Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
File: x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json)
Hash identifier: tt8gy5L1IaHx2487K8a3DxIDdudqlstMOc3j7SDAWY8=
Subject key identifier: E6:BD:38:62:B9:5D:6A:BE:CE:26:7E:32:35:DF:E6:E4:AD:27:74:09
Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Certificate issuer: /CN=c77549551405d9948c662dfe4de24de055daff5e
Certificate serial: 01A0D07FCDD3C35000B950BCAC97A6E96681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 23:00:31 +0000
Manifest this update: Wed 23 Sep 2026 23:00:31 +0000
Manifest next update: Thu 24 Sep 2026 23:00:31 +0000
Files and hashes: 1: voGrppNhCGHuRZLwsuAkj7Qr9qY.roa (hash: PhKSVss4XujDromY1GHIug1qUmjQzQEMDbCWKPHUiJY=)
2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: 1W6hjQPWBc/wmc2kamQ5XtPZKufjOG7wcgLkRtTB2Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:cd:d3:c3:50:00:b9:50:bc:ac:97:a6:e9:66:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e
Validity
Not Before: Sep 23 23:00:31 2026 GMT
Not After : Sep 24 23:00:31 2026 GMT
Subject: CN=e6bd3862b95d6abece267e3235dfe6e4ad277409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:60:dc:e2:fb:5b:c6:eb:a8:3f:f6:af:e7:
40:dd:28:ed:93:7c:28:1c:e2:02:bd:67:ab:a3:c5:
a7:eb:1f:5b:69:3d:4e:8b:b4:04:dc:4a:1a:e2:07:
f9:e3:41:e5:64:8e:d5:00:61:b3:13:2d:00:d5:97:
37:53:e0:95:fc:fa:16:20:03:b3:27:37:66:52:2d:
ec:4e:53:dd:a1:dc:29:84:7f:72:7a:96:2e:2a:9a:
9d:4d:99:1f:b7:94:9c:eb:66:b5:2a:aa:9c:28:8c:
6e:fd:d3:76:a7:93:e0:2f:8b:be:fe:cf:32:cd:bc:
dd:b1:a9:b0:82:83:f4:de:38:39:9d:09:7c:1f:4d:
2d:97:4b:a2:b5:5d:93:21:c7:9d:41:f0:47:f9:2e:
a2:4d:fe:c6:7b:b9:2f:54:9b:d3:94:df:ce:aa:8e:
1e:be:f5:8f:c1:44:2a:40:60:4d:44:dc:c7:16:5d:
23:d7:20:0f:b7:67:9c:0d:17:dc:96:ee:a8:60:c7:
79:9c:da:f7:d9:29:29:8d:86:bb:f1:1c:6b:ae:22:
5b:24:a4:80:64:ba:8d:ba:3e:9c:f8:b0:96:3c:6c:
30:a9:56:a7:db:40:d1:2f:1d:b8:70:ec:3e:d4:0f:
bc:06:4f:2e:56:88:77:18:94:4a:ab:ce:2b:c9:96:
a6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BD:38:62:B9:5D:6A:BE:CE:26:7E:32:35:DF:E6:E4:AD:27:74:09
X509v3 Authority Key Identifier:
keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5d:8b:1c:69:7c:06:ef:0b:c3:9b:10:b8:8b:ce:10:ba:a1:
64:db:01:e4:e0:ac:31:98:eb:bd:8c:32:fe:ab:f4:ee:b7:d3:
cb:18:74:59:80:7c:3c:35:d7:22:43:46:e2:3d:98:f4:c7:b5:
f9:11:af:c9:87:90:10:11:c8:27:0a:14:93:bc:60:b3:bf:5b:
9b:31:11:ed:bf:ef:21:85:46:22:b4:32:f2:76:9b:2a:4c:1d:
49:bb:0b:f1:80:a7:55:c4:1a:1d:c2:1f:c6:4e:65:84:eb:5d:
a4:ba:fd:9e:31:20:a8:ca:6d:5f:bb:b6:42:51:92:bf:1d:4a:
e7:5b:97:36:e7:bf:5b:ef:89:dd:c9:e1:e5:8c:c7:ef:5d:61:
9b:14:55:a3:82:69:ab:15:7b:d4:8a:f0:a8:78:e5:93:0d:7e:
28:3a:19:af:50:b0:df:dc:36:4d:10:67:31:18:60:bb:0b:3f:
47:fc:4d:8b:2d:11:4c:9a:72:88:5b:77:9a:12:61:2d:a0:aa:
eb:9e:0b:cc:d8:bb:9a:1a:41:d7:cf:20:b6:c3:f4:f8:ea:23:
de:1e:ea:d3:49:d5:0a:10:8e:81:08:15:41:f1:78:4e:38:15:
5a:a1:1a:31:7d:cf:11:59:61:57:73:bf:36:ce:67:a2:a3:a6:
83:ec:93:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQf83Tw1AAuVC8rJem6WaBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzU0OTU1MTQwNWQ5OTQ4YzY2MmRmZTRkZTI0ZGUwNTVk
YWZmNWUwHhcNMjYwOTIzMjMwMDMxWhcNMjYwOTI0MjMwMDMxWjAzMTEwLwYDVQQD
EyhlNmJkMzg2MmI5NWQ2YWJlY2UyNjdlMzIzNWRmZTZlNGFkMjc3NDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfpg3OL7W8brqD/2r+dA3Sjtk3wo
HOICvWero8Wn6x9baT1Oi7QE3Eoa4gf540HlZI7VAGGzEy0A1Zc3U+CV/PoWIAOz
JzdmUi3sTlPdodwphH9yepYuKpqdTZkft5Sc62a1KqqcKIxu/dN2p5PgL4u+/s8y
zbzdsamwgoP03jg5nQl8H00tl0uitV2TIcedQfBH+S6iTf7Ge7kvVJvTlN/Oqo4e
vvWPwUQqQGBNRNzHFl0j1yAPt2ecDRfclu6oYMd5nNr32SkpjYa78RxrriJbJKSA
ZLqNuj6c+LCWPGwwqVan20DRLx24cOw+1A+8Bk8uVoh3GJRKq84ryZamNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOa9OGK5XWq+ziZ+MjXf5uStJ3QJMB8GA1UdIwQY
MBaAFMd1SVUUBdmUjGYt/k3iTeBV2v9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEt
MWJmNzVmNzVmYTg3LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEtMWJmNzVmNzVmYTg3
LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAF2LHGl8
Bu8Lw5sQuIvOELqhZNsB5OCsMZjrvYwy/qv07rfTyxh0WYB8PDXXIkNG4j2Y9Me1
+RGvyYeQEBHIJwoUk7xgs79bmzER7b/vIYVGIrQy8nabKkwdSbsL8YCnVcQaHcIf
xk5lhOtdpLr9njEgqMptX7u2QlGSvx1K51uXNue/W++J3cnh5YzH711hmxRVo4Jp
qxV71IrwqHjlkw1+KDoZr1Cw39w2TRBnMRhguws/R/xNiy0RTJpyiFt3mhJhLaCq
654LzNi7mhpB188gtsP0+Ooj3h7q00nVChCOgQgVQfF4TjgVWqEaMX3PEVlhV3O/
Ns5noqOmg+yTvg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:04:09 2026 by rpki-client