Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: z3yj9XRQE2VeROZTROfgPr726ZTC3/3VqQV0ndadezw=
Subject key identifier: 15:86:44:39:B6:AF:5E:56:C3:74:F6:47:13:FC:FB:FB:3D:BF:A3:31
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 019CAC0FDF1FD182B45D413E2802B14E6264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 01:00:47 +0000
Manifest this update: Mon 02 Mar 2026 01:00:47 +0000
Manifest next update: Tue 03 Mar 2026 01:00:47 +0000
Files and hashes: 1: fXCfZUIcS9FszTCvtMFRqyOwHUA.roa (hash: 6cg3gD/b2Eq0ozSudTsMLJ3h/kzYzkasW+awbVRHCw8=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: qlalO2vk28fIbe+trGoEX+i1WmPua1G8qry8moRzKSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:df:1f:d1:82:b4:5d:41:3e:28:02:b1:4e:62:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Mar 2 01:00:47 2026 GMT
Not After : Mar 3 01:00:47 2026 GMT
Subject: CN=15864439b6af5e56c374f64713fcfbfb3dbfa331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:0c:7a:73:41:35:8e:7d:f6:f8:a3:de:2e:
20:82:23:2a:d5:19:31:c1:17:e1:5a:e8:dc:ab:da:
31:89:57:9f:42:00:10:c7:cf:21:d1:25:dd:d6:eb:
10:18:40:21:38:54:d7:a6:19:36:96:e8:9a:0f:0f:
4a:7f:31:97:d5:21:a2:ce:4b:9b:db:cb:e1:31:ce:
54:f4:8b:89:9d:a2:3d:8e:ee:9d:b5:e2:cd:d0:dc:
59:ea:8b:6e:67:9a:c1:85:a3:54:98:07:80:0f:59:
a3:34:99:f3:fe:f4:73:5f:98:68:9e:b6:c3:8d:23:
9c:d7:0c:7c:9c:45:6a:08:25:21:60:05:bb:6a:49:
14:7c:b6:95:7c:17:85:a7:1d:54:77:c6:f4:0f:28:
b8:7b:93:a7:92:80:63:f5:d5:0b:51:3e:ca:b3:da:
0b:79:0f:89:dc:8b:97:42:ec:9e:5f:a8:91:f1:ab:
26:3a:aa:96:f7:2b:24:df:e6:98:8f:65:e6:c0:e2:
ff:67:ca:5b:13:0b:34:31:a4:30:4e:d8:bd:64:97:
c1:02:c0:63:55:c9:48:98:f2:d4:6d:88:2a:d8:b1:
c8:f8:35:a6:5f:76:eb:a7:5a:71:67:eb:21:a9:38:
a0:69:14:3e:ad:db:f7:be:c7:fd:e2:84:f5:51:65:
f4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:86:44:39:B6:AF:5E:56:C3:74:F6:47:13:FC:FB:FB:3D:BF:A3:31
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:49:db:d0:0d:28:38:86:71:19:ed:a4:1d:0f:c5:4e:f2:aa:
dc:1a:87:29:3d:b5:69:71:13:7e:88:e6:c3:91:3c:06:89:e3:
d5:4e:f2:18:d7:98:1b:01:00:6d:cf:63:24:38:cd:55:65:4d:
c6:fd:97:a1:f1:4f:f5:fd:fa:b8:aa:18:59:14:7d:69:4c:ee:
7f:a5:8f:60:4c:1c:7c:d7:a3:cb:43:32:c6:8b:45:fc:5e:84:
82:72:54:a7:bd:56:91:64:49:bc:96:3c:dd:27:b8:a7:58:82:
60:77:cc:19:24:a9:59:8d:fb:71:c3:db:90:e7:f7:54:49:ba:
ca:7b:1f:c6:f2:6e:1a:a8:ec:e7:92:4e:27:4c:ad:4e:f5:b8:
37:ab:5c:77:96:bb:19:6c:3e:79:1f:0c:ab:de:29:51:e8:6e:
f9:29:53:41:54:4b:44:33:a6:30:f0:8d:c3:bb:50:02:98:3c:
10:6f:98:2c:6b:09:4a:d2:91:72:dd:c1:48:7e:3b:52:95:2b:
a5:02:e0:12:01:2d:31:a1:43:11:c5:6e:c4:31:db:cf:0e:af:
8a:17:45:1d:bd:03:63:8b:fb:dd:51:6a:17:da:2b:76:fc:12:
a6:68:33:08:52:05:3d:98:59:4b:d9:c0:5c:d1:f3:4d:22:50:
be:c2:97:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:57 2026 by rpki-client