Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: KUC8j06fL+PjXvAci59w+yYTLbJz7ntNrQoejvCwM/w=
Subject key identifier: 05:31:8B:1B:57:94:CD:16:24:5A:B2:41:BA:5E:D7:78:61:FE:3C:5D
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 019DA341852B40164E8B183F2C63E3CA5CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 01:01:13 +0000
Manifest this update: Sun 19 Apr 2026 01:01:13 +0000
Manifest next update: Mon 20 Apr 2026 01:01:13 +0000
Files and hashes: 1: fXCfZUIcS9FszTCvtMFRqyOwHUA.roa (hash: 6cg3gD/b2Eq0ozSudTsMLJ3h/kzYzkasW+awbVRHCw8=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: B/Nt7oTONdLnItDYGeLk/pheLk1B9sN5DEwvHB75d+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:85:2b:40:16:4e:8b:18:3f:2c:63:e3:ca:5c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Apr 19 01:01:13 2026 GMT
Not After : Apr 20 01:01:13 2026 GMT
Subject: CN=05318b1b5794cd16245ab241ba5ed77861fe3c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:ef:b9:aa:a9:54:d8:0c:e9:3e:a2:fa:02:
b5:e0:cc:01:e6:cf:12:5b:dd:1e:ef:44:7d:23:04:
51:a1:80:82:0e:87:4b:57:dd:f1:49:66:4d:99:63:
fb:0a:9e:16:ca:55:74:1e:d4:25:bf:30:d8:f8:92:
da:01:09:f9:20:59:d8:f7:b1:3a:78:58:2c:e1:b2:
05:ff:82:22:09:6e:89:a2:38:7b:b0:49:21:b1:7e:
a1:22:07:3b:a1:a9:53:90:c0:f9:20:e0:03:38:97:
dc:ee:d3:55:ec:a5:f3:dd:65:9a:9f:21:26:6c:8d:
b3:0e:4d:a3:45:6f:20:ae:9c:a2:49:80:ca:db:fb:
76:7c:77:3c:72:26:e4:e0:63:13:d9:4f:b3:f9:53:
d5:95:98:20:29:f0:d3:5f:43:ec:ba:59:62:5e:09:
ab:ab:a3:13:a1:18:5e:0b:7a:52:8e:24:71:ae:83:
ef:4f:dd:9f:b7:6e:2b:97:a3:5a:8c:3c:4a:ca:27:
4d:6b:fc:be:cc:28:ba:70:57:53:8f:8a:65:2c:09:
df:eb:7b:8e:68:ea:df:0c:9b:e8:49:46:ef:ad:23:
17:ae:f1:89:a8:8b:b9:17:22:dc:36:d7:e9:70:d7:
39:23:c4:cf:f7:4a:03:cc:b7:ca:08:c8:ce:e4:21:
5a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:31:8B:1B:57:94:CD:16:24:5A:B2:41:BA:5E:D7:78:61:FE:3C:5D
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ff:d1:b3:5e:e0:e1:35:01:5e:44:8a:a8:09:a2:12:23:17:
75:c9:c1:ac:ac:e1:e5:b3:ce:c7:d6:a3:c9:68:bc:2b:e8:ea:
28:ce:6e:a5:c0:85:99:a5:ec:54:04:8c:ed:3b:ad:0b:7e:40:
5f:4e:b7:f3:45:a2:6d:4c:e1:bb:79:8f:3d:38:e3:77:fc:e6:
9a:e1:e6:f2:16:b5:73:a5:bd:c7:a4:cc:b8:e6:4b:c0:27:53:
0d:30:25:22:15:22:71:19:6c:0e:7a:85:33:8f:8c:6b:78:a6:
bd:7d:5d:87:28:9c:27:95:39:f0:60:8e:b1:69:95:f7:bb:d7:
56:e1:fa:25:46:db:73:98:85:d8:77:33:4d:e2:5d:c1:1f:b9:
34:9a:ec:ef:5d:9c:c0:ed:fe:fb:12:d4:84:21:39:f2:1d:35:
57:13:df:25:0e:8a:3d:3f:e9:8f:6a:9e:6f:5e:50:2d:f0:73:
d9:29:f2:09:fd:84:4c:82:26:80:1a:60:00:31:dd:4a:be:a0:
a5:6d:88:56:2f:be:e2:e8:8c:1d:c0:c2:2f:7c:22:27:56:3b:
3c:9b:58:69:de:2f:e8:cb:ec:8d:31:79:fb:99:22:2b:5a:9d:
2d:89:30:72:38:6b:46:11:8a:02:e1:b7:93:a1:5d:91:25:84:
da:e3:6b:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jQYUrQBZOixg/LGPjylzfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2E3NjM5MjU1NjExOGEwY2VlYjU0MTMwNjY5YzhlNjk2
ZjE1NWIwHhcNMjYwNDE5MDEwMTEzWhcNMjYwNDIwMDEwMTEzWjAzMTEwLwYDVQQD
EygwNTMxOGIxYjU3OTRjZDE2MjQ1YWIyNDFiYTVlZDc3ODYxZmUzYzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2bvuaqpVNgM6T6i+gK14MwB5s8S
W90e70R9IwRRoYCCDodLV93xSWZNmWP7Cp4WylV0HtQlvzDY+JLaAQn5IFnY97E6
eFgs4bIF/4IiCW6Jojh7sEkhsX6hIgc7oalTkMD5IOADOJfc7tNV7KXz3WWanyEm
bI2zDk2jRW8grpyiSYDK2/t2fHc8cibk4GMT2U+z+VPVlZggKfDTX0PsulliXgmr
q6MToRheC3pSjiRxroPvT92ft24rl6NajDxKyidNa/y+zCi6cFdTj4plLAnf63uO
aOrfDJvoSUbvrSMXrvGJqIu5FyLcNtfpcNc5I8TP90oDzLfKCMjO5CFamQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUxixtXlM0WJFqyQbpe13hh/jxdMB8GA1UdIwQY
MBaAFMd6djklVhGKDO61QTBmnI5pbxVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YjFkZWItYWVhNy00OGQzLWIxZmQt
ZmZiM2E5NjUzOGFkLzEveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84YjFkZWItYWVhNy00OGQzLWIxZmQtZmZiM2E5NjUzOGFk
LzEveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPP/Rs17g
4TUBXkSKqAmiEiMXdcnBrKzh5bPOx9ajyWi8K+jqKM5upcCFmaXsVASM7TutC35A
X06380WibUzhu3mPPTjjd/zmmuHm8ha1c6W9x6TMuOZLwCdTDTAlIhUicRlsDnqF
M4+Ma3imvX1dhyicJ5U58GCOsWmV97vXVuH6JUbbc5iF2HczTeJdwR+5NJrs712c
wO3++xLUhCE58h01VxPfJQ6KPT/pj2qeb15QLfBz2SnyCf2ETIImgBpgADHdSr6g
pW2IVi++4uiMHcDCL3wiJ1Y7PJtYad4v6MvsjTF5+5kiK1qdLYkwcjhrRhGKAuG3
k6FdkSWE2uNr0Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:10:20 2026 by rpki-client