Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: oiiCr5zIZxdhSgXSExVLhPEM12ZIOUg7yx1JCofve9o=
Subject key identifier: BF:FB:A7:4B:91:75:E8:57:F8:F1:DC:EA:AC:3C:9D:A8:F3:19:22:69
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 019E1F118228B68CE7E58DB02EC03B8FFDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 0936
Signing time: Wed 13 May 2026 02:01:41 +0000
Manifest this update: Wed 13 May 2026 02:01:41 +0000
Manifest next update: Thu 14 May 2026 02:01:41 +0000
Files and hashes: 1: V1X5AoJuWVktixeEEeg847CrLW4.roa (hash: sDvrIAa5SeWcR7s8zM+NUTwaLMsawn+2eiUy7AxPXYo=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: 2tO8LkzDsKUEef1VqVVBszvcVTubFPdS7VIaYwrMIxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:82:28:b6:8c:e7:e5:8d:b0:2e:c0:3b:8f:fd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: May 13 02:01:41 2026 GMT
Not After : May 14 02:01:41 2026 GMT
Subject: CN=bffba74b9175e857f8f1dceaac3c9da8f3192269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:3e:55:6e:19:b0:5f:9b:00:19:dc:0a:d8:
ae:2b:b0:30:c6:08:7d:8c:63:7c:49:b8:8b:de:b3:
e0:a2:70:1b:9d:4e:3e:f3:10:bf:45:a2:7f:3a:31:
64:44:8f:06:ec:8a:68:41:fa:61:f3:b8:1e:06:25:
57:a7:dc:24:b0:75:f7:72:13:2a:6d:22:0c:95:c4:
5d:0d:be:b8:c6:4e:49:86:52:be:98:48:f0:31:48:
b1:76:4d:95:6a:f6:81:13:b9:85:5b:3f:8f:91:fe:
5d:c9:2b:ef:bb:e1:4b:ee:0a:ab:b7:5d:e3:b7:2d:
3f:b6:25:d3:13:8a:e2:48:62:36:46:39:9f:6c:bb:
49:c3:9f:55:92:2d:8e:0b:ac:08:42:f4:87:b5:e1:
91:12:ae:39:f2:c5:e1:fb:ca:8c:d5:1a:c4:d6:be:
3e:e6:98:e0:57:45:19:24:15:eb:56:80:d1:8b:9f:
bd:76:d5:89:32:44:ab:0a:8b:70:b7:02:5e:92:a9:
d9:4f:12:c0:b0:1d:59:99:c8:bc:79:1e:df:bf:83:
f3:63:cc:b5:43:ef:9d:c4:b1:02:ad:00:22:4c:79:
34:47:ad:2e:55:49:78:fa:a4:f0:72:00:3a:20:c2:
78:cf:21:d3:ba:31:46:42:49:08:f2:69:04:46:dd:
83:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FB:A7:4B:91:75:E8:57:F8:F1:DC:EA:AC:3C:9D:A8:F3:19:22:69
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8e:d2:33:04:57:bb:e6:0f:e4:2f:a7:4e:bd:2f:b4:78:b0:
9a:9d:07:fd:d6:9c:d1:83:ca:3d:a2:4d:95:f2:78:9b:02:82:
f9:25:54:4a:36:eb:2c:e9:ec:c1:20:70:0e:18:77:2b:3b:fc:
e4:58:28:38:7b:87:c4:60:a5:e2:7a:6c:0a:70:14:7a:72:3f:
e8:f8:5c:52:04:a8:10:fb:75:75:0a:6e:31:fa:8e:6f:4e:ca:
86:e5:e6:ac:52:e4:df:42:48:c6:41:7b:db:ae:eb:3d:4d:61:
de:32:ab:92:b7:59:6b:7e:ac:06:38:bf:34:b4:9b:3d:c3:15:
0a:8e:a2:9d:33:2d:54:ea:8c:7e:c2:4e:24:40:8e:32:d0:18:
cd:68:40:d1:8c:44:bd:57:63:22:7e:f7:38:a3:a3:52:ef:a7:
bb:bc:81:1d:a6:cb:fc:1f:f3:05:7a:3a:6d:05:fa:81:42:f4:
37:d5:ea:6d:13:b6:15:30:57:19:1b:51:ea:93:f6:5b:25:75:
7a:c5:71:9a:c7:dd:81:37:f8:4d:46:1d:ff:61:55:a6:0a:1f:
86:06:1d:b5:36:4e:ef:72:1d:1d:60:3b:17:af:0b:4d:51:95:
ae:a1:61:d2:70:f2:9e:cb:b5:d4:e2:b6:41:f9:79:27:04:c6:
27:94:32:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:26:01 2026 by rpki-client