Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: os6l7bz6SybFzMxsosfjVz9Ai/NnAEk97mFV3Uj813M=
Subject key identifier: 94:FE:72:34:4F:20:08:2A:5C:77:95:F4:70:14:9C:B4:E3:28:37:0C
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 019D29CE914D106689D6717C69B63CDE58F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 08B7
Signing time: Thu 26 Mar 2026 11:01:36 +0000
Manifest this update: Thu 26 Mar 2026 11:01:36 +0000
Manifest next update: Fri 27 Mar 2026 11:01:36 +0000
Files and hashes: 1: V1X5AoJuWVktixeEEeg847CrLW4.roa (hash: sDvrIAa5SeWcR7s8zM+NUTwaLMsawn+2eiUy7AxPXYo=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: T+pus5lGREvMwNA95vQHmao//72kKF40he3T1Ojuix8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:91:4d:10:66:89:d6:71:7c:69:b6:3c:de:58:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: Mar 26 11:01:36 2026 GMT
Not After : Mar 27 11:01:36 2026 GMT
Subject: CN=94fe72344f20082a5c7795f470149cb4e328370c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:11:43:37:ab:fd:4e:6e:6c:b1:06:f2:8e:
9d:85:1b:70:a6:36:f7:58:77:f2:9b:fd:25:02:16:
a0:a1:67:1a:71:2b:e4:bf:d8:b3:f1:6e:3f:ec:94:
70:d7:82:61:59:1f:de:bd:b4:71:df:32:e1:c5:9d:
f8:19:f4:1b:d0:58:f8:bc:b7:89:19:91:30:db:8d:
26:3b:5a:bd:97:84:97:f5:08:ae:bd:5b:6d:0d:f0:
1a:65:e7:9a:78:46:1e:06:81:78:77:80:ab:69:c1:
78:6b:99:0c:77:51:62:4a:6e:16:06:b9:89:02:04:
10:9a:b6:76:d4:d8:4a:cd:eb:25:ab:7b:e8:b1:d4:
e1:3a:54:cf:f9:a4:39:2e:ab:99:bd:59:ee:b3:82:
16:46:3e:a3:15:52:ba:6c:87:5d:f6:7b:9c:07:a1:
37:f8:4b:7e:ab:5a:a4:f4:46:6b:7b:72:30:c4:1c:
9f:86:b1:d8:7c:29:da:29:85:2d:a4:f1:6f:77:fd:
6f:d6:58:23:6f:51:5e:04:bd:8e:cd:ab:cd:ff:5a:
68:2a:bf:1a:78:6d:2a:73:c0:0a:06:40:4f:b4:f1:
4a:c8:4b:d0:de:1c:20:45:23:1e:24:15:11:9e:8e:
39:16:b4:15:37:4b:83:e1:75:4e:3d:4b:22:87:28:
83:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FE:72:34:4F:20:08:2A:5C:77:95:F4:70:14:9C:B4:E3:28:37:0C
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5c:db:10:a5:69:96:9e:00:14:73:84:64:e3:cb:23:00:2d:
15:4a:24:26:f0:0d:a9:1f:e4:50:a6:e2:69:d8:fb:5b:46:16:
d4:8f:94:82:8c:0e:69:ba:8c:21:fa:b8:09:7c:ad:67:ea:39:
e4:c0:8b:51:5f:f8:67:a8:26:7c:1b:57:4c:d3:7e:45:72:ca:
4d:78:90:d1:b1:91:60:3c:2b:d0:5e:f9:82:88:fc:b5:ad:ab:
df:34:5d:6d:38:5f:a9:33:21:ee:7e:4f:de:3f:af:a7:73:25:
76:b6:c0:47:0c:5e:5b:ca:fe:d5:79:d2:71:c7:4c:ed:d5:94:
dc:d5:3e:db:c9:d9:61:f6:86:75:f6:56:36:29:ec:b9:db:da:
67:6e:f7:3e:d1:89:d1:d7:9b:fb:2b:ff:11:c5:3a:91:a6:e3:
29:64:c2:fc:84:e3:28:19:15:1f:08:77:8b:34:ee:d5:f1:55:
04:c6:4a:7c:e5:cb:cc:64:70:39:d7:c5:0a:65:df:da:43:a2:
69:f0:25:e6:b2:7b:d1:7a:6d:98:ff:52:e8:21:0b:c9:a7:47:
58:26:6b:7b:55:ba:cf:29:e5:0a:aa:1e:52:09:b0:62:9e:2b:
3b:27:56:d0:d4:dd:7e:25:bf:e8:8b:90:61:16:d0:65:47:cf:
da:e4:04:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:05:27 2026 by rpki-client