Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File: x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier: cc2q5UrmpGx9U7oFftKVEMXFjmYKtyAok48cKVnq2IU=
Subject key identifier: DA:01:5C:1E:11:FC:C1:32:AB:5B:29:05:28:6F:33:9C:01:B1:E8:53
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer: /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial: 019CAA2174904680158CC90C0D028CE6B5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 16:00:45 +0000
Manifest this update: Sun 01 Mar 2026 16:00:45 +0000
Manifest next update: Mon 02 Mar 2026 16:00:45 +0000
Files and hashes: 1: O7DvE_j0yVa8Neokc-i_HaDtXmM.roa (hash: 3lAq1Q6ERq8LruEXX9XUeCK19VsJiVKMmGnOXIPs3os=)
2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: 9mcjX6MSkS7AlHqaHVCk0+p/tNIvC4s0S4lYS2HU6aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:74:90:46:80:15:8c:c9:0c:0d:02:8c:e6:b5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Validity
Not Before: Mar 1 16:00:45 2026 GMT
Not After : Mar 2 16:00:45 2026 GMT
Subject: CN=da015c1e11fcc132ab5b2905286f339c01b1e853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:b5:54:52:5b:98:45:43:5e:a6:a0:36:34:
eb:a9:04:81:72:61:a7:c1:b1:54:4c:e6:16:76:56:
46:65:4f:c7:82:93:60:a7:d5:28:5f:8b:ef:66:fe:
bc:82:5d:95:40:59:c2:87:e3:81:3c:b7:79:a2:79:
34:e1:48:99:65:0a:48:8a:da:7a:76:30:41:57:dd:
23:dc:59:c1:b1:6e:04:24:9d:ed:60:b6:51:23:49:
52:d4:07:ce:ec:3a:11:68:31:58:a3:9c:c6:c5:6e:
6d:62:8f:a6:b0:2b:ca:31:43:aa:1f:be:d9:ba:ad:
f6:1e:0e:9d:c4:e1:61:c6:7b:15:0d:4e:6a:d8:7b:
bb:0c:b4:f1:88:58:ff:f0:7e:1f:84:f7:97:fd:f6:
d7:aa:3d:46:e9:49:2b:4d:59:34:4c:38:6a:06:ca:
06:ad:ce:1f:a4:18:50:95:ea:e1:f2:01:4f:8a:69:
ab:b4:0e:76:4d:5a:b0:7f:83:f7:b2:3e:cf:f1:64:
8d:44:82:79:95:1b:9d:d5:8c:b5:06:4f:ca:5a:6c:
44:bc:b3:22:06:7f:1e:87:53:28:0f:c2:e5:be:53:
57:a6:72:51:78:34:3f:00:69:8e:9e:7a:57:cc:f4:
dd:d8:c7:6e:47:d4:ef:d9:9b:1e:9c:a9:93:d1:2a:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:01:5C:1E:11:FC:C1:32:AB:5B:29:05:28:6F:33:9C:01:B1:E8:53
X509v3 Authority Key Identifier:
keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fd:ea:fe:6c:40:de:50:5d:f9:15:8b:95:40:e1:d4:d7:bc:
57:10:10:ec:1a:d2:c0:9a:8c:ca:40:09:d0:cb:1a:52:da:07:
57:55:06:54:2d:54:13:24:66:a0:34:6b:08:10:7d:e1:db:6d:
40:fd:60:3e:6c:03:91:c1:69:29:d8:c4:e5:23:22:e6:d7:ba:
cc:d0:63:f7:50:a8:38:03:ca:5f:c4:5f:44:40:77:b4:2d:6d:
c6:92:57:7d:9d:13:a4:c3:ee:55:0e:0b:5e:1f:fc:27:30:da:
ad:52:32:d4:6e:8c:d9:a5:a8:7b:17:d0:09:24:7a:7a:65:52:
30:6b:5f:b0:26:8c:3d:14:71:68:5c:d4:a7:8c:45:33:86:25:
34:7a:09:26:db:6b:fb:87:e9:42:6d:aa:3f:3c:b1:2c:ab:c3:
c5:18:fe:e8:60:66:ee:71:38:04:a3:d6:bc:50:69:17:27:a7:
98:25:ee:aa:09:49:50:c5:54:85:74:57:37:fe:56:22:07:9f:
5f:6c:15:37:61:70:20:8c:eb:19:c9:6b:b5:6c:2f:26:8e:1b:
c5:5c:de:56:f3:34:58:9a:83:37:ac:f7:bb:d1:1b:18:36:2e:
33:4b:e4:74:76:89:18:ce:fa:20:b5:6d:bb:83:e9:b7:09:f5:
91:c1:c8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:32 2026 by rpki-client