Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File: x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier: zye/1YCnRxzz9Z8WM3+F9/Nv5Z/GVMIcHBgkLEjXcow=
Subject key identifier: 39:0E:41:6B:0F:78:1B:F1:6A:E5:08:CB:C8:E1:F7:46:E9:E7:C3:7C
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer: /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial: 01A0ED41D54A7CE76673BC007FDE55192AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number: 1A7A
Signing time: Tue 29 Sep 2026 13:01:49 +0000
Manifest this update: Tue 29 Sep 2026 13:01:49 +0000
Manifest next update: Wed 30 Sep 2026 13:01:49 +0000
Files and hashes: 1: O7DvE_j0yVa8Neokc-i_HaDtXmM.roa (hash: 3lAq1Q6ERq8LruEXX9XUeCK19VsJiVKMmGnOXIPs3os=)
2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: Wu3ZHmQ55xBG2EFyPm8DptroIo0sdMTTpQQTxpfpZ9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:41:d5:4a:7c:e7:66:73:bc:00:7f:de:55:19:2a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Validity
Not Before: Sep 29 13:01:49 2026 GMT
Not After : Sep 30 13:01:49 2026 GMT
Subject: CN=390e416b0f781bf16ae508cbc8e1f746e9e7c37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:43:34:2f:f6:37:b1:1d:4e:67:bd:36:fc:da:
2d:4b:85:5a:b8:16:60:62:d3:57:bd:80:3b:fd:eb:
7c:26:c8:f2:c6:aa:ec:59:94:82:e6:e6:81:dd:f7:
05:84:b7:f1:13:08:f5:92:be:cb:42:16:e3:df:4d:
73:2a:d4:7b:f4:7e:7f:9f:10:20:0f:b2:b2:43:40:
d9:1e:01:ee:fa:50:e1:fd:50:60:eb:20:70:36:8f:
02:74:a8:25:4d:2d:a2:76:02:2e:ce:c7:92:e5:d2:
39:33:ab:c7:17:ec:b5:ac:56:f4:eb:ec:3f:f3:9f:
d3:fe:2a:42:2b:cf:5d:94:ec:ed:cf:4c:91:96:48:
43:30:02:fc:66:44:0f:26:9e:5d:37:90:42:1c:4f:
9a:07:8e:f6:13:ca:d9:9d:47:08:f3:b3:e5:e6:c4:
21:4b:60:c7:b6:a6:2e:45:0e:41:93:5b:aa:8e:ff:
68:6d:a1:2c:41:4a:ca:c8:d9:d0:db:84:84:67:c7:
51:df:4d:2c:b3:ec:b3:27:57:96:1f:85:42:90:a7:
39:c1:be:08:ae:d8:db:8a:bf:73:25:42:16:39:90:
61:f5:5e:aa:36:c0:d3:43:ca:38:55:53:f2:71:3e:
a0:d7:fc:18:5a:fe:5c:47:43:18:a0:d6:d6:7e:0b:
76:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0E:41:6B:0F:78:1B:F1:6A:E5:08:CB:C8:E1:F7:46:E9:E7:C3:7C
X509v3 Authority Key Identifier:
keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:23:3e:9f:49:35:89:7a:61:a1:66:ce:be:7b:30:67:8f:fe:
9a:2a:3a:a8:98:a4:2e:06:88:5f:e1:a7:cc:98:e3:89:e0:a0:
07:ea:3c:4e:58:c0:98:98:56:91:70:68:c1:31:10:01:c6:4b:
45:26:c1:7d:a4:e8:43:63:fe:40:cd:7c:32:3a:d6:cb:2b:cb:
3c:bb:b5:ac:e1:5a:26:88:a4:c4:67:88:d6:6a:7f:ad:7b:5a:
34:fd:4b:78:b2:31:41:7f:f8:f3:50:29:fa:bd:f5:02:68:12:
de:d1:5a:6c:ae:69:4c:54:ca:93:fa:a7:85:0c:36:20:e4:9e:
4a:22:c4:42:13:d2:f8:1b:5c:f0:ba:21:fc:0e:ad:7d:4b:ae:
e0:7c:db:6c:94:67:1c:1f:d0:2b:f9:15:cc:02:45:a0:47:7d:
7a:91:56:0a:1e:1a:41:e1:81:72:19:5b:e7:ea:89:75:5a:5d:
5c:e2:ce:c8:2f:e8:20:f6:06:04:66:86:5a:a3:37:7a:26:e7:
0f:86:38:57:57:42:30:b1:9e:36:fa:5a:a6:3f:98:9f:42:a6:
e1:14:aa:9e:17:41:41:ba:ab:b1:67:7b:ef:d5:0d:e8:e6:7c:
9a:ec:0f:8f:cf:e1:6c:81:e5:95:4f:fa:71:ad:c2:37:89:72:
03:19:62:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDtQdVKfOdmc7wAf95VGSrIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzE3MWE1ZTQ1NTA2Yzg2YzkwMTZiYmU1YjE0YjNkYjhi
YzZjYzMwHhcNMjYwOTI5MTMwMTQ5WhcNMjYwOTMwMTMwMTQ5WjAzMTEwLwYDVQQD
EygzOTBlNDE2YjBmNzgxYmYxNmFlNTA4Y2JjOGUxZjc0NmU5ZTdjMzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40M0L/Y3sR1OZ702/NotS4VauBZg
YtNXvYA7/et8JsjyxqrsWZSC5uaB3fcFhLfxEwj1kr7LQhbj301zKtR79H5/nxAg
D7KyQ0DZHgHu+lDh/VBg6yBwNo8CdKglTS2idgIuzseS5dI5M6vHF+y1rFb06+w/
85/T/ipCK89dlOztz0yRlkhDMAL8ZkQPJp5dN5BCHE+aB472E8rZnUcI87Pl5sQh
S2DHtqYuRQ5Bk1uqjv9obaEsQUrKyNnQ24SEZ8dR300ss+yzJ1eWH4VCkKc5wb4I
rtjbir9zJUIWOZBh9V6qNsDTQ8o4VVPycT6g1/wYWv5cR0MYoNbWfgt27QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkOQWsPeBvxauUIy8jh90bp58N8MB8GA1UdIwQY
MBaAFMdxcaXkVQbIbJAWu+WxSz24vGzDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZjhmNTgtZDgzYy00NDBlLTk5MGIt
YjQzOGI1Yjg4Y2YyLzEveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83ZjhmNTgtZDgzYy00NDBlLTk5MGItYjQzOGI1Yjg4Y2Yy
LzEveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSM+n0k1
iXphoWbOvnswZ4/+mio6qJikLgaIX+GnzJjjieCgB+o8TljAmJhWkXBowTEQAcZL
RSbBfaToQ2P+QM18MjrWyyvLPLu1rOFaJoikxGeI1mp/rXtaNP1LeLIxQX/481Ap
+r31AmgS3tFabK5pTFTKk/qnhQw2IOSeSiLEQhPS+Btc8Loh/A6tfUuu4HzbbJRn
HB/QK/kVzAJFoEd9epFWCh4aQeGBchlb5+qJdVpdXOLOyC/oIPYGBGaGWqM3eibn
D4Y4V1dCMLGeNvpapj+Yn0Km4RSqnhdBQbqrsWd779UN6OZ8muwPj8/hbIHllU/6
ca3CN4lyAxliCQ==
-----END CERTIFICATE-----
Generated at Wed Sep 30 01:06:14 2026 by rpki-client