Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File: x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier: mYubAxc/sGN78WMBiDG6ACQcNP+AjsECQUSDk5JXK9o=
Subject key identifier: 5D:55:55:60:0C:42:05:DD:11:43:7C:49:98:53:74:ED:32:8B:16:48
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer: /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial: 019FACACECFC0D34DEF14959EFCC0B7A2D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 07:00:41 +0000
Manifest this update: Wed 29 Jul 2026 07:00:41 +0000
Manifest next update: Thu 30 Jul 2026 07:00:41 +0000
Files and hashes: 1: O7DvE_j0yVa8Neokc-i_HaDtXmM.roa (hash: 3lAq1Q6ERq8LruEXX9XUeCK19VsJiVKMmGnOXIPs3os=)
2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: NFVaiAmLvZZI+x29x57QwG6pVrimDOMdsYy/Wmof8GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:ec:fc:0d:34:de:f1:49:59:ef:cc:0b:7a:2d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Validity
Not Before: Jul 29 07:00:41 2026 GMT
Not After : Jul 30 07:00:41 2026 GMT
Subject: CN=5d5555600c4205dd11437c49985374ed328b1648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ab:d3:b8:d7:a6:6e:86:36:e9:6f:25:1f:79:
0f:f9:55:e8:96:53:15:42:a6:78:f3:6c:1e:16:84:
9e:74:75:c4:4a:ad:5a:9a:8e:7a:11:67:4b:16:e2:
da:b5:1b:7e:09:90:08:6a:23:f1:55:f3:70:8d:d0:
be:ba:86:37:79:45:ad:16:83:8b:b7:2f:aa:fe:10:
8e:b2:d1:a4:1c:b0:4a:d0:f8:48:ae:b6:d0:ff:a0:
93:80:10:05:9a:64:f9:e8:cc:28:a5:63:ff:3d:61:
7b:8e:38:38:2e:fc:dc:b4:b5:6a:e4:5a:3b:64:c1:
eb:18:d1:1b:ed:26:1d:6c:51:3c:ee:72:e7:ff:fe:
68:9d:1b:a4:f4:84:a8:b9:c7:5a:20:dd:2e:73:9f:
88:a1:19:be:31:ab:2d:3c:d1:00:58:c6:5f:60:a5:
25:fd:0f:9d:6d:b4:20:cc:3a:f8:f1:e3:4d:5a:bc:
be:91:5c:19:61:57:c8:20:05:63:d3:fb:07:72:ca:
aa:4d:8c:75:e5:70:41:7f:10:86:c0:d8:3d:88:76:
72:df:b5:7b:42:c9:09:89:b0:52:30:8e:da:85:c6:
04:a0:a4:5f:7e:be:38:18:91:d4:0b:e6:53:9f:30:
a7:80:92:c2:a2:6b:59:50:cf:9d:e9:40:0b:83:07:
1e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:55:55:60:0C:42:05:DD:11:43:7C:49:98:53:74:ED:32:8B:16:48
X509v3 Authority Key Identifier:
keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d0:24:08:a2:cd:0c:e6:11:3d:64:84:05:87:d5:41:8f:8b:
8f:5a:05:19:be:e3:85:33:bb:b3:80:e2:ae:f6:88:cd:b3:30:
f9:ff:c8:7e:6d:5c:d8:d0:a6:6f:29:48:f9:1a:c8:6a:74:23:
30:2f:7a:0d:08:d8:d2:2a:aa:80:58:6c:9d:2c:27:b3:58:0c:
ba:66:67:3f:de:89:06:32:94:4d:50:f0:55:5b:8b:95:b4:f5:
fc:2e:57:0c:38:0f:4b:9c:5b:7d:35:5d:c4:ee:83:83:da:e3:
34:b6:5a:1d:4e:c3:33:0e:ab:dd:4c:45:86:2c:d7:43:fc:e1:
17:a6:7e:20:21:34:3b:9b:a1:72:ca:a6:b1:c3:17:76:05:99:
aa:38:39:a7:ab:87:49:43:76:d9:16:9a:4f:7f:70:3e:a2:6c:
2f:d1:ea:3a:56:12:35:ff:d8:c3:f1:76:4f:7c:60:99:f7:47:
d9:31:5e:82:4f:8d:6a:81:99:03:a2:7e:a2:4e:eb:09:02:8d:
e4:78:1b:67:20:78:79:9b:df:4f:06:9a:c6:cb:59:1f:81:dc:
57:21:a3:76:1b:9e:42:41:05:95:5f:6c:75:9b:06:9a:ab:a9:
bd:1a:56:13:e5:da:f4:12:ea:26:ce:43:2a:15:a8:5b:94:94:
e5:04:39:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:17:12 2026 by rpki-client