Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
File: x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json)
Hash identifier: Y5ncEMVb3rGAlpV8Y3gn2RO+PkTgtR2GRC7OSvjpEkw=
Subject key identifier: 54:2D:C6:AA:2C:0A:08:40:E8:AB:70:A6:F1:EB:52:D1:5A:37:6D:97
Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
Certificate issuer: /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Certificate serial: 019D27721A688F1EA492FC4BF497D863C14A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
Manifest number: 08BE
Signing time: Thu 26 Mar 2026 00:01:22 +0000
Manifest this update: Thu 26 Mar 2026 00:01:22 +0000
Manifest next update: Fri 27 Mar 2026 00:01:22 +0000
Files and hashes: 1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: Wdh0gY/ohK3wHqDYmaKamkUGxt5KznBHCLoZ9QuoKfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:1a:68:8f:1e:a4:92:fc:4b:f4:97:d8:63:c1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Validity
Not Before: Mar 26 00:01:22 2026 GMT
Not After : Mar 27 00:01:22 2026 GMT
Subject: CN=542dc6aa2c0a0840e8ab70a6f1eb52d15a376d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:c2:12:15:96:a4:46:6e:7c:e2:47:31:71:
d2:c4:f8:3e:ba:73:fe:a0:35:6a:ca:37:83:13:15:
f8:f5:f4:87:5d:33:31:de:98:33:42:ff:e7:21:5f:
cb:84:79:3d:75:9d:70:3a:4d:8e:d4:bf:38:64:b2:
c9:31:42:7b:e9:17:a3:97:d7:e4:36:a3:77:1d:ff:
de:59:9a:b7:6f:08:ea:77:9a:e9:8c:41:a1:8f:bf:
74:f8:5f:d1:54:9b:64:f0:8a:4c:2c:80:fb:72:11:
0c:c8:f1:64:4c:27:be:91:63:e4:b6:ae:8e:48:89:
43:8a:94:44:b1:b0:e6:7e:61:6a:a3:cf:f4:19:fb:
a6:fd:71:1d:cf:00:79:2a:61:87:0e:9f:b5:5f:43:
0f:88:17:a4:43:db:87:36:0c:a6:ad:dc:2c:05:45:
74:b7:57:fc:32:96:85:ea:3e:df:07:3c:e9:c8:90:
e8:f8:ee:a0:f2:91:02:34:bb:68:82:81:5b:45:63:
10:ae:8e:c5:9e:fa:15:7b:fa:b6:a3:a9:3d:1a:c4:
8c:0d:7c:6a:b2:95:5c:bb:01:6d:6f:7a:1e:07:38:
a0:80:74:e7:8a:e8:53:c2:64:93:62:cd:43:ed:5c:
20:b5:46:e3:7e:f4:61:a8:0d:2a:75:e9:f7:6d:ff:
dc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2D:C6:AA:2C:0A:08:40:E8:AB:70:A6:F1:EB:52:D1:5A:37:6D:97
X509v3 Authority Key Identifier:
keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a5:f7:1f:5a:bf:6a:97:37:f8:80:52:27:68:43:d1:6b:9d:
d7:e6:f0:d7:f1:89:17:64:e2:d8:3f:d1:2a:a0:dc:73:fc:c1:
b3:18:9e:e0:8c:43:af:06:cb:70:22:5a:ba:f8:99:7c:06:be:
f2:2c:81:8e:6a:06:53:bc:65:fa:16:04:ea:41:bf:ad:b1:6d:
03:1d:83:a7:65:80:9e:dc:58:46:1e:99:1b:e2:a1:fa:99:7d:
f2:b8:61:10:6f:d4:1b:48:fc:12:df:87:9f:69:51:76:cc:04:
e7:7e:e3:f6:b3:b8:fa:8a:b1:9a:c5:ea:85:00:59:da:73:77:
85:0b:5e:54:88:88:af:ba:ae:91:4e:fa:08:34:43:40:0a:f1:
ac:e7:6f:f9:ef:d3:b1:a1:64:60:cf:24:29:4e:aa:2a:f1:c6:
26:42:c1:5f:a9:38:4c:a7:bf:55:ff:4a:e4:d8:b2:a1:04:0c:
48:a8:48:1b:54:cf:e9:24:4d:df:6d:4e:e2:ec:4a:cd:86:9e:
78:22:db:e8:64:a1:8f:75:e8:d6:9d:f3:23:36:d1:4d:ac:36:
4b:a3:b7:d9:82:a9:95:3c:9a:5a:b2:38:53:6f:dc:1e:f6:c4:
96:21:57:a5:a1:81:fd:7f:63:47:10:c2:07:ba:96:fa:cd:e6:
55:71:5f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:33 2026 by rpki-client