Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: ReWopAf5iSFmZzBoPa75CCRAldaiEGy7iVgMHQ7OTLQ=
Subject key identifier: 5A:E2:93:45:30:42:77:24:6F:39:86:F0:94:88:27:90:27:60:2E:2A
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 01A0D048CABC75FD306115DCEA395FEBD1F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 22:00:26 +0000
Manifest this update: Wed 23 Sep 2026 22:00:26 +0000
Manifest next update: Thu 24 Sep 2026 22:00:26 +0000
Files and hashes: 1: fXCfZUIcS9FszTCvtMFRqyOwHUA.roa (hash: 6cg3gD/b2Eq0ozSudTsMLJ3h/kzYzkasW+awbVRHCw8=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: SmixCvtM+j06+IIErNLk9eoL6Orr/VOkXtUWdVQM5Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:ca:bc:75:fd:30:61:15:dc:ea:39:5f:eb:d1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Sep 23 22:00:26 2026 GMT
Not After : Sep 24 22:00:26 2026 GMT
Subject: CN=5ae29345304277246f3986f09488279027602e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d8:c3:f4:b4:f8:73:54:9d:e9:f2:65:60:ea:
00:9b:6b:e5:d8:92:4f:42:34:a3:fc:b4:4d:97:75:
34:2d:cc:27:a8:d1:c9:41:d1:8f:32:d6:30:28:fe:
b1:d1:86:83:61:aa:57:7f:c0:96:b8:48:0a:d3:c6:
cf:98:39:78:2d:26:9d:28:09:44:5c:5e:36:57:96:
86:6d:14:d7:1d:10:52:9f:c0:a8:95:ec:ce:14:cd:
01:6e:a5:b0:f6:3b:f9:23:2c:c2:13:1f:c4:04:43:
20:35:6f:01:40:00:2a:8e:20:f9:56:91:c1:e2:df:
c8:a0:7e:f1:9d:5c:7c:b0:64:40:92:83:14:c6:43:
d2:38:34:51:b0:b0:8a:57:ca:8b:d7:0c:d6:a1:16:
4b:64:7a:82:f6:62:57:f2:31:f6:1d:e4:b3:c2:aa:
b1:59:ef:ac:61:70:c3:54:56:e4:41:4f:9c:bb:0c:
59:0f:9d:a2:b6:29:ae:b9:e7:45:01:b9:5f:7e:d7:
d5:a6:eb:46:71:4d:f9:a1:10:39:e1:be:36:05:dc:
50:14:fa:42:a3:85:8a:bd:f2:41:c1:7c:b2:8d:cf:
62:49:e5:bc:7c:f5:55:e8:c5:74:8f:78:ff:43:4d:
ec:d3:53:af:e0:83:7c:91:da:93:e2:6c:08:ad:7e:
62:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E2:93:45:30:42:77:24:6F:39:86:F0:94:88:27:90:27:60:2E:2A
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ac:67:33:6d:f5:60:f2:03:a3:db:21:29:47:41:f4:10:2e:
04:40:91:93:c9:0b:27:95:05:ce:54:33:f9:bf:f3:b3:59:85:
55:3c:58:af:62:1f:48:29:cc:ab:97:40:45:fa:c3:cd:bc:53:
57:5b:75:a0:a4:a9:69:83:83:bd:4c:f5:d0:f5:2c:4b:1f:d4:
97:8f:67:55:50:a7:70:e7:0e:c4:11:2d:52:a7:97:5d:58:dd:
b7:a9:91:2a:d0:14:cd:7f:11:d6:d6:6c:5b:d0:18:65:4f:a6:
11:ee:b8:dc:d1:aa:5b:16:ec:6d:88:6f:80:fe:60:fa:71:f7:
a8:8c:27:a5:71:2a:b9:05:eb:b1:9a:ce:fe:49:a7:07:7d:7f:
6f:00:87:0a:75:d5:fe:b2:9b:96:57:8f:45:79:f2:50:55:6e:
0f:c5:e2:c1:39:4f:e8:d5:a9:52:9d:35:32:d6:dd:13:66:5e:
79:e5:95:98:df:59:91:1b:7d:d4:d2:51:7e:a4:7a:81:e6:bb:
20:c0:50:70:10:f6:f8:1e:15:c2:e6:ac:7d:f7:02:b3:a3:da:
23:6a:15:be:00:36:28:bc:0b:38:ff:34:d8:78:c2:53:d7:db:
b0:3a:16:95:1a:2f:f2:93:ca:c9:98:a0:ef:89:ca:ba:57:50:
1c:68:45:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQSMq8df0wYRXc6jlf69HyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2E3NjM5MjU1NjExOGEwY2VlYjU0MTMwNjY5YzhlNjk2
ZjE1NWIwHhcNMjYwOTIzMjIwMDI2WhcNMjYwOTI0MjIwMDI2WjAzMTEwLwYDVQQD
Eyg1YWUyOTM0NTMwNDI3NzI0NmYzOTg2ZjA5NDg4Mjc5MDI3NjAyZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NjD9LT4c1Sd6fJlYOoAm2vl2JJP
QjSj/LRNl3U0LcwnqNHJQdGPMtYwKP6x0YaDYapXf8CWuEgK08bPmDl4LSadKAlE
XF42V5aGbRTXHRBSn8ColezOFM0BbqWw9jv5IyzCEx/EBEMgNW8BQAAqjiD5VpHB
4t/IoH7xnVx8sGRAkoMUxkPSODRRsLCKV8qL1wzWoRZLZHqC9mJX8jH2HeSzwqqx
We+sYXDDVFbkQU+cuwxZD52itimuuedFAblfftfVputGcU35oRA54b42BdxQFPpC
o4WKvfJBwXyyjc9iSeW8fPVV6MV0j3j/Q03s01Ov4IN8kdqT4mwIrX5ibwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrik0UwQnckbzmG8JSIJ5AnYC4qMB8GA1UdIwQY
MBaAFMd6djklVhGKDO61QTBmnI5pbxVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YjFkZWItYWVhNy00OGQzLWIxZmQt
ZmZiM2E5NjUzOGFkLzEveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84YjFkZWItYWVhNy00OGQzLWIxZmQtZmZiM2E5NjUzOGFk
LzEveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6xnM231
YPIDo9shKUdB9BAuBECRk8kLJ5UFzlQz+b/zs1mFVTxYr2IfSCnMq5dARfrDzbxT
V1t1oKSpaYODvUz10PUsSx/Ul49nVVCncOcOxBEtUqeXXVjdt6mRKtAUzX8R1tZs
W9AYZU+mEe643NGqWxbsbYhvgP5g+nH3qIwnpXEquQXrsZrO/kmnB31/bwCHCnXV
/rKbllePRXnyUFVuD8XiwTlP6NWpUp01MtbdE2ZeeeWVmN9ZkRt91NJRfqR6gea7
IMBQcBD2+B4VwuasffcCs6PaI2oVvgA2KLwLOP802HjCU9fbsDoWlRov8pPKyZig
74nKuldQHGhFsw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:24:48 2026 by rpki-client