Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: Ez6yCIKRPN25htt2GbMvJZQ7RjXpEm8fp2igAXGoJvs=
Subject key identifier: 26:05:18:86:E8:8E:6F:B5:7F:BA:29:B2:21:71:A7:A0:A1:FD:78:F9
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 019F93C89F00432B40EBC12C506598E99D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 09F7
Signing time: Fri 24 Jul 2026 11:00:26 +0000
Manifest this update: Fri 24 Jul 2026 11:00:26 +0000
Manifest next update: Sat 25 Jul 2026 11:00:26 +0000
Files and hashes: 1: V1X5AoJuWVktixeEEeg847CrLW4.roa (hash: sDvrIAa5SeWcR7s8zM+NUTwaLMsawn+2eiUy7AxPXYo=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: f0NhBVaxFxEHU/aiaers9p4IqM/fcaLtV23UmlzQVXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:9f:00:43:2b:40:eb:c1:2c:50:65:98:e9:9d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: Jul 24 11:00:26 2026 GMT
Not After : Jul 25 11:00:26 2026 GMT
Subject: CN=26051886e88e6fb57fba29b22171a7a0a1fd78f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:08:8d:7e:2f:6d:a8:64:44:e0:d6:17:9b:
62:14:7d:b6:4b:1f:3b:52:a2:50:77:89:51:5f:13:
db:53:de:e4:97:a8:09:cc:2a:45:fc:2d:b6:67:e9:
a1:52:ed:a6:ea:2e:c9:f0:b6:f2:e3:66:3d:45:9d:
fb:98:71:fd:45:18:7b:62:89:6c:5f:a4:7f:1c:8f:
2a:dc:c2:ae:e0:db:88:a8:a3:a9:54:11:8b:c5:3c:
fb:a1:77:b0:e6:8a:30:6f:6c:62:ea:e7:97:0a:f1:
72:cc:d3:3b:92:6b:d0:b3:77:98:e9:8a:9f:aa:69:
74:85:7c:af:44:37:f7:bb:d6:51:90:91:78:79:04:
d8:e3:cc:4d:a3:22:24:ab:61:87:17:b9:ad:84:2b:
ee:26:cd:c1:73:f5:34:be:d7:33:7a:a7:33:71:69:
3a:56:c1:af:8a:95:ca:f7:52:0d:1a:b8:9b:a4:7c:
d3:42:d6:23:64:fb:77:95:42:bf:90:db:52:99:da:
22:0b:c0:c3:65:9e:96:12:c6:57:bc:f9:54:5d:1e:
2f:79:ec:73:43:4a:fc:16:8e:7b:45:54:24:93:86:
f5:fd:23:37:8b:21:c2:ad:e0:aa:6c:93:63:de:eb:
c8:21:cd:50:8b:93:a5:45:8c:a5:10:26:e9:88:28:
dd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:05:18:86:E8:8E:6F:B5:7F:BA:29:B2:21:71:A7:A0:A1:FD:78:F9
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ac:23:7f:61:6f:c6:21:11:8d:8b:b2:ba:75:49:55:61:6c:
4b:a5:9c:db:6d:9f:2f:ec:8a:1a:ff:5a:1e:3b:f7:64:3f:59:
e3:2e:64:7b:77:94:ae:28:cb:ae:50:f7:e8:f3:f1:f1:f1:4a:
c7:3b:80:91:1f:19:56:00:77:50:9d:44:6b:b5:8a:f6:30:26:
a7:0d:14:22:d1:3a:b0:d1:f8:6d:76:ac:cd:e6:7e:22:6b:06:
3f:4d:34:c4:4d:93:39:6c:94:2a:bf:ad:9c:31:3d:bd:d9:2e:
1f:b1:c3:96:c4:d5:54:af:a4:cb:3f:d7:d7:b9:4d:a2:23:a0:
d4:41:15:e8:e9:72:f3:78:6b:c5:25:df:a2:2b:72:53:e1:cc:
1d:04:47:54:62:4f:a9:6e:49:50:c0:31:7c:53:b2:23:fb:d3:
d0:1e:4b:21:21:47:e0:c2:d3:b6:46:b6:6b:51:67:ad:39:5c:
6d:fb:9f:7c:79:19:76:ad:e8:5a:0d:75:f1:cc:5c:92:7a:c7:
4e:09:2e:80:29:6a:c6:9f:45:af:c7:56:47:a4:3a:d5:b4:b1:
d7:25:dc:d1:98:f1:e9:9e:8b:2e:24:b1:8d:b9:2b:ff:42:9b:
c6:27:1e:24:0f:0c:bb:7c:83:89:1e:bb:09:7b:4a:2f:7c:d8:
39:ea:9e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:15 2026 by rpki-client