c:b4:e5:4a:27:57:
c7:ab:be:c1:17:6e:e4:f9:03:b1:b1:46:62:6b:0a:99:a5:55:
ee:32:d3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:29 2026 by rpki-client