Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
File: x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft (raw, json)
Hash identifier: Rdd/R0KUl55xY9V1QH9ulh+oeeVx3fENSwog19cyFX4=
Subject key identifier: B4:13:C8:CF:40:7A:F3:BD:12:AD:AB:88:B7:1B:0B:FF:8E:A0:AE:F3
Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Certificate issuer: /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Certificate serial: 01A0D4CBAE23660C58B75B91A46276B96C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 19:01:53 +0000
Manifest this update: Thu 24 Sep 2026 19:01:53 +0000
Manifest next update: Fri 25 Sep 2026 19:01:53 +0000
Files and hashes: 1: IdCieT_FXqDI14dT8duUpcsBKXs.roa (hash: WZwdbmj4EPfIzjAKG+pkXmeMhYN6QkPRXsW2FQB2pGA=)
2: x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl (hash: qwahQH9+AIklPQvjLq/ufpW7f9kNnNmO6V69XC8nuPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:ae:23:66:0c:58:b7:5b:91:a4:62:76:b9:6c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Validity
Not Before: Sep 24 19:01:53 2026 GMT
Not After : Sep 25 19:01:53 2026 GMT
Subject: CN=b413c8cf407af3bd12adab88b71b0bff8ea0aef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:22:30:03:e7:3a:c8:2b:f7:68:70:98:23:
a0:c8:29:0f:0f:a0:36:38:b5:0f:7e:03:8b:36:f1:
f8:71:21:93:41:ab:ed:28:6b:05:67:ee:bb:6a:86:
3a:93:78:41:5c:3b:ae:4b:2b:ea:7f:12:c5:d1:df:
55:5a:0b:97:50:88:f3:da:22:f2:86:c8:a7:08:db:
1d:7e:8d:c5:75:e8:c3:95:4c:11:c5:04:af:43:1c:
2e:10:34:ca:0a:ef:0c:ec:75:65:57:47:45:8f:63:
4d:91:53:be:e5:5c:fc:af:63:a1:97:d0:45:fd:bc:
99:4c:a5:94:2d:a1:96:bd:00:6d:b5:4c:1b:fa:cf:
d2:1e:93:50:d5:3b:97:a7:f1:20:85:11:05:26:60:
08:74:be:07:fb:f1:11:00:5a:85:4f:a1:33:3e:63:
b2:f6:03:11:7f:f9:12:3c:27:dd:d2:1b:c9:57:6d:
fc:2a:d0:a1:56:00:9c:05:74:65:2a:c4:60:06:05:
a1:f9:a5:81:37:3e:b5:60:63:77:ca:41:26:4b:72:
0e:20:91:52:79:e7:76:c9:68:72:1a:19:ab:0d:76:
47:73:bc:de:33:71:35:d8:f8:75:d6:4f:93:53:e5:
d3:17:a6:54:6c:c9:c7:ab:73:be:d4:52:4d:df:6c:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:13:C8:CF:40:7A:F3:BD:12:AD:AB:88:B7:1B:0B:FF:8E:A0:AE:F3
X509v3 Authority Key Identifier:
keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:28:ec:c9:e4:39:5b:51:c8:75:0e:3d:42:18:92:c1:c8:be:
1b:35:cb:53:49:4f:28:48:86:3b:ba:c3:0a:bc:f9:2a:13:11:
ad:13:f8:bb:12:69:c1:89:03:34:ab:d8:95:be:a2:a7:ea:ff:
1e:cb:c1:59:c2:29:19:59:f0:42:4a:9d:69:f5:f0:23:f6:f1:
96:15:60:db:4a:91:df:a2:ed:3e:cf:0f:09:ca:db:d1:17:b3:
40:69:87:46:14:20:35:09:66:37:01:23:11:62:08:23:eb:bb:
6c:88:4b:33:42:e2:a6:a4:e0:03:f4:52:c8:f2:41:e3:5a:f0:
a2:d1:99:93:73:fa:ea:b7:17:cd:ca:a0:43:84:a0:5f:a2:1d:
79:f6:28:a0:d7:eb:21:a8:c4:55:7b:f0:65:6d:13:c3:11:66:
80:bc:ec:ba:5b:5f:fe:20:22:ef:57:aa:0a:52:7f:24:13:37:
c6:61:50:cd:77:7f:69:57:51:46:cf:6c:68:b2:df:52:d1:a5:
7b:69:c6:7c:ba:fa:16:49:b5:7c:ab:b0:69:94:40:13:eb:a9:
0e:14:86:94:1b:6a:d6:cd:d1:8b:6b:0b:7f:26:9e:6c:3a:4a:
39:fe:4a:c3:da:90:5d:b7:74:24:0f:db:33:9d:cc:ac:ae:65:
2b:00:4a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:45:14 2026 by rpki-client