Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: 53KC842XewSEFNnP6R4LEjFGevdvrMs94HPhhtZB5RI=
Subject key identifier: F5:E4:E6:AC:9A:AD:D2:7F:0D:C2:CA:06:71:3F:69:9C:83:03:4E:B5
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 01A0F90F4379228AE690025AC4832B6CAAC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 0AB0
Signing time: Thu 01 Oct 2026 20:02:02 +0000
Manifest this update: Thu 01 Oct 2026 20:02:02 +0000
Manifest next update: Fri 02 Oct 2026 20:02:02 +0000
Files and hashes: 1: V1X5AoJuWVktixeEEeg847CrLW4.roa (hash: sDvrIAa5SeWcR7s8zM+NUTwaLMsawn+2eiUy7AxPXYo=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: rtpP7YYvAsmn0uhs2S2ikG5yj0w7MaZRuJdR8F0vjXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:0f:43:79:22:8a:e6:90:02:5a:c4:83:2b:6c:aa:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: Oct 1 20:02:02 2026 GMT
Not After : Oct 2 20:02:02 2026 GMT
Subject: CN=f5e4e6ac9aadd27f0dc2ca06713f699c83034eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:76:b0:57:e0:2b:e7:1c:b5:ce:34:04:38:27:
d0:28:8d:f4:11:42:7b:fe:31:cd:72:c1:58:9c:d6:
1f:fa:bf:41:d3:58:1f:42:58:17:89:95:21:23:92:
5a:7f:a3:2f:8a:39:23:5a:dc:2d:89:6b:d0:ca:98:
47:06:e8:e1:af:9d:fe:35:7f:51:7f:bb:e5:46:18:
6e:93:0e:17:e6:09:b7:16:1d:18:52:19:71:1e:5a:
83:0e:54:ae:90:7c:09:5f:f9:0f:ea:58:38:b7:b1:
f5:a5:06:05:9c:be:07:01:c5:4e:6f:ca:75:b2:31:
e1:f8:77:59:39:2c:2e:17:59:bf:9d:08:fb:f6:4a:
bb:dd:48:7e:39:e5:b5:81:3a:1f:aa:9e:85:87:8e:
7a:88:cb:de:c5:3a:70:43:41:8c:bb:48:93:e8:0e:
9e:d6:cd:57:b2:16:f1:d3:d6:e1:12:6b:3c:28:fc:
49:bd:13:a2:50:d2:d6:48:58:be:01:c3:19:c4:09:
4b:c4:03:c9:89:73:95:8f:b2:7c:35:da:b4:38:96:
0f:fa:dd:d9:aa:e4:97:c7:a6:fc:01:fc:f7:e1:50:
a3:74:33:a1:68:fb:cd:37:d8:c7:32:06:c6:a2:13:
7d:46:53:18:f7:81:2b:a7:a0:dd:49:41:f0:e2:0d:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E4:E6:AC:9A:AD:D2:7F:0D:C2:CA:06:71:3F:69:9C:83:03:4E:B5
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7f:7a:4b:31:c3:6b:a8:6d:fd:7b:f2:8d:3d:1b:b6:86:11:
eb:73:aa:fb:d9:2f:6d:b2:17:a7:64:ac:09:82:4c:6f:bd:0b:
56:6a:ad:cf:7d:cd:7e:7c:d5:33:0a:bc:2c:15:7f:3e:a3:ad:
b1:94:ac:50:fa:e8:42:e6:f5:5d:97:0f:1b:a8:38:cc:09:13:
4d:9f:6c:c7:e2:4c:a0:d2:af:f2:a3:91:36:3a:ec:6b:b9:c9:
f0:e2:3a:6b:16:0a:1a:78:64:bf:3d:06:5b:b2:56:d8:5f:3e:
df:f6:44:5e:f1:c4:80:25:27:07:96:bf:8e:ba:28:9f:04:a0:
e8:3d:00:a0:f2:84:e8:59:b2:e7:40:71:b0:a5:1e:b0:8b:58:
45:30:92:fd:80:dd:63:79:f8:d8:32:1c:14:cf:8a:b9:75:b4:
ed:54:c0:0c:3f:6d:75:92:9d:8b:9a:0b:d9:7c:e0:df:8a:9a:
ce:30:d0:d1:a5:94:5a:8e:92:95:b4:8d:91:d0:be:46:9e:d9:
97:a9:c8:a4:2e:a7:5c:c0:61:32:59:6b:8c:04:45:4f:e2:9a:
26:97:80:f8:3f:08:12:ae:4a:22:f9:b5:22:b3:40:48:a3:f7:
49:f1:5c:d6:8b:cd:e3:94:8b:bd:a8:6a:6b:30:76:b2:a1:f2:
30:59:77:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 03:01:46 2026 by rpki-client