Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: gs93c37CcM0dFEK7Zuz0jOt1m1OZ9toanDct2FpZEFk=
Subject key identifier: EA:90:67:81:D4:B5:4D:88:DB:4E:A4:B8:D1:DC:82:C1:3D:C9:09:86
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 019CAC476EEB983C400E7DCFA29A65AE1C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 0876
Signing time: Mon 02 Mar 2026 02:01:28 +0000
Manifest this update: Mon 02 Mar 2026 02:01:28 +0000
Manifest next update: Tue 03 Mar 2026 02:01:28 +0000
Files and hashes: 1: V1X5AoJuWVktixeEEeg847CrLW4.roa (hash: sDvrIAa5SeWcR7s8zM+NUTwaLMsawn+2eiUy7AxPXYo=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: /VsnSkksWzfFq6++gbGHfpKrd72cYG2kPHrzznicH/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:6e:eb:98:3c:40:0e:7d:cf:a2:9a:65:ae:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: Mar 2 02:01:28 2026 GMT
Not After : Mar 3 02:01:28 2026 GMT
Subject: CN=ea906781d4b54d88db4ea4b8d1dc82c13dc90986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:15:a4:a9:f9:4d:bf:09:0a:d3:90:ab:50:
6e:61:3c:26:bd:dc:ac:fd:83:52:8f:95:a4:7f:4a:
fd:a6:18:77:3c:ad:ec:a7:72:4c:94:e3:8a:1d:e0:
d9:29:f4:ad:85:2f:90:f8:a6:22:68:10:a8:4a:8e:
47:ee:32:e2:c1:f2:de:f4:fe:fb:92:67:a8:d3:96:
0b:79:17:6c:76:45:ab:87:18:68:f4:2d:e3:30:4c:
fa:cc:57:b7:4d:43:0e:6e:6e:d8:a7:ba:fb:cc:5c:
9c:4d:74:22:38:62:50:83:3b:96:6e:d1:0b:dd:12:
75:08:c9:9a:b6:d3:50:9c:7f:6e:32:7f:96:55:ef:
ac:f7:1b:b8:6d:7c:bc:0b:70:0f:c5:13:61:d8:10:
ff:48:84:14:cd:13:1d:29:6b:d4:51:36:85:d2:7c:
e9:7c:ad:87:9c:fd:ec:d1:b0:d5:f3:ca:dc:5a:d1:
9c:5c:67:11:ee:e2:22:58:fd:e0:c8:a2:d5:19:df:
94:da:53:ab:c6:af:25:b5:83:4b:8c:fa:9c:ca:b7:
1a:d2:6d:60:90:e4:3e:fd:65:d7:cf:01:f9:a6:6d:
ea:fe:d9:5c:06:6b:ed:39:a7:8a:d7:4e:fe:da:e9:
c2:98:1b:45:0a:b7:85:80:a6:c1:1c:ea:94:cc:0c:
7f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:90:67:81:D4:B5:4D:88:DB:4E:A4:B8:D1:DC:82:C1:3D:C9:09:86
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:90:47:76:39:cb:d7:1f:45:d1:73:ba:50:ab:5f:6b:bf:61:
6f:99:8a:d5:c2:e9:aa:50:e9:44:2e:a9:e9:7c:97:91:15:79:
f6:ac:19:fc:b2:b0:70:92:51:de:92:59:9c:6b:50:27:a5:0d:
f4:a8:a1:3c:25:5d:e4:5d:b7:a9:15:e1:d6:46:07:8b:ad:28:
36:50:b2:2a:b5:0a:3d:6f:25:35:af:af:e6:dc:91:a8:d4:c0:
ae:67:dc:b9:c7:26:34:7c:a4:ac:13:e3:95:41:84:ac:41:4f:
93:2b:ab:89:7d:42:02:55:e0:bb:9a:a1:3a:1a:e5:c8:03:9d:
a5:35:4e:53:84:c6:f2:b5:3e:79:39:b4:58:1b:4f:af:5b:72:
3c:55:4b:2c:12:7e:cf:7a:bb:ec:86:fd:8a:62:c3:3d:02:45:
d5:53:75:90:ca:72:4f:08:8d:cd:2f:a8:06:04:0f:4b:33:dc:
9c:f3:7f:f3:6a:53:85:94:73:57:27:ad:1d:0e:33:6b:b4:86:
e9:76:4c:75:e7:be:23:5e:8b:07:03:1e:b1:f5:cb:90:0e:30:
99:de:a0:62:7d:95:1f:88:ce:3d:3b:d5:f8:79:6b:82:e6:e9:
ad:b1:1b:75:30:87:6b:10:51:74:5a:63:55:bc:84:e9:4d:0c:
9a:1e:48:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:33 2026 by rpki-client