Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
File: x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft (raw, json)
Hash identifier: kqdZY+DnDfSMppOuDbAYNQPbxQoAti0mwMkBpVaK06w=
Subject key identifier: C0:FA:31:60:F8:BC:FB:77:B9:10:E1:97:7C:C2:ED:2E:85:B1:FC:C8
Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Certificate issuer: /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Certificate serial: 019D265FBC534EED7F32D1740AC11F9E5238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:41 +0000
Manifest this update: Wed 25 Mar 2026 19:01:41 +0000
Manifest next update: Thu 26 Mar 2026 19:01:41 +0000
Files and hashes: 1: IdCieT_FXqDI14dT8duUpcsBKXs.roa (hash: WZwdbmj4EPfIzjAKG+pkXmeMhYN6QkPRXsW2FQB2pGA=)
2: x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl (hash: 6XznyRsp0/fJSl/hL9pR6TVZ7pYfKCUpYKawbDX9cCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:bc:53:4e:ed:7f:32:d1:74:0a:c1:1f:9e:52:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Validity
Not Before: Mar 25 19:01:41 2026 GMT
Not After : Mar 26 19:01:41 2026 GMT
Subject: CN=c0fa3160f8bcfb77b910e1977cc2ed2e85b1fcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:11:e1:78:8d:a0:6b:28:2b:c3:b0:90:13:24:
26:fb:6b:92:bc:56:46:7c:56:a3:48:9d:a1:9d:f0:
4f:68:81:e7:b6:08:8c:ca:f6:0e:eb:95:fa:f1:e4:
02:a0:2c:60:39:02:a1:3e:f4:eb:d8:8c:91:b6:98:
fa:61:60:33:3d:5c:26:79:1a:c1:9a:1a:ab:39:bd:
80:c7:0b:6d:e3:77:ac:19:b2:37:a1:01:6f:5b:2a:
32:3f:f2:6f:76:9a:81:df:65:bb:24:97:85:3c:aa:
ad:f1:fa:93:68:ae:1c:c2:3b:b0:32:e8:70:f2:64:
6f:48:ec:43:f3:21:e8:3f:d7:d1:e3:7a:46:34:f8:
98:83:c4:62:30:36:e5:c2:3b:bc:c1:4a:c0:a7:84:
f7:7e:92:c1:3c:0b:9e:5d:4d:8b:a6:90:3f:73:65:
a6:8f:76:a9:18:b4:65:18:64:4c:a8:c7:1d:1d:07:
db:82:fe:e2:21:24:05:ec:b2:14:3b:02:1b:6f:d5:
96:4c:a2:46:36:e2:1d:1a:a6:6e:b5:a5:59:b3:ca:
f4:17:6e:1c:78:fa:89:11:45:e9:6a:91:99:3c:04:
4f:6d:9e:d1:8a:4c:0e:fa:c0:82:25:3b:00:e6:2a:
77:9a:f6:e3:18:22:a4:81:ff:9c:6a:a3:03:6c:77:
30:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FA:31:60:F8:BC:FB:77:B9:10:E1:97:7C:C2:ED:2E:85:B1:FC:C8
X509v3 Authority Key Identifier:
keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:20:3e:4c:cc:49:7f:70:f0:df:f6:69:43:5d:5d:13:a0:3b:
69:f5:f7:b5:18:b3:b0:a4:9d:55:33:e0:80:07:af:37:04:1a:
24:d7:d9:7b:79:d6:0c:20:c7:ad:f8:fd:ea:86:2e:c8:18:52:
fc:5a:19:24:66:33:a2:b8:d1:90:ef:85:f5:af:a6:96:b0:10:
23:a0:65:41:93:98:6b:6c:fd:5a:27:ae:eb:a6:0d:1d:8c:fb:
57:69:08:15:c2:50:e4:b1:59:8f:72:89:e4:6a:e0:bc:1e:44:
5b:9a:f2:c2:8d:29:e2:fe:cc:0b:c4:0c:26:7e:e7:fd:83:09:
68:7d:43:47:9b:dc:0b:fc:c6:7a:68:f4:73:22:64:5c:e3:ef:
15:6e:23:27:8a:34:1b:f5:88:48:db:34:f0:f6:ed:3b:d0:b5:
da:dd:14:58:af:10:6a:d3:19:e6:e7:8d:82:f3:64:d6:e9:fc:
70:9d:29:d9:ad:63:36:2e:86:74:66:35:f7:50:99:07:86:8c:
d0:c7:6e:21:6e:06:2b:f4:95:f4:e5:1b:dd:e6:56:66:72:4f:
5d:5a:96:f1:92:41:f3:c7:ce:4b:8c:a1:5b:9d:e8:ed:11:84:
80:e9:09:94:41:05:ab:bc:40:47:14:6d:53:bd:95:c1:2b:26:
78:98:24:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX7xTTu1/MtF0CsEfnlI4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2ZmNThkMTlhZjEwYmRhNGZjYjBjZjMxZTU4ZGUwOTRi
YmJiNDgwHhcNMjYwMzI1MTkwMTQxWhcNMjYwMzI2MTkwMTQxWjAzMTEwLwYDVQQD
EyhjMGZhMzE2MGY4YmNmYjc3YjkxMGUxOTc3Y2MyZWQyZTg1YjFmY2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxHheI2gaygrw7CQEyQm+2uSvFZG
fFajSJ2hnfBPaIHntgiMyvYO65X68eQCoCxgOQKhPvTr2IyRtpj6YWAzPVwmeRrB
mhqrOb2Axwtt43esGbI3oQFvWyoyP/JvdpqB32W7JJeFPKqt8fqTaK4cwjuwMuhw
8mRvSOxD8yHoP9fR43pGNPiYg8RiMDblwju8wUrAp4T3fpLBPAueXU2LppA/c2Wm
j3apGLRlGGRMqMcdHQfbgv7iISQF7LIUOwIbb9WWTKJGNuIdGqZutaVZs8r0F24c
ePqJEUXpapGZPARPbZ7RikwO+sCCJTsA5ip3mvbjGCKkgf+caqMDbHcw2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMD6MWD4vPt3uRDhl3zC7S6FsfzIMB8GA1UdIwQY
MBaAFMd/9Y0ZrxC9pPywzzHljeCUu7tIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNfMWpSbXZFTDJrX0xEUE1lV040SlM3dTBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84NDY2MDctMDBjOC00MDFkLWJjZmUt
MGE2ZjhiMWM2NTRkLzEveDNfMWpSbXZFTDJrX0xEUE1lV040SlM3dTBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi84NDY2MDctMDBjOC00MDFkLWJjZmUtMGE2ZjhiMWM2NTRk
LzEveDNfMWpSbXZFTDJrX0xEUE1lV040SlM3dTBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyA+TMxJ
f3Dw3/ZpQ11dE6A7afX3tRizsKSdVTPggAevNwQaJNfZe3nWDCDHrfj96oYuyBhS
/FoZJGYzorjRkO+F9a+mlrAQI6BlQZOYa2z9Wieu66YNHYz7V2kIFcJQ5LFZj3KJ
5GrgvB5EW5rywo0p4v7MC8QMJn7n/YMJaH1DR5vcC/zGemj0cyJkXOPvFW4jJ4o0
G/WISNs08PbtO9C12t0UWK8QatMZ5ueNgvNk1un8cJ0p2a1jNi6GdGY191CZB4aM
0MduIW4GK/SV9OUb3eZWZnJPXVqW8ZJB88fOS4yhW53o7RGEgOkJlEEFq7xARxRt
U72VwSsmeJgkfg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:53:00 2026 by rpki-client