Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
File: x3ER7FVJEVyzR2VNj-WycJ0n998.mft (raw, json)
Hash identifier: ZwPIFl1+CFyWPflNcHyOIjXLov+vSXXjkUdAopM1R5A=
Subject key identifier: 92:0A:77:88:7A:7B:00:B8:37:09:B0:6A:C5:D3:38:C3:07:AD:A5:82
Authority key identifier: C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
Certificate issuer: /CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Certificate serial: 019CAA58BA50DE2DBF734F4715C02F9C500B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
Manifest number: 1241
Signing time: Sun 01 Mar 2026 17:01:07 +0000
Manifest this update: Sun 01 Mar 2026 17:01:07 +0000
Manifest next update: Mon 02 Mar 2026 17:01:07 +0000
Files and hashes: 1: VZDwVhwIg3g9iM3qt-x-zwWp4Ao.roa (hash: 7a9BH9RzouuHFjB1cCK0b23ksnqE0jY9b0U+LyPMrtw=)
2: x3ER7FVJEVyzR2VNj-WycJ0n998.crl (hash: HHqDjoGZMiKr4/GMUGvOvpO+HhEZeWRTagOaYtY2aCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ba:50:de:2d:bf:73:4f:47:15:c0:2f:9c:50:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Validity
Not Before: Mar 1 17:01:07 2026 GMT
Not After : Mar 2 17:01:07 2026 GMT
Subject: CN=920a77887a7b00b83709b06ac5d338c307ada582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:55:44:61:ca:d9:23:32:5b:cc:e8:bf:e6:
a1:8a:16:f1:2a:d0:d7:78:10:d7:84:f3:ec:30:33:
c1:34:f8:0b:08:3d:0b:d4:94:de:48:2d:57:f9:be:
39:71:6b:11:4b:a8:cc:89:d7:e9:78:f5:a2:47:2b:
b4:6a:9f:46:41:b7:9a:0c:f9:b9:99:d6:f0:74:93:
38:bb:2f:98:dc:b8:fd:b2:b5:ab:d4:6f:59:8b:79:
f4:f0:97:2f:9e:fd:52:ec:a8:78:ab:ca:94:4f:21:
a6:ce:eb:0f:c6:a0:04:c3:3b:b0:b4:d2:14:ed:d0:
27:52:b1:80:5e:5f:62:f2:e3:7a:50:a1:39:3f:70:
3f:84:df:c9:ce:38:33:c3:54:05:a9:92:5e:e4:16:
7f:02:42:7a:6c:f8:80:55:63:84:95:07:84:39:d7:
5c:1f:5f:6e:11:29:ca:8e:5a:51:2c:9a:e7:83:24:
db:fa:a8:ec:8d:f4:31:3c:13:aa:7b:7c:63:b8:74:
d7:41:e1:e1:18:dc:2b:5d:d9:c2:af:e9:3c:42:5e:
0a:03:ee:e5:68:ba:b7:49:01:e7:2f:09:4a:7f:75:
1d:0a:e9:80:53:ad:63:dd:47:cf:18:fb:bf:5a:11:
f9:d4:74:b4:a0:4a:86:09:79:14:17:5e:5a:c8:e9:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0A:77:88:7A:7B:00:B8:37:09:B0:6A:C5:D3:38:C3:07:AD:A5:82
X509v3 Authority Key Identifier:
keyid:C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:89:40:b4:c9:10:4a:5e:69:02:b0:28:f3:73:8d:45:bf:07:
58:5a:fd:15:5e:ed:d4:66:ff:7b:91:64:2b:81:49:45:68:11:
18:33:df:f4:32:33:24:19:14:6c:8e:c3:94:0b:0c:b2:3e:e3:
f9:49:64:1d:29:51:a4:27:d2:af:00:5d:49:37:e2:d8:1c:76:
a3:4b:11:b6:c4:23:04:c9:cc:07:bc:cd:5d:43:5a:2c:ae:24:
10:09:f1:35:7c:53:34:35:59:fd:54:9a:27:57:3c:1f:e8:c9:
9c:0c:d9:ad:b8:82:07:ac:38:1b:58:e9:7e:cf:39:96:b6:e3:
b8:d5:83:74:16:0c:62:9f:bd:ea:34:8f:c4:89:d8:89:81:57:
38:a6:06:5c:bd:fd:62:94:20:d9:d9:0e:e5:bd:21:f6:72:4a:
b1:c4:e1:bb:83:e2:fe:5f:0e:a0:b8:2c:27:72:3c:92:da:29:
96:eb:24:00:68:a0:8b:54:bd:01:73:f9:8d:24:5e:44:2e:b2:
f3:f6:63:a8:72:43:bb:5a:f8:a3:0d:06:7c:19:c2:7f:59:c5:
3f:fe:e6:d0:cc:3d:4b:62:c3:a0:59:18:20:72:22:d2:3d:6f:
12:f0:4c:4f:86:34:8b:e4:f6:d5:65:65:7e:df:ee:b3:56:e4:
2d:9d:85:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:45:24 2026 by rpki-client