Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
File: x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft (raw, json)
Hash identifier: wKeWNX6dyyJ7dvLIsE+X6WFvLvcEtvXm3pJprJJZCrg=
Subject key identifier: A9:B4:13:7A:40:36:1A:76:99:94:C2:E6:4E:A1:B9:0F:74:BA:1D:43
Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Certificate issuer: /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Certificate serial: 019F9436ADC3CA77A54D10C0F16CB3ED8652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 13:00:39 +0000
Manifest this update: Fri 24 Jul 2026 13:00:39 +0000
Manifest next update: Sat 25 Jul 2026 13:00:39 +0000
Files and hashes: 1: IdCieT_FXqDI14dT8duUpcsBKXs.roa (hash: WZwdbmj4EPfIzjAKG+pkXmeMhYN6QkPRXsW2FQB2pGA=)
2: x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl (hash: aiIipWCydaBa2ZTtHxz7TvbH6o6dTUXFx9OVD4FtaeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:ad:c3:ca:77:a5:4d:10:c0:f1:6c:b3:ed:86:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Validity
Not Before: Jul 24 13:00:39 2026 GMT
Not After : Jul 25 13:00:39 2026 GMT
Subject: CN=a9b4137a40361a769994c2e64ea1b90f74ba1d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:3e:e1:00:ad:7b:62:6f:fd:d8:42:b1:09:
34:a2:88:1b:0b:25:bf:3c:16:71:d3:13:82:52:3c:
9a:56:2b:49:41:bc:cf:97:28:25:1b:c9:00:fa:a2:
e3:ae:67:a2:d7:3f:84:56:d5:f7:e8:69:f1:5d:71:
65:bf:b4:d0:69:d0:82:99:da:d2:62:7d:29:b3:3e:
8a:3d:f5:60:93:16:43:84:d2:7b:0d:86:22:44:c8:
2e:7a:8f:6d:0c:47:53:21:81:d2:f0:68:4c:d4:73:
f1:8d:f0:f6:05:27:cd:85:b5:da:af:61:cb:fa:8f:
6c:24:90:6b:79:33:26:e8:ef:7b:db:bf:c8:b1:18:
0c:4a:1b:08:76:4d:c1:ea:23:8b:84:33:3e:cb:06:
83:a6:06:72:c5:9f:d6:66:ed:9c:7b:03:0b:85:8d:
fd:7b:7f:22:03:c2:31:b8:fb:1e:0e:75:b4:e8:07:
9e:ae:17:82:40:12:1a:9e:aa:10:e9:62:a2:4a:b5:
99:8a:1f:3c:d5:f3:be:58:d3:28:7d:0b:b5:47:ed:
78:c9:eb:d0:4d:24:d2:bd:5e:99:0d:40:4a:3a:0e:
30:a5:70:57:1b:64:ad:0e:20:bf:31:86:90:94:23:
d5:a2:ae:2d:26:9f:50:19:37:ba:76:e5:24:23:2a:
ec:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B4:13:7A:40:36:1A:76:99:94:C2:E6:4E:A1:B9:0F:74:BA:1D:43
X509v3 Authority Key Identifier:
keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e3:c0:cd:6e:6e:9a:aa:d7:be:ae:53:7d:01:f0:de:72:a9:
7c:87:ca:9c:21:d1:f7:09:94:aa:18:3a:82:d0:8f:f6:86:b6:
34:52:7e:a4:84:36:c1:37:ca:94:df:9e:5e:da:8b:0b:97:c5:
42:90:ad:11:93:99:7d:1f:2d:69:bf:7d:98:d4:58:42:e9:69:
d6:a6:65:7e:d7:18:2c:c8:37:ba:0a:ef:cd:6c:4b:7e:8a:81:
8d:05:36:67:63:3b:d6:8c:2f:ba:9a:8c:16:f6:7a:9b:48:f9:
ec:44:43:04:b8:74:99:d6:b4:08:c8:e8:12:79:ac:28:ad:22:
d0:cf:b8:2c:aa:cd:1c:14:2c:5d:70:29:ed:22:8c:71:34:2b:
c8:17:04:b3:4d:02:9f:97:05:10:fc:49:fa:17:22:57:14:af:
df:df:d8:34:c3:c6:aa:a6:9a:7d:84:93:3f:e1:0b:c6:06:7d:
f7:37:57:06:4e:c1:76:e4:f5:56:d3:bc:18:1a:0d:29:04:01:
ba:b4:19:57:eb:8d:f4:ce:35:fa:1a:c4:89:dc:77:c0:27:14:
08:77:b3:04:77:c7:98:72:ec:2f:a8:25:50:18:41:67:0f:24:
fa:aa:3c:8c:7e:36:e9:47:84:27:8d:73:fc:84:45:85:42:8c:
9f:66:ca:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNq3DynelTRDA8Wyz7YZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2ZmNThkMTlhZjEwYmRhNGZjYjBjZjMxZTU4ZGUwOTRi
YmJiNDgwHhcNMjYwNzI0MTMwMDM5WhcNMjYwNzI1MTMwMDM5WjAzMTEwLwYDVQQD
EyhhOWI0MTM3YTQwMzYxYTc2OTk5NGMyZTY0ZWExYjkwZjc0YmExZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5k+4QCte2Jv/dhCsQk0oogbCyW/
PBZx0xOCUjyaVitJQbzPlyglG8kA+qLjrmei1z+EVtX36GnxXXFlv7TQadCCmdrS
Yn0psz6KPfVgkxZDhNJ7DYYiRMgueo9tDEdTIYHS8GhM1HPxjfD2BSfNhbXar2HL
+o9sJJBreTMm6O9727/IsRgMShsIdk3B6iOLhDM+ywaDpgZyxZ/WZu2cewMLhY39
e38iA8IxuPseDnW06AeerheCQBIanqoQ6WKiSrWZih881fO+WNMofQu1R+14yevQ
TSTSvV6ZDUBKOg4wpXBXG2StDiC/MYaQlCPVoq4tJp9QGTe6duUkIyrsrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKm0E3pANhp2mZTC5k6huQ90uh1DMB8GA1UdIwQY
MBaAFMd/9Y0ZrxC9pPywzzHljeCUu7tIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNfMWpSbXZFTDJrX0xEUE1lV040SlM3dTBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84NDY2MDctMDBjOC00MDFkLWJjZmUt
MGE2ZjhiMWM2NTRkLzEveDNfMWpSbXZFTDJrX0xEUE1lV040SlM3dTBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi84NDY2MDctMDBjOC00MDFkLWJjZmUtMGE2ZjhiMWM2NTRk
LzEveDNfMWpSbXZFTDJrX0xEUE1lV040SlM3dTBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOPAzW5u
mqrXvq5TfQHw3nKpfIfKnCHR9wmUqhg6gtCP9oa2NFJ+pIQ2wTfKlN+eXtqLC5fF
QpCtEZOZfR8tab99mNRYQulp1qZlftcYLMg3ugrvzWxLfoqBjQU2Z2M71owvupqM
FvZ6m0j57ERDBLh0mda0CMjoEnmsKK0i0M+4LKrNHBQsXXAp7SKMcTQryBcEs00C
n5cFEPxJ+hciVxSv39/YNMPGqqaafYSTP+ELxgZ99zdXBk7BduT1VtO8GBoNKQQB
urQZV+uN9M41+hrEidx3wCcUCHezBHfHmHLsL6glUBhBZw8k+qo8jH426UeEJ41z
/IRFhUKMn2bKpg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:30:29 2026 by rpki-client