Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
File: x3_gBdfljsAzypq6h-BgYCFTNhc.mft (raw, json)
Hash identifier: wk+LffT5HFTbDypuIEwOB494AAgywFX/yTUNveT/MCY=
Subject key identifier: 2D:B3:77:DE:5E:07:ED:AF:44:4D:31:81:23:82:CE:BC:44:FC:6B:87
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Certificate issuer: /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial: 019CABD9B1CC060A1717951F249AA9B19AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
Manifest number: 0CED
Signing time: Mon 02 Mar 2026 00:01:36 +0000
Manifest this update: Mon 02 Mar 2026 00:01:36 +0000
Manifest next update: Tue 03 Mar 2026 00:01:36 +0000
Files and hashes: 1: 7873A-doZHT3z3WdUC9-3ek1dsM.roa (hash: GiS1ksDLyImHjpb2W7ngtoEXY3bCfhYHNgRK23R2O8Q=)
2: SJYIkLcX_CNS1SprQ_soGckZIGQ.roa (hash: eDm4/cj9IxvpczJ1uU/Y+99aLmMJiA5yew/A11GEYVs=)
3: rf5y8gSq5wsa5gp2pUsrZdvorF4.roa (hash: LhVJmNP7LYW2COhuVTfB4/5Ch+7vx0bLlcnCO+/fQfk=)
4: x3_gBdfljsAzypq6h-BgYCFTNhc.crl (hash: jhBz5tMva66oObHCncaMNnxWDf3m95o3+B/NvvtM1m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b1:cc:06:0a:17:17:95:1f:24:9a:a9:b1:9a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
Validity
Not Before: Mar 2 00:01:36 2026 GMT
Not After : Mar 3 00:01:36 2026 GMT
Subject: CN=2db377de5e07edaf444d31812382cebc44fc6b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:94:28:af:c5:2c:3b:86:c2:62:d2:42:9d:
09:4c:d4:e8:82:3b:f1:e3:c4:de:2c:cf:e4:c1:1e:
1e:fe:f3:d0:d5:6b:c6:d2:55:bd:93:02:83:e5:70:
43:09:0d:52:da:1b:29:1b:eb:86:5d:2b:37:5c:47:
41:9b:51:95:4d:6f:49:69:8c:b6:3f:50:c9:6c:4a:
c2:e2:99:2b:35:fd:33:ee:ca:83:57:87:29:d5:41:
e6:5b:97:89:7c:48:29:40:7a:6d:b9:fb:64:d6:ee:
e9:e8:0d:ac:43:1b:ec:cb:4b:18:f2:d5:31:79:e4:
b6:f7:91:a1:9e:b9:55:05:70:c2:15:92:a2:c4:ba:
ec:10:80:6f:bf:be:31:76:ac:3b:cb:f2:f2:82:8f:
df:50:8d:3d:5d:4b:8f:b4:35:ed:ac:a6:78:b1:9d:
bd:1f:f5:95:2c:ac:9f:cb:a4:c8:62:e1:73:cc:fe:
a3:42:a7:5c:46:ed:8e:db:79:7b:86:b4:ac:b9:57:
88:ef:f2:bc:ae:38:69:d5:c8:84:94:7f:4c:3b:63:
45:e1:c3:04:9a:61:15:d2:92:b2:aa:45:0e:67:16:
fc:89:d9:c1:47:98:1c:b1:77:e1:f0:e5:39:1e:da:
34:dc:6f:9e:33:d8:0c:3b:76:c0:aa:16:69:49:e7:
f7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B3:77:DE:5E:07:ED:AF:44:4D:31:81:23:82:CE:BC:44:FC:6B:87
X509v3 Authority Key Identifier:
keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:bb:b3:ab:e6:53:7f:f1:75:d8:9c:03:ef:fa:86:4c:d2:99:
af:be:a1:cb:4b:b6:7f:8a:c5:a2:64:01:74:ef:0b:ed:c0:fe:
7d:3f:2a:fd:b2:3a:68:af:3d:b0:2d:28:ed:28:a4:4d:f1:e8:
a3:4f:98:e2:28:3d:e2:c1:da:11:26:6f:f3:72:cb:bf:eb:0f:
59:69:38:5c:2c:44:57:4e:09:99:c6:7c:68:db:59:d8:8d:c8:
96:c1:40:f2:3f:f4:f2:fa:25:82:67:d0:6f:ec:ac:ef:d7:33:
e7:26:b1:3c:a5:a6:d4:69:c0:50:f0:89:bb:70:f7:d9:53:22:
76:79:ed:a4:13:3a:ce:33:2b:8c:ac:14:15:09:4e:fa:30:00:
a7:fe:6d:dd:dd:91:7e:ad:b7:48:d8:84:d4:ef:ca:f6:60:e0:
c5:9b:52:f8:b6:1f:37:ec:ba:2c:74:b0:79:26:69:18:a6:d0:
24:11:0e:9b:05:63:55:90:11:12:32:98:1c:f0:a1:6c:cf:fc:
d0:2d:bd:f8:0d:90:b7:6a:f4:60:f9:d5:3e:23:3d:97:43:fa:
3c:9e:51:16:ef:30:ab:bb:56:a0:18:1c:81:92:3a:91:57:f3:
4a:cf:aa:ce:34:61:29:44:89:75:50:e0:59:c7:bb:7a:4a:83:
d8:bb:62:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2bHMBgoXF5UfJJqpsZrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2ZlMDA1ZDdlNThlYzAzM2NhOWFiYTg3ZTA2MDYwMjE1
MzM2MTcwHhcNMjYwMzAyMDAwMTM2WhcNMjYwMzAzMDAwMTM2WjAzMTEwLwYDVQQD
EygyZGIzNzdkZTVlMDdlZGFmNDQ0ZDMxODEyMzgyY2ViYzQ0ZmM2Yjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc6UKK/FLDuGwmLSQp0JTNTogjvx
48TeLM/kwR4e/vPQ1WvG0lW9kwKD5XBDCQ1S2hspG+uGXSs3XEdBm1GVTW9JaYy2
P1DJbErC4pkrNf0z7sqDV4cp1UHmW5eJfEgpQHptuftk1u7p6A2sQxvsy0sY8tUx
eeS295GhnrlVBXDCFZKixLrsEIBvv74xdqw7y/Lygo/fUI09XUuPtDXtrKZ4sZ29
H/WVLKyfy6TIYuFzzP6jQqdcRu2O23l7hrSsuVeI7/K8rjhp1ciElH9MO2NF4cME
mmEV0pKyqkUOZxb8idnBR5gcsXfh8OU5Hto03G+eM9gMO3bAqhZpSef3VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2zd95eB+2vRE0xgSOCzrxE/GuHMB8GA1UdIwQY
MBaAFMd/4AXX5Y7AM8qauofgYGAhUzYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lMzJkZjgtM2ExZS00MmZjLWIzNTEt
MGVkMjRlYmM0ZWQ4LzEveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lMzJkZjgtM2ExZS00MmZjLWIzNTEtMGVkMjRlYmM0ZWQ4
LzEveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7uzq+ZT
f/F12JwD7/qGTNKZr76hy0u2f4rFomQBdO8L7cD+fT8q/bI6aK89sC0o7SikTfHo
o0+Y4ig94sHaESZv83LLv+sPWWk4XCxEV04JmcZ8aNtZ2I3IlsFA8j/08volgmfQ
b+ys79cz5yaxPKWm1GnAUPCJu3D32VMidnntpBM6zjMrjKwUFQlO+jAAp/5t3d2R
fq23SNiE1O/K9mDgxZtS+LYfN+y6LHSweSZpGKbQJBEOmwVjVZAREjKYHPChbM/8
0C29+A2Qt2r0YPnVPiM9l0P6PJ5RFu8wq7tWoBgcgZI6kVfzSs+qzjRhKUSJdVDg
Wce7ekqD2LtizA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:33 2026 by rpki-client