Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
File: x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json)
Hash identifier: Lj2MvRC+PRF1TgnkEmQVNpyoy7S+83rg+jJgffnyvcI=
Subject key identifier: 56:07:21:0D:56:FC:4F:FB:C2:8B:7D:6F:D5:4D:1F:44:16:F6:B2:29
Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Certificate issuer: /CN=c77549551405d9948c662dfe4de24de055daff5e
Certificate serial: 019FAAF520A4B97C9AC3D3E567C840473AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 23:00:19 +0000
Manifest this update: Tue 28 Jul 2026 23:00:19 +0000
Manifest next update: Wed 29 Jul 2026 23:00:19 +0000
Files and hashes: 1: voGrppNhCGHuRZLwsuAkj7Qr9qY.roa (hash: PhKSVss4XujDromY1GHIug1qUmjQzQEMDbCWKPHUiJY=)
2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: gfid/3V/luSpBhXcNhp2rFCdEQRm2j/UasiszD2Th2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:20:a4:b9:7c:9a:c3:d3:e5:67:c8:40:47:3a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e
Validity
Not Before: Jul 28 23:00:19 2026 GMT
Not After : Jul 29 23:00:19 2026 GMT
Subject: CN=5607210d56fc4ffbc28b7d6fd54d1f4416f6b229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:7f:83:a9:0e:3e:51:bd:c5:67:37:f0:90:
6b:c2:ab:36:d7:48:9b:6f:62:f1:43:83:b9:68:0a:
40:bc:b5:b0:ab:02:c1:57:ee:3b:cd:84:d8:be:35:
f8:fd:0f:86:4d:6d:a5:3c:37:46:dd:73:25:3d:38:
e7:08:78:53:fb:8c:0e:92:af:d1:9a:64:72:2d:c6:
52:e4:5c:f2:fb:bc:5a:0d:8c:b8:83:93:a7:e6:05:
10:04:41:65:06:b1:38:f5:95:1f:5d:78:c9:93:3a:
6f:44:79:31:bb:a1:ef:e2:f5:ba:a5:ec:22:6f:37:
e4:9c:41:6c:1b:33:fc:79:f7:36:a5:9f:e7:d4:81:
f5:42:e1:1d:53:0b:79:2e:01:af:a5:33:c0:6d:c5:
f4:56:de:7a:ca:c8:c6:7c:78:e4:1b:28:7f:2a:20:
23:18:5f:9f:4a:67:07:3f:d0:be:fd:0a:bb:1e:b4:
ae:af:40:66:7b:0e:26:ae:4d:be:8a:5a:28:4c:11:
10:48:23:c4:70:35:59:c9:5e:d7:ff:fb:9a:d8:9d:
4c:fc:3c:c1:ed:ea:af:20:4a:eb:52:4d:5b:93:e9:
19:b7:0a:3e:c5:7c:e9:8f:8d:73:7e:0f:d9:d5:e6:
4b:ca:c5:56:a0:00:12:de:0b:fe:dc:0d:bf:3c:30:
c3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:07:21:0D:56:FC:4F:FB:C2:8B:7D:6F:D5:4D:1F:44:16:F6:B2:29
X509v3 Authority Key Identifier:
keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:95:78:3c:b0:f1:7f:a0:60:5d:c0:59:43:72:5d:98:11:a5:
62:91:48:c4:b7:02:6c:4e:ec:bd:09:6c:7e:9e:23:f6:82:9e:
8d:b9:5b:95:bd:8b:b9:34:6f:f2:23:36:2e:ba:34:31:16:00:
99:ba:62:21:24:8e:84:a9:19:9f:6a:1a:d1:64:c2:da:94:55:
8c:5c:0a:f8:35:a3:48:e0:e0:7c:66:99:c8:c9:ec:fe:70:a4:
94:2f:0e:fc:b0:35:a4:6e:14:ef:10:bb:41:5c:cb:86:3b:db:
69:11:8d:b3:0a:62:e1:76:5c:26:ea:24:9a:c3:54:4b:ee:d3:
a3:76:96:61:eb:04:e5:2e:cb:72:9a:8b:ad:57:48:ce:8d:c9:
e8:54:8d:51:8b:6c:89:f8:7b:70:f7:a0:2e:57:10:fc:bd:2e:
32:f5:72:58:a2:59:9b:7c:5d:c4:7b:2f:89:e6:01:17:a1:3f:
e4:ed:7e:de:21:99:2d:2a:f2:aa:c5:1b:6e:c7:64:24:ba:c9:
e3:66:90:11:9a:3e:d5:22:b6:ce:ef:02:ca:52:a6:e2:7b:e9:
57:1c:07:90:10:7e:3a:54:cb:8b:37:82:83:fa:ef:37:a5:e7:
4d:27:c5:43:17:6c:cb:77:b2:94:0c:43:46:73:86:24:f0:9f:
84:e9:0f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:09:37 2026 by rpki-client