Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json)
Hash identifier: 4WEagkVdmvj1Byeu1+n1Kzv3OGuD+Var1QM7dueBJ3M=
Subject key identifier: 11:98:D8:A2:5E:72:11:F4:43:CE:8E:16:46:16:2D:D4:F7:D5:6A:B7
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 01A1231DD8C19F62580D3597766BCBEB8502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
Manifest number: 1AA2
Signing time: Sat 10 Oct 2026 00:02:00 +0000
Manifest this update: Sat 10 Oct 2026 00:02:00 +0000
Manifest next update: Sun 11 Oct 2026 00:02:00 +0000
Files and hashes: 1: A8hQT388ItEqoQYFOhqCCsEIlTI.roa (hash: 97e6isQPIjw70otEwzd0gLtQm2r1Kv7FnFS5tJziJjw=)
2: F_3SEAz-EKjAxo_g2p-mjUGzRIs.roa (hash: j/8Kr9e/zq+L0yS9GkMCdBYgA7yMxgnitG1QiH62Ck0=)
3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: Yod4OlD1iHGVGsOnEj0VRvtxC51gZHR8KGDJhbHc/B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:1d:d8:c1:9f:62:58:0d:35:97:76:6b:cb:eb:85:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: Oct 10 00:02:00 2026 GMT
Not After : Oct 11 00:02:00 2026 GMT
Subject: CN=1198d8a25e7211f443ce8e1646162dd4f7d56ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:bb:66:c7:a8:d7:d3:d8:b9:b5:24:64:d2:
ae:bc:e1:5b:7b:ad:51:89:a3:7c:a3:18:93:e1:01:
b5:f2:57:01:f5:30:96:08:16:68:23:37:f9:67:82:
da:ba:36:17:db:e9:d9:16:9e:47:3a:30:1b:05:b7:
6c:e4:05:d2:3b:61:f0:83:28:3d:9d:da:a7:de:44:
35:61:89:2b:a4:d1:80:02:65:56:6c:81:46:27:79:
4d:55:ef:ab:76:1e:c2:ab:9b:2c:2d:9b:32:74:7e:
02:6c:e4:4c:18:bc:52:a9:35:64:df:bc:84:46:da:
e1:99:e4:10:6a:53:4b:6a:6d:e9:a3:67:fa:9e:aa:
dd:e1:1f:97:93:09:df:1f:98:a5:9b:de:5c:b0:9c:
2c:68:be:91:df:cb:fe:c5:ac:fc:0a:b4:f6:8d:ab:
db:9e:9c:09:a8:1d:fc:8e:82:dc:d7:bb:8b:cb:c6:
82:0a:b2:45:ed:45:3f:1f:28:67:86:49:07:89:e6:
c0:b1:01:02:a0:32:cb:f6:9f:0d:90:b7:1d:0c:6f:
6a:9f:6d:ef:83:ab:24:f0:75:62:59:1d:c6:f4:24:
05:58:06:e4:64:04:40:7a:e8:59:70:05:e5:1b:57:
77:8a:c0:0e:a7:61:6a:b0:60:47:80:c1:e5:21:99:
68:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:98:D8:A2:5E:72:11:F4:43:CE:8E:16:46:16:2D:D4:F7:D5:6A:B7
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:53:1e:9e:f6:46:8a:81:9b:d5:6b:bf:45:13:23:1a:b0:6e:
a7:35:51:f4:ab:19:8b:91:11:6f:87:ea:bd:ba:ef:d1:c3:0e:
5f:c3:3d:ea:be:46:43:09:da:1f:57:22:ec:b9:aa:2e:5e:b0:
b3:58:d9:42:70:d3:91:d4:31:b2:9b:cb:4d:83:64:06:f5:79:
35:d9:f5:db:24:dc:7a:a1:54:d2:46:24:0a:2b:95:20:3e:f5:
57:87:7a:d8:b8:26:d2:bf:a1:83:54:40:6f:3a:eb:68:5a:11:
c1:92:3f:aa:8c:f7:8e:1f:4d:21:6b:e9:53:08:45:77:c7:ec:
cf:24:79:49:a1:8c:85:d1:80:b7:d9:50:bd:7b:9f:36:6b:b6:
4f:17:41:32:d1:dc:aa:26:e2:3e:87:9a:f5:f5:f6:bf:9a:46:
60:9e:a4:de:68:c4:78:51:58:a5:6c:08:53:80:e0:9c:6e:ae:
d0:fd:12:1c:d5:97:bd:e6:27:1b:71:15:07:a4:92:23:51:31:
8b:d1:85:3c:69:12:ad:9b:83:f8:40:99:d7:21:82:f1:36:c2:
58:22:30:d2:c3:b2:87:9a:d8:14:39:5e:21:02:58:9e:f9:6a:
7f:21:b8:d0:30:e8:95:73:3c:7e:2d:5d:11:99:4e:cf:7c:51:
04:b3:66:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:48:33 2026 by rpki-client