Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
File: x3ER7FVJEVyzR2VNj-WycJ0n998.mft (raw, json)
Hash identifier: SuLfTyv221b2tLtWKjaHFk1OhnOpm1GL/uvKFxxORT0=
Subject key identifier: CA:67:C1:A5:35:FD:67:3E:8B:B1:4D:D2:5C:42:35:53:BE:97:8F:D5
Authority key identifier: C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
Certificate issuer: /CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Certificate serial: 019D99D0E359E73883759981D8B75E5A991F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
Manifest number: 12BD
Signing time: Fri 17 Apr 2026 05:01:36 +0000
Manifest this update: Fri 17 Apr 2026 05:01:36 +0000
Manifest next update: Sat 18 Apr 2026 05:01:36 +0000
Files and hashes: 1: VZDwVhwIg3g9iM3qt-x-zwWp4Ao.roa (hash: 7a9BH9RzouuHFjB1cCK0b23ksnqE0jY9b0U+LyPMrtw=)
2: x3ER7FVJEVyzR2VNj-WycJ0n998.crl (hash: r/ykm3+ovVpHSTFtBIlqrZ2N2KQMEYKGjyXu5fCsRy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:e3:59:e7:38:83:75:99:81:d8:b7:5e:5a:99:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Validity
Not Before: Apr 17 05:01:36 2026 GMT
Not After : Apr 18 05:01:36 2026 GMT
Subject: CN=ca67c1a535fd673e8bb14dd25c423553be978fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:5e:05:47:1d:c6:df:ed:ff:28:65:7a:02:
be:49:df:5b:3e:2d:87:63:0c:86:10:a8:c4:83:a4:
a2:26:e5:34:79:ba:6e:50:cc:ab:32:a2:05:66:34:
a9:15:48:15:20:cc:a8:e6:4d:90:dd:3d:b9:d9:d4:
42:76:aa:af:24:ab:8e:3a:06:83:d6:2b:50:0a:90:
e4:38:d5:a3:43:f6:e2:6c:db:c1:df:9c:d9:0f:0f:
62:78:d3:cf:53:82:e1:67:4f:be:cc:3e:14:6f:19:
c7:ec:42:03:f6:e6:6f:bb:ae:55:35:7b:d1:fe:4b:
0a:d0:c4:9b:e4:be:99:36:bf:16:dd:5e:92:40:19:
c8:7b:62:27:79:1e:f9:da:dc:55:b0:ef:dd:77:68:
9b:d1:b2:32:36:7c:dc:5d:89:9b:16:84:98:11:f3:
19:0e:54:cd:14:ed:97:26:ef:b0:c5:b9:96:8c:66:
cf:11:7f:c0:fe:85:6a:67:93:50:af:67:83:94:ae:
38:89:c6:c4:c8:01:7e:49:a9:5c:f7:1f:98:29:aa:
79:49:0c:55:c9:66:6e:3c:25:94:4c:02:12:7d:04:
6a:38:cc:1e:fd:6e:8e:70:8d:cf:9e:8d:db:53:11:
19:ca:c7:7c:cb:46:82:58:f8:a0:35:69:fe:f3:0a:
3f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:67:C1:A5:35:FD:67:3E:8B:B1:4D:D2:5C:42:35:53:BE:97:8F:D5
X509v3 Authority Key Identifier:
keyid:C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2b:9a:a2:a2:41:8a:20:fa:58:37:a1:5d:46:31:f9:c4:61:
78:36:81:e6:81:8b:ab:18:46:39:e8:60:40:c9:4d:6f:ae:6e:
0c:a0:52:74:fd:c9:5a:d0:2e:84:84:9a:bb:e8:9d:7d:60:3b:
49:2b:58:04:98:dd:ae:05:3f:10:56:0b:3e:9c:36:a2:c4:a0:
61:77:04:93:b5:87:1d:71:9e:77:e5:ae:7b:c8:61:fc:ef:b2:
97:67:3b:54:be:da:0e:6b:61:e7:e0:51:86:5c:04:2a:31:6f:
70:e8:b1:0b:16:46:c2:fe:fe:c5:75:64:45:a3:7f:63:8b:83:
d4:81:ad:28:a1:df:ff:e2:ce:20:b4:1a:7b:ca:b1:6c:7f:6b:
a0:24:53:68:a2:2e:c2:a6:84:15:93:f0:6f:42:d7:1b:85:fe:
d4:69:b8:84:af:4f:da:7b:ef:72:7b:40:b2:ea:92:0c:b3:1c:
bb:f1:9c:3f:39:ce:1a:b3:73:c5:0e:34:2b:ce:e0:7e:c9:c7:
bb:92:00:22:24:cb:f6:28:43:04:3e:4c:76:c2:74:3e:ca:8e:
04:f7:ce:9d:17:e9:35:39:f0:34:40:23:98:21:05:73:b2:93:
6d:1c:86:7e:e0:d1:11:7d:85:39:ce:a1:bd:60:bb:28:dd:35:
dd:3f:8a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:16 2026 by rpki-client