Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: il0vENZM4GTcXnlv+R8HO3KH8m0o3O/hNmlcjFdjqxE=
Subject key identifier: 63:29:6E:C4:3B:0A:46:B9:68:B8:07:E6:51:7E:50:13:38:90:21:EE
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 019FAAF58CAF14A32D673CEC21ADADD912B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 0A03
Signing time: Tue 28 Jul 2026 23:00:46 +0000
Manifest this update: Tue 28 Jul 2026 23:00:46 +0000
Manifest next update: Wed 29 Jul 2026 23:00:46 +0000
Files and hashes: 1: V1X5AoJuWVktixeEEeg847CrLW4.roa (hash: sDvrIAa5SeWcR7s8zM+NUTwaLMsawn+2eiUy7AxPXYo=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: hF/BB1mNlSPrjFF8VL8POvgK32pmGKphYAmeqweYxD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:8c:af:14:a3:2d:67:3c:ec:21:ad:ad:d9:12:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: Jul 28 23:00:46 2026 GMT
Not After : Jul 29 23:00:46 2026 GMT
Subject: CN=63296ec43b0a46b968b807e6517e5013389021ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:fc:ce:2f:41:cf:7c:e8:e6:ed:b1:2a:fc:
b0:30:37:fa:c4:98:03:a0:6b:f2:eb:74:07:02:bb:
8c:fd:a5:da:13:e3:04:46:73:a3:b5:24:a3:d4:4f:
46:45:35:3d:8a:07:b4:3c:42:10:93:94:44:23:7a:
ac:5a:3a:e0:bb:f7:53:1e:70:ec:0e:39:4a:83:84:
5c:59:4f:31:c0:09:cd:63:18:da:c5:80:68:fd:fb:
d9:29:f3:fd:d5:90:6b:45:88:ab:3c:b6:e0:77:19:
9f:99:07:a9:3b:68:82:4c:b0:5e:a1:fa:3f:30:0c:
a7:4b:c4:05:e9:8a:f4:c6:31:02:ea:f4:71:c6:59:
0c:97:fd:bf:a4:be:58:92:94:b5:eb:10:cd:f2:33:
99:d8:1a:b4:4e:72:ed:3b:47:3c:41:a4:00:27:ea:
e0:6d:6b:97:e0:bd:8e:db:7d:6a:0a:14:5d:8f:d5:
b6:d8:cd:c8:da:02:bf:d9:67:f0:a7:f5:a7:fc:77:
2f:d4:8b:62:57:f6:bd:87:85:64:df:37:8b:2e:36:
89:b6:15:08:52:e9:c4:42:55:fd:72:9f:fb:e3:70:
8f:70:cf:ac:92:b0:d3:27:4e:b7:bc:26:9f:cd:b2:
d4:ee:76:06:ec:9f:16:42:10:da:fe:7e:02:c1:c6:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:29:6E:C4:3B:0A:46:B9:68:B8:07:E6:51:7E:50:13:38:90:21:EE
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d4:66:67:28:a2:a9:45:44:28:72:44:3a:4d:40:dd:3e:a4:
65:8d:37:16:ca:c0:7d:bd:2e:88:d3:4e:ba:7a:a9:d5:78:b2:
f1:2b:f5:8d:bf:2b:cf:2e:2f:41:6d:2f:0c:a0:df:d6:be:b4:
f0:f0:e3:74:ef:2e:eb:97:fd:3c:38:e1:8b:d1:97:8f:a2:0d:
f0:92:94:1a:52:74:1c:38:03:15:81:19:7d:d4:e1:6f:ba:96:
fc:95:7b:f9:40:25:04:72:9f:f9:b0:f9:2e:29:8e:e4:a1:41:
d4:ca:dc:da:3e:cc:87:47:e5:95:f9:0d:b5:01:c1:11:e2:78:
60:83:9c:88:72:e5:59:d0:26:98:45:01:71:ab:05:9b:c7:de:
95:60:d8:64:bf:63:fa:28:3c:ea:81:ec:1f:b2:42:2e:0b:79:
64:88:c8:31:a9:b7:e1:38:e6:88:2d:a5:d1:ac:b5:49:66:05:
23:73:19:4f:e9:db:d0:95:09:81:ed:7b:79:d5:cd:b6:d0:4e:
72:ed:ad:6e:ef:9c:40:92:15:71:4e:84:b0:9c:2a:42:fa:19:
c0:2b:bb:4d:38:9e:9a:14:d4:56:66:84:9e:17:04:8b:6a:af:
f3:23:25:d8:53:5f:3a:b7:3d:9f:8a:98:86:b3:d1:49:ab:e6:
c6:e9:4a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:51:59 2026 by rpki-client