Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
File: x3ER7FVJEVyzR2VNj-WycJ0n998.mft (raw, json)
Hash identifier: Nyim7F6mg9Pg+4LfcJunObtj+mep7Czp7j+U7SX6B1I=
Subject key identifier: C8:BD:31:7A:41:41:B0:3B:0F:63:D5:CF:16:97:68:FA:D5:EB:F5:1D
Authority key identifier: C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
Certificate issuer: /CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Certificate serial: 019D27DFBDC9780E0F18B2202DC24BF393E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
Manifest number: 1282
Signing time: Thu 26 Mar 2026 02:01:07 +0000
Manifest this update: Thu 26 Mar 2026 02:01:07 +0000
Manifest next update: Fri 27 Mar 2026 02:01:07 +0000
Files and hashes: 1: VZDwVhwIg3g9iM3qt-x-zwWp4Ao.roa (hash: 7a9BH9RzouuHFjB1cCK0b23ksnqE0jY9b0U+LyPMrtw=)
2: x3ER7FVJEVyzR2VNj-WycJ0n998.crl (hash: UnLQYcIffJnbMSC5YGFgb0OHO5rvJi84U90u23AHkFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:bd:c9:78:0e:0f:18:b2:20:2d:c2:4b:f3:93:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Validity
Not Before: Mar 26 02:01:07 2026 GMT
Not After : Mar 27 02:01:07 2026 GMT
Subject: CN=c8bd317a4141b03b0f63d5cf169768fad5ebf51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:22:9a:12:8b:12:16:7a:9f:d1:99:29:12:
04:fb:82:17:b3:96:7f:15:58:b1:08:1d:cc:ae:c2:
eb:bd:4b:58:27:dd:76:b5:9b:65:dd:2f:28:49:5e:
1a:5a:c0:d0:55:82:f9:d4:fa:88:21:1f:19:e8:91:
48:b9:d8:31:5f:17:85:cf:54:45:7f:48:5f:8f:78:
7e:9e:50:d9:91:03:bd:72:1f:ec:ee:ea:fe:e9:bb:
18:8d:d6:81:24:54:77:01:0e:28:ec:7f:ff:4b:d3:
f6:2d:75:b5:15:d1:88:b0:92:a4:db:55:34:d3:4e:
2f:e6:e3:a0:67:f3:b0:7b:a9:cd:69:09:d3:7a:66:
18:d2:c8:75:37:a8:de:3f:f9:51:af:be:ed:8c:ee:
15:c9:29:7f:c2:0c:51:b3:98:67:bc:5f:cb:3f:af:
40:4d:72:4d:e8:ff:5f:a3:cf:77:bb:b4:e5:b7:7f:
ce:42:c9:c3:37:71:96:69:97:4a:69:19:ea:72:e2:
13:62:52:54:ae:8f:0e:bc:6a:8c:21:db:3c:2b:bd:
bf:c7:c5:01:f1:0f:38:47:3c:e1:54:6e:76:b3:84:
eb:d7:29:ae:76:98:cb:ec:57:81:01:b1:01:44:3d:
63:4a:3f:c6:2e:53:eb:d1:39:05:0b:3d:9f:6f:c2:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BD:31:7A:41:41:B0:3B:0F:63:D5:CF:16:97:68:FA:D5:EB:F5:1D
X509v3 Authority Key Identifier:
keyid:C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8e:89:02:80:c6:0e:43:86:2a:80:af:74:87:18:b1:5a:38:
4b:20:62:09:25:af:a6:08:14:21:fd:e2:42:54:86:93:d0:eb:
57:0c:8b:a0:fb:23:65:3d:05:e2:26:b4:92:32:d6:2f:fc:e4:
52:f3:b9:ba:5e:1d:30:57:29:db:f5:26:2b:a4:0f:cc:d1:e5:
cd:83:7f:97:3a:52:51:ab:77:fe:c0:b4:01:05:be:fb:8d:11:
e9:23:4e:75:8a:b5:42:bd:e7:95:a9:35:39:5e:6c:d5:37:30:
56:7c:1c:dc:e9:e5:fe:6a:c8:73:ad:ba:40:d2:e5:7c:28:4a:
c3:68:93:27:f5:fd:7d:17:22:4d:f5:eb:7d:12:eb:cd:88:c7:
f4:68:af:61:36:24:64:55:05:f3:7d:8d:50:d0:8c:e9:dd:b8:
63:7d:80:bc:3d:a1:5f:eb:8b:2d:11:37:6f:25:fb:d4:39:e4:
16:e9:ce:9d:d8:ab:a9:04:52:4c:b1:9c:c4:4c:af:af:f4:9c:
ee:e8:f2:3f:8f:c0:16:e4:07:2c:79:7b:f3:4e:8b:f0:f9:ce:
a7:2f:e6:fc:36:dd:f1:d1:b7:71:a1:92:fc:87:29:a7:08:cc:
ff:04:ae:cd:12:e8:2f:a8:de:ae:b8:bf:54:09:27:bd:05:b7:
e5:d3:c7:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n373JeA4PGLIgLcJL85PlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzExMWVjNTU0OTExNWNiMzQ3NjU0ZDhmZTViMjcwOWQy
N2Y3ZGYwHhcNMjYwMzI2MDIwMTA3WhcNMjYwMzI3MDIwMTA3WjAzMTEwLwYDVQQD
EyhjOGJkMzE3YTQxNDFiMDNiMGY2M2Q1Y2YxNjk3NjhmYWQ1ZWJmNTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCkimhKLEhZ6n9GZKRIE+4IXs5Z/
FVixCB3MrsLrvUtYJ912tZtl3S8oSV4aWsDQVYL51PqIIR8Z6JFIudgxXxeFz1RF
f0hfj3h+nlDZkQO9ch/s7ur+6bsYjdaBJFR3AQ4o7H//S9P2LXW1FdGIsJKk21U0
004v5uOgZ/Owe6nNaQnTemYY0sh1N6jeP/lRr77tjO4VySl/wgxRs5hnvF/LP69A
TXJN6P9fo893u7Tlt3/OQsnDN3GWaZdKaRnqcuITYlJUro8OvGqMIds8K72/x8UB
8Q84RzzhVG52s4Tr1ymudpjL7FeBAbEBRD1jSj/GLlPr0TkFCz2fb8JejQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMi9MXpBQbA7D2PVzxaXaPrV6/UdMB8GA1UdIwQY
MBaAFMdxEexVSRFcs0dlTY/lsnCdJ/ffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNFUjdGVkpFVnl6UjJWTmotV3ljSjBuOTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lMmQxYWQtY2ZlMC00NDk0LWFhNzUt
ZTBjMmI5NDc5MmNhLzEveDNFUjdGVkpFVnl6UjJWTmotV3ljSjBuOTk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9lMmQxYWQtY2ZlMC00NDk0LWFhNzUtZTBjMmI5NDc5MmNh
LzEveDNFUjdGVkpFVnl6UjJWTmotV3ljSjBuOTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX46JAoDG
DkOGKoCvdIcYsVo4SyBiCSWvpggUIf3iQlSGk9DrVwyLoPsjZT0F4ia0kjLWL/zk
UvO5ul4dMFcp2/UmK6QPzNHlzYN/lzpSUat3/sC0AQW++40R6SNOdYq1Qr3nlak1
OV5s1TcwVnwc3Onl/mrIc626QNLlfChKw2iTJ/X9fRciTfXrfRLrzYjH9GivYTYk
ZFUF832NUNCM6d24Y32AvD2hX+uLLRE3byX71DnkFunOndirqQRSTLGcxEyvr/Sc
7ujyP4/AFuQHLHl7806L8PnOpy/m/Dbd8dG3caGS/IcppwjM/wSuzRLoL6jerri/
VAknvQW35dPHJA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:09 2026 by rpki-client