Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: /08RIpX13J16BFVpZcAAPJ38MM0SbSi+rQKe6gSwEkY=
Subject key identifier: C4:9C:0A:12:E1:07:91:2F:13:85:F9:00:8C:4B:9C:58:3A:9D:E5:04
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 019D25BAA3D62EB5D363520387EAC6018C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 16:01:21 +0000
Manifest this update: Wed 25 Mar 2026 16:01:21 +0000
Manifest next update: Thu 26 Mar 2026 16:01:21 +0000
Files and hashes: 1: fXCfZUIcS9FszTCvtMFRqyOwHUA.roa (hash: 6cg3gD/b2Eq0ozSudTsMLJ3h/kzYzkasW+awbVRHCw8=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: 23cD5T8Mi0JqpduElhZhmCz6OT2Cjrj/tu4x2TtC0gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:a3:d6:2e:b5:d3:63:52:03:87:ea:c6:01:8c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Mar 25 16:01:21 2026 GMT
Not After : Mar 26 16:01:21 2026 GMT
Subject: CN=c49c0a12e107912f1385f9008c4b9c583a9de504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:c9:0e:53:4c:c4:9b:28:23:44:41:cb:50:
fc:22:45:c9:3a:ba:38:ad:0f:7f:c3:8b:a7:e2:60:
58:bd:59:ed:97:5b:6d:6f:2f:21:d8:87:c2:3b:47:
52:32:93:79:7f:4e:ad:fd:22:3b:e8:01:e7:31:24:
29:e8:b3:90:a3:89:8a:6d:d7:ff:7e:28:ee:c1:07:
06:24:2b:32:2f:e6:93:4c:78:33:2d:44:51:c0:30:
33:2e:fc:0a:8a:72:4d:fc:9b:be:50:95:04:19:a8:
53:10:f4:9f:2e:d4:77:13:07:07:cd:12:be:b0:0a:
72:9e:0c:37:09:aa:f6:20:08:40:72:e5:e6:3a:dd:
6d:c2:aa:fa:87:a3:60:11:83:cf:76:d3:f3:00:be:
5c:dc:e8:e4:8c:81:49:82:61:40:33:bb:49:74:e3:
25:f8:59:bf:27:4a:60:0a:06:0b:fb:d6:1b:09:0a:
94:07:12:b8:89:4b:65:b1:e7:c3:c8:09:86:bf:90:
c9:a0:38:c0:9b:37:02:94:02:ae:b0:fd:7a:01:f2:
50:d1:f5:de:2b:17:86:1b:78:64:42:f0:dc:d8:79:
7e:9c:28:31:fe:92:36:e9:5e:f8:84:ca:6f:99:60:
63:6b:3c:97:cd:42:47:6d:9a:87:b9:93:55:de:26:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9C:0A:12:E1:07:91:2F:13:85:F9:00:8C:4B:9C:58:3A:9D:E5:04
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ae:d1:07:6b:6d:98:51:bb:f3:e3:62:c5:ad:03:6e:00:a5:
b6:73:b6:6d:9e:3a:ff:34:35:81:ad:9e:8a:f7:24:cc:e5:df:
93:23:b5:9f:90:11:61:a8:9a:bc:de:09:3d:87:16:05:ff:6d:
a4:40:35:35:2c:15:b4:03:e2:80:87:1a:c3:e3:b5:47:01:8a:
52:59:22:fc:08:a5:5d:41:7c:f0:f9:4b:3d:a5:78:bf:e0:d8:
90:9c:11:85:e7:a3:19:1b:49:47:d3:8d:7c:d8:94:fe:71:d3:
16:b6:6f:89:a7:31:27:75:50:a6:8f:de:a0:10:3e:54:8a:55:
6a:37:48:9d:99:d0:e6:2b:59:9a:83:f1:e9:12:cb:86:33:c0:
f9:85:b4:63:bc:77:e8:a2:56:e5:d4:80:26:24:d6:f1:08:1f:
bd:b4:96:03:2e:86:10:08:32:8c:6b:e1:dc:c9:57:6d:bc:62:
14:35:5b:85:5f:71:2b:c1:0f:31:5d:4b:a7:3a:b3:e9:1c:12:
fb:7a:54:60:24:9d:2d:4a:d5:b3:da:c4:75:3f:73:0a:c1:9f:
5f:75:04:58:f7:de:d1:0c:c8:cd:74:50:af:04:ed:9d:c1:8f:
2f:99:70:b1:54:75:81:16:a6:89:0b:32:ef:2d:c3:18:ab:e2:
f0:54:0a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:44 2026 by rpki-client