Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: LjPbrjCH6GHpQtcFRg1t/7DgY8gAam6v5RGdTmPU28k=
Subject key identifier: 17:03:AA:C7:18:AD:5A:B7:5B:FF:DA:07:51:B2:67:C0:C5:04:BC:ED
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 019E1CEBB6E23573178C69C5AC9A0F9B073E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 16:01:10 +0000
Manifest this update: Tue 12 May 2026 16:01:10 +0000
Manifest next update: Wed 13 May 2026 16:01:10 +0000
Files and hashes: 1: fXCfZUIcS9FszTCvtMFRqyOwHUA.roa (hash: 6cg3gD/b2Eq0ozSudTsMLJ3h/kzYzkasW+awbVRHCw8=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: OAj1V1uLfLcCsPjewds2oRNOijUBqnBSdUAuiyxyRH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:b6:e2:35:73:17:8c:69:c5:ac:9a:0f:9b:07:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: May 12 16:01:10 2026 GMT
Not After : May 13 16:01:10 2026 GMT
Subject: CN=1703aac718ad5ab75bffda0751b267c0c504bced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:1a:55:12:65:49:84:ae:0d:20:12:c4:4e:
88:b0:16:8f:c2:f4:82:eb:65:a5:d4:45:e1:9f:f9:
39:17:45:8d:da:d5:2d:03:fe:59:e8:f8:1e:83:7f:
ca:84:0c:3f:f6:80:1c:fa:d9:68:50:47:e8:aa:d4:
7b:cf:6a:32:bd:6e:a2:c6:80:4d:2d:e4:ea:f2:4d:
61:2d:0d:36:6c:b8:3e:37:65:8d:41:10:5d:a9:28:
b7:a7:9b:16:c3:6e:97:28:b6:01:df:4b:ec:7d:0d:
53:ec:d0:c8:dc:be:fc:0e:e4:2f:0e:00:49:63:38:
bb:b2:d5:65:0b:d4:3d:d2:65:8d:cf:ba:c5:0f:8e:
05:20:ad:72:71:a0:a6:37:fa:a0:32:92:d0:18:65:
0a:64:d3:cf:f8:b0:e2:6e:a1:08:63:63:86:dd:03:
f3:1a:fa:3c:c6:d2:24:30:9b:d8:c4:42:43:fb:11:
0e:c9:2e:4f:12:db:a7:4c:c3:ba:a0:25:7f:8b:1f:
93:ee:3d:6b:6b:21:78:aa:15:46:25:46:57:49:b9:
c8:f4:dd:a8:c9:63:57:87:2f:c9:ac:ab:56:13:53:
7c:c0:47:e6:ae:39:e3:1c:ba:7f:26:25:3c:ac:19:
ce:39:55:d9:15:59:44:de:75:d7:7b:ab:f9:1a:cd:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:03:AA:C7:18:AD:5A:B7:5B:FF:DA:07:51:B2:67:C0:C5:04:BC:ED
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9d:d4:96:a2:40:20:46:58:e7:dd:93:e4:d0:84:78:2d:0d:
f9:97:a0:46:40:97:c3:2e:90:2a:c7:25:0d:33:e0:a6:e8:b0:
f8:dc:27:28:b8:f4:26:6a:1e:11:78:bf:0a:45:ef:df:3b:24:
52:5e:3b:eb:a3:15:69:98:e5:59:c5:55:1d:77:a5:51:a5:82:
13:ee:fc:d3:ff:b7:fa:e5:f7:ed:dd:b3:df:f4:29:42:82:d7:
e9:e7:d6:2a:23:d0:e9:46:02:f4:f8:13:fa:e1:13:9f:74:d9:
4b:70:3d:40:ea:35:8b:66:7e:c3:01:c6:be:8c:71:78:fd:8f:
41:cc:70:6a:93:db:25:42:e8:69:31:c2:3a:01:d3:35:e3:14:
ed:70:0e:64:cb:88:dd:59:70:ba:57:76:ba:4a:a3:c0:25:4d:
fd:40:53:87:1d:36:6c:02:61:0c:04:c0:18:ec:dc:70:34:43:
ef:4d:cb:14:3b:20:34:b1:86:14:0c:5e:08:56:92:38:a4:06:
3a:3f:b4:6c:d3:5f:a8:03:e3:1c:b9:93:f9:d1:45:a7:3a:27:
8d:a1:d8:a6:4e:63:03:22:97:ea:4e:c4:84:c0:75:a2:5d:32:
86:d8:14:86:c0:a1:0f:c2:38:78:12:96:21:8e:9c:59:0d:03:
12:f1:ff:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:42:21 2026 by rpki-client