Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
File: x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json)
Hash identifier: PsgLgPGoS1fyiiDVnMKcSN3MDp5vsgjx+giQ3/75a7Q=
Subject key identifier: 22:75:B0:09:48:48:FB:C8:57:39:BC:48:C3:3E:C4:91:03:53:F7:85
Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Certificate issuer: /CN=c77549551405d9948c662dfe4de24de055daff5e
Certificate serial: 019CAA58B912AA2A17E92F9B3FD3F97B2569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:01:06 +0000
Manifest this update: Sun 01 Mar 2026 17:01:06 +0000
Manifest next update: Mon 02 Mar 2026 17:01:06 +0000
Files and hashes: 1: voGrppNhCGHuRZLwsuAkj7Qr9qY.roa (hash: PhKSVss4XujDromY1GHIug1qUmjQzQEMDbCWKPHUiJY=)
2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: jW/+G131UlvR5FCj6zQI86mfT9rZ5PM0JLARBWbJXwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:b9:12:aa:2a:17:e9:2f:9b:3f:d3:f9:7b:25:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e
Validity
Not Before: Mar 1 17:01:06 2026 GMT
Not After : Mar 2 17:01:06 2026 GMT
Subject: CN=2275b0094848fbc85739bc48c33ec4910353f785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:c2:d4:2d:01:89:8a:99:90:cd:9a:56:0c:
36:21:3f:5e:47:cf:18:21:09:d7:4f:ae:b3:89:21:
6e:6f:1d:88:40:03:7b:f9:4d:eb:4e:50:d6:ad:f8:
da:7a:1f:7a:c7:dd:f7:3a:ee:0b:7a:ea:c6:5e:12:
80:3e:c0:8e:1b:3a:40:f0:14:4a:d1:77:c7:8c:b1:
ea:67:38:5e:40:cd:fc:f1:ad:34:e0:cf:7a:4f:3c:
97:78:60:56:3d:a7:05:58:3d:a7:6e:3d:46:4c:5d:
25:b0:5d:31:f1:8c:e9:11:2d:a5:48:8e:62:69:a4:
fa:8c:1f:77:b3:15:62:c5:bb:01:36:c9:a9:c8:5f:
70:b8:43:f2:87:50:0a:d8:6c:7e:2f:19:77:47:09:
bb:3d:5b:30:36:b9:77:70:78:60:88:0b:56:b4:f0:
1e:4a:06:16:fc:9c:26:64:e2:8a:95:18:f5:0a:44:
43:60:41:4a:bb:a7:8c:a1:06:ca:d8:73:de:47:c4:
d8:0c:88:48:08:c4:c7:c7:ca:e9:04:c1:4e:da:ac:
6e:80:8f:84:c2:4c:48:ae:46:8e:09:c8:7a:0b:93:
30:7b:20:db:bb:d2:cf:f8:6b:c8:b9:54:ed:0c:3a:
2d:7d:be:67:8d:30:8b:19:dd:ad:cc:e9:d3:e0:bb:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:75:B0:09:48:48:FB:C8:57:39:BC:48:C3:3E:C4:91:03:53:F7:85
X509v3 Authority Key Identifier:
keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c4:e2:82:bd:e1:51:53:e7:64:ad:f9:ed:63:41:45:d0:7e:
47:63:78:e4:80:81:e8:77:20:4b:d3:2c:2a:80:d0:e1:bd:cf:
62:1e:3b:21:fc:ea:97:f5:93:d7:bf:15:be:ac:03:b6:16:af:
e3:88:74:26:9e:34:5b:fb:3a:7d:b8:82:36:14:0c:b3:b4:f0:
6f:31:a8:2a:b8:bc:c3:38:94:d0:8a:a8:43:46:f4:52:6b:93:
17:40:be:51:ad:5b:54:49:d4:5d:9b:3b:24:02:a6:25:b5:da:
53:cf:63:6a:56:e5:9e:b9:41:b8:79:f8:ae:1f:63:6b:4a:34:
79:a0:b7:94:e5:ee:bd:d6:48:47:c9:57:89:35:d2:74:36:52:
af:5a:a2:c0:bf:df:c4:9f:dc:e8:ab:24:02:f6:bc:c8:d2:79:
0c:42:aa:a6:bd:e5:e2:fa:90:6e:e5:42:b9:5b:47:da:40:c9:
ff:b8:17:28:d7:23:2a:76:8b:37:a5:0c:3a:10:f0:e9:a1:46:
46:5b:a6:fd:e0:ab:b5:20:f1:40:e4:51:da:4c:39:86:8b:73:
a9:4b:e4:ff:d3:e7:6e:7d:d0:c8:63:cf:00:4b:cd:52:6c:02:
3d:88:a2:dc:05:5f:8e:86:13:2c:57:5e:d9:27:6f:bc:8d:39:
28:c0:02:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWLkSqioX6S+bP9P5eyVpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzU0OTU1MTQwNWQ5OTQ4YzY2MmRmZTRkZTI0ZGUwNTVk
YWZmNWUwHhcNMjYwMzAxMTcwMTA2WhcNMjYwMzAyMTcwMTA2WjAzMTEwLwYDVQQD
EygyMjc1YjAwOTQ4NDhmYmM4NTczOWJjNDhjMzNlYzQ5MTAzNTNmNzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvbC1C0BiYqZkM2aVgw2IT9eR88Y
IQnXT66ziSFubx2IQAN7+U3rTlDWrfjaeh96x933Ou4LeurGXhKAPsCOGzpA8BRK
0XfHjLHqZzheQM388a004M96TzyXeGBWPacFWD2nbj1GTF0lsF0x8YzpES2lSI5i
aaT6jB93sxVixbsBNsmpyF9wuEPyh1AK2Gx+Lxl3Rwm7PVswNrl3cHhgiAtWtPAe
SgYW/JwmZOKKlRj1CkRDYEFKu6eMoQbK2HPeR8TYDIhICMTHx8rpBMFO2qxugI+E
wkxIrkaOCch6C5MweyDbu9LP+GvIuVTtDDotfb5njTCLGd2tzOnT4LubPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJ1sAlISPvIVzm8SMM+xJEDU/eFMB8GA1UdIwQY
MBaAFMd1SVUUBdmUjGYt/k3iTeBV2v9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEt
MWJmNzVmNzVmYTg3LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEtMWJmNzVmNzVmYTg3
LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcTigr3h
UVPnZK357WNBRdB+R2N45ICB6HcgS9MsKoDQ4b3PYh47Ifzql/WT178VvqwDthav
44h0Jp40W/s6fbiCNhQMs7TwbzGoKri8wziU0IqoQ0b0UmuTF0C+Ua1bVEnUXZs7
JAKmJbXaU89jalblnrlBuHn4rh9ja0o0eaC3lOXuvdZIR8lXiTXSdDZSr1qiwL/f
xJ/c6KskAva8yNJ5DEKqpr3l4vqQbuVCuVtH2kDJ/7gXKNcjKnaLN6UMOhDw6aFG
Rlum/eCrtSDxQORR2kw5hotzqUvk/9Pnbn3QyGPPAEvNUmwCPYii3AVfjoYTLFde
2SdvvI05KMACvg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:26 2026 by rpki-client