Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: 6CxJTvayQLqtmUJ2nCtWX3JmKLgzf6XvXpOrYjET4RE=
Subject key identifier: E2:5D:9E:F2:0F:97:C3:D7:F1:F9:6E:68:25:78:96:09:86:62:37:12
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 019DA52FA1A12D8BBA228D84BF696D659287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 10:00:55 +0000
Manifest this update: Sun 19 Apr 2026 10:00:55 +0000
Manifest next update: Mon 20 Apr 2026 10:00:55 +0000
Files and hashes: 1: fXCfZUIcS9FszTCvtMFRqyOwHUA.roa (hash: 6cg3gD/b2Eq0ozSudTsMLJ3h/kzYzkasW+awbVRHCw8=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: FZN/1ptmahQglSHL+53xXw0ZU414LLm52ssfR8h9q+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:a1:a1:2d:8b:ba:22:8d:84:bf:69:6d:65:92:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Apr 19 10:00:55 2026 GMT
Not After : Apr 20 10:00:55 2026 GMT
Subject: CN=e25d9ef20f97c3d7f1f96e682578960986623712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:d6:11:5c:fa:7c:6e:5b:3a:6f:be:ef:7b:
c9:7a:9f:d1:3b:fa:72:f1:d4:4e:c2:2d:49:bd:ec:
50:85:0d:08:f3:29:8f:a8:6e:17:53:e4:d3:97:8b:
eb:0d:e3:07:c1:ef:9a:16:a9:e7:a2:c3:c4:0a:50:
5b:f1:df:45:d4:61:18:46:ef:ba:d6:8e:3d:ce:33:
a9:e1:a7:e5:d0:1e:42:ec:fc:e9:da:ce:97:f2:8e:
08:b0:53:b9:ab:3b:70:e1:7a:cc:86:a0:59:96:58:
40:bb:b9:26:0d:2c:49:08:4d:f9:25:9a:80:b5:40:
76:75:4d:fd:ad:c1:76:5e:4e:b9:76:28:58:16:09:
ff:22:6c:ae:d5:6c:08:48:19:81:f9:96:84:bf:fa:
e2:bf:de:e0:32:f7:c7:8f:67:7c:af:f1:76:e1:c2:
7c:4e:32:aa:ba:42:48:66:b7:02:83:8f:35:0a:a0:
70:ef:a9:d9:29:4a:73:20:66:56:39:c6:9b:17:2c:
c6:a4:3f:0a:8d:18:5f:c0:ea:93:d7:78:97:d3:be:
53:fb:a6:26:35:fc:49:29:fd:44:60:86:1b:02:50:
65:30:b8:63:ab:b1:ab:e9:85:fa:af:cf:fb:fe:6d:
82:ce:ec:8e:a7:da:f5:0c:08:e5:6d:eb:7e:e9:71:
0f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5D:9E:F2:0F:97:C3:D7:F1:F9:6E:68:25:78:96:09:86:62:37:12
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:2b:00:d0:77:17:60:95:4b:76:2c:23:53:b8:a7:3e:ec:a5:
b9:d7:72:c3:b1:c2:c8:7c:94:30:05:95:3a:40:88:26:b2:fa:
c7:db:da:60:b3:cd:ea:08:c0:b1:dc:03:21:50:19:05:20:9b:
e1:8e:45:b2:f7:46:69:d4:a2:1a:66:f1:6c:68:80:e8:cc:11:
ef:9d:4d:05:63:55:e1:b7:59:71:5c:59:6f:a6:ff:f5:82:66:
83:1d:a3:4d:b6:4f:dd:95:e6:2d:9a:11:66:31:a2:bb:c0:5b:
43:fa:7f:e4:c8:e6:23:fe:63:eb:0e:2e:54:b0:14:f0:29:da:
c7:b8:e1:e2:66:09:9b:3b:d0:ac:23:34:97:37:08:2a:17:dc:
16:ab:6f:17:b9:c6:5e:85:98:7d:c3:79:19:6f:18:25:e6:07:
d6:ac:62:ad:2a:5b:41:03:7c:7d:b0:82:ef:38:7a:d1:b3:8b:
6b:a5:26:3f:18:b5:32:bc:67:47:ef:d0:51:c3:db:cd:2b:eb:
cf:b4:c2:15:cf:f7:b2:10:10:68:df:8b:60:a7:29:7d:e7:9e:
dc:a4:30:28:ce:b7:37:c5:5f:06:ca:7a:42:b0:7c:5d:44:1f:
9a:fc:6f:74:f1:41:fa:e3:3a:c2:cc:c1:e2:31:8d:c4:65:4e:
f1:60:07:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:15:44 2026 by rpki-client