Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
File: x3Nu3rkvk36kWJPqm89O-D8V_8g.mft (raw, json)
Hash identifier: TGU85soaehj+WGJo1hlSzGBP7j9ZjZA3t0XybbHZWjo=
Subject key identifier: 49:F8:28:88:5A:2A:7A:9A:89:06:8A:33:A6:E6:0F:A6:B8:DE:0E:20
Authority key identifier: C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
Certificate issuer: /CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Certificate serial: 019CAEA2BEFE518AABDCE543084120D93538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
Manifest number: 1149
Signing time: Mon 02 Mar 2026 13:00:26 +0000
Manifest this update: Mon 02 Mar 2026 13:00:26 +0000
Manifest next update: Tue 03 Mar 2026 13:00:26 +0000
Files and hashes: 1: WgyWXzUsbTmY_1RP05v7gzecvkE.roa (hash: 21qhAR+umq3QUHZh7Y6Cu4mrPcpjOq1CbtvmUgC6mpY=)
2: x3Nu3rkvk36kWJPqm89O-D8V_8g.crl (hash: 60DBmUOiCwMNy0lts53YAiFlD03fH0vkf3N7z4b6fJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:be:fe:51:8a:ab:dc:e5:43:08:41:20:d9:35:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Validity
Not Before: Mar 2 13:00:26 2026 GMT
Not After : Mar 3 13:00:26 2026 GMT
Subject: CN=49f828885a2a7a9a89068a33a6e60fa6b8de0e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:eb:6e:1e:20:fc:22:d9:b3:b8:dd:13:31:33:
d1:fe:4a:55:f9:43:1d:0b:e2:80:9f:9e:f8:ba:99:
d3:a7:6a:04:93:59:6c:d8:71:d3:5b:81:41:0d:14:
81:fd:0c:46:63:3a:3a:02:ac:ea:39:42:3e:70:bc:
18:a1:54:01:3d:fd:71:e2:f3:68:3e:f2:9e:f2:78:
de:e3:1c:ac:1b:2f:9c:b3:66:f8:1a:83:c4:12:17:
51:ae:9e:ab:05:dc:40:4e:2a:fa:93:4a:74:b5:00:
03:59:4f:0d:a5:45:ac:24:16:2d:f0:af:06:4f:15:
77:59:08:c6:4e:bf:e7:be:21:54:22:66:b1:df:00:
88:a0:17:d7:0b:56:04:a7:86:82:bd:00:c2:95:d6:
60:2c:f0:e4:35:9e:22:64:8d:82:79:63:04:4e:86:
ab:b7:06:d1:65:73:b2:ea:67:18:c3:2c:86:65:52:
be:31:e9:ff:28:4a:f2:f7:85:40:13:cf:e5:2f:2b:
3f:27:1b:13:f9:6e:d7:94:b3:77:7e:56:cb:28:fb:
e7:e8:25:59:78:77:c8:10:03:df:cc:32:8d:d3:27:
06:10:a7:28:11:b4:90:ad:c1:5c:3a:86:42:8f:cc:
a8:9c:de:0d:14:e9:80:ac:68:1d:61:4b:8d:f1:fe:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F8:28:88:5A:2A:7A:9A:89:06:8A:33:A6:E6:0F:A6:B8:DE:0E:20
X509v3 Authority Key Identifier:
keyid:C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:38:ca:1a:30:43:04:3b:a2:92:7f:5a:bb:cb:05:b4:43:ab:
7d:da:72:79:cd:76:5e:c6:ae:59:87:f9:f8:a6:d3:55:cf:88:
c1:7b:c5:66:45:02:4d:a9:00:80:b1:69:f3:41:64:c0:e4:c5:
72:89:1d:29:4e:9c:94:0d:54:b1:7f:9c:bd:a8:b5:ba:82:12:
89:5d:96:d5:7b:13:96:bd:97:85:ff:b1:1b:cc:2b:30:62:34:
38:97:7c:04:06:cb:64:71:0c:e0:13:59:9e:90:b0:7e:db:a2:
8d:29:99:c3:8a:99:b0:0a:41:9e:c7:a6:61:d8:93:f2:cf:2d:
60:b6:0f:44:cc:3a:b8:72:4b:44:79:95:3d:29:7a:fc:ae:d2:
e3:3c:17:fc:6d:16:6b:ac:51:18:e7:22:c8:70:57:03:07:27:
80:b8:f3:82:09:35:4f:eb:e8:68:24:0b:ec:30:45:de:d8:17:
d2:a7:d5:b8:0a:ce:04:5d:48:8b:b6:33:be:e6:37:4d:07:fd:
8b:e9:14:13:e7:00:4e:25:05:9e:ba:ab:38:fa:49:92:0a:1b:
44:21:8b:d9:e6:16:e3:28:47:12:67:a6:fc:5d:40:57:93:d1:
d4:40:f6:64:49:92:24:c3:ec:c5:72:6c:c0:94:c4:85:fa:59:
eb:53:ef:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:30:45 2026 by rpki-client