Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: a9wviyvHxcn5eC7SKrnHi37k72eUdMXBGu1aIlLjuss=
Subject key identifier: EE:60:46:DA:74:4A:F2:C3:B8:1B:C6:83:26:BA:4F:0E:44:25:76:37
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 019FA8D070E112F0BECA7A4EE96ADAFC24BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 13:01:00 +0000
Manifest this update: Tue 28 Jul 2026 13:01:00 +0000
Manifest next update: Wed 29 Jul 2026 13:01:00 +0000
Files and hashes: 1: fXCfZUIcS9FszTCvtMFRqyOwHUA.roa (hash: 6cg3gD/b2Eq0ozSudTsMLJ3h/kzYzkasW+awbVRHCw8=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: COjEuiodFRwMCfL8Jp9LH69qPbd8IgtYT/mvxOH/xjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:70:e1:12:f0:be:ca:7a:4e:e9:6a:da:fc:24:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Jul 28 13:01:00 2026 GMT
Not After : Jul 29 13:01:00 2026 GMT
Subject: CN=ee6046da744af2c3b81bc68326ba4f0e44257637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:9c:16:fe:c7:64:91:db:e2:b4:44:ec:b9:
5f:54:fb:a1:0d:38:9e:87:ef:2e:cf:b2:12:fa:e8:
e2:fc:40:70:ac:44:f7:dd:a0:fb:e5:a3:f9:c7:38:
1e:48:63:9e:bd:da:ef:a7:48:f6:2d:76:56:a1:72:
c4:ed:96:f6:55:aa:f5:4c:a8:63:6d:f5:11:8e:75:
26:2f:17:0c:03:18:4a:95:b1:ea:76:56:60:ae:26:
0b:4d:47:dc:25:e2:e1:07:fc:4e:f7:f9:63:7c:61:
df:01:b3:be:1d:a7:ea:0a:c3:12:02:cc:c0:8e:c5:
10:90:9b:42:5d:de:54:44:b9:49:20:f5:8b:a7:4d:
6d:1d:94:90:31:ff:27:71:a9:73:9c:6b:d5:3f:1b:
df:8b:2b:b5:41:45:42:74:c9:70:a3:ca:c8:ec:e0:
9c:ab:36:71:13:36:42:15:1f:a8:72:e9:51:69:ff:
6b:d7:eb:57:a1:8f:15:b9:86:b6:9c:12:13:48:b5:
52:46:92:28:dd:58:59:d5:52:7f:d3:3c:d1:1f:3c:
e7:76:b7:cb:4a:e0:2f:11:d1:a1:6a:42:da:87:66:
c6:4c:50:a6:93:7b:46:b4:b4:08:db:54:d9:b0:a1:
16:e8:70:61:6d:a0:e1:61:50:90:30:12:79:94:e7:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:60:46:DA:74:4A:F2:C3:B8:1B:C6:83:26:BA:4F:0E:44:25:76:37
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:bf:d6:ed:43:9d:36:52:27:75:9e:ab:25:db:a7:87:4b:fd:
65:0c:e0:c4:06:d4:a8:2a:e0:77:ed:e4:f1:6a:d1:95:9a:12:
ca:f0:3a:4e:66:f3:0d:02:87:a0:fa:96:9c:37:af:43:10:2e:
a6:6e:2d:0b:b3:83:c6:1e:e7:38:08:e4:a1:16:00:2c:0f:5f:
c6:8b:90:ec:30:c6:5c:a9:28:ab:9a:ea:00:a5:a1:61:2f:c1:
fc:c0:84:c8:48:a6:91:88:fb:11:6f:b8:bb:13:d2:32:eb:a6:
3e:16:78:24:a8:2e:68:59:bd:c4:f7:11:2b:bb:e4:ea:e1:f1:
17:cb:e8:e8:1c:aa:98:df:f8:16:f6:c2:b4:7d:a7:0d:24:bd:
f5:b2:25:5e:c0:fa:c9:a3:0f:07:8c:26:05:6f:a6:da:33:5f:
6f:c8:9a:e5:f5:fa:c7:44:50:b1:0d:6f:42:d7:59:21:df:84:
95:5b:ca:12:5c:6e:09:bd:58:51:b4:d7:4b:be:a9:43:48:9d:
ef:d9:97:40:93:37:c5:42:87:98:ae:92:dc:e1:3a:86:41:3c:
71:67:64:a4:92:59:7d:dc:cf:53:47:eb:e2:62:13:96:e6:0b:
29:03:57:17:25:8c:f7:85:3e:ad:bc:85:34:b9:61:19:10:a7:
d6:d5:58:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0HDhEvC+ynpO6Wra/CS9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2E3NjM5MjU1NjExOGEwY2VlYjU0MTMwNjY5YzhlNjk2
ZjE1NWIwHhcNMjYwNzI4MTMwMTAwWhcNMjYwNzI5MTMwMTAwWjAzMTEwLwYDVQQD
EyhlZTYwNDZkYTc0NGFmMmMzYjgxYmM2ODMyNmJhNGYwZTQ0MjU3NjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0ecFv7HZJHb4rRE7LlfVPuhDTie
h+8uz7IS+uji/EBwrET33aD75aP5xzgeSGOevdrvp0j2LXZWoXLE7Zb2Var1TKhj
bfURjnUmLxcMAxhKlbHqdlZgriYLTUfcJeLhB/xO9/ljfGHfAbO+HafqCsMSAszA
jsUQkJtCXd5URLlJIPWLp01tHZSQMf8ncalznGvVPxvfiyu1QUVCdMlwo8rI7OCc
qzZxEzZCFR+oculRaf9r1+tXoY8VuYa2nBITSLVSRpIo3VhZ1VJ/0zzRHzzndrfL
SuAvEdGhakLah2bGTFCmk3tGtLQI21TZsKEW6HBhbaDhYVCQMBJ5lOfr2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5gRtp0SvLDuBvGgya6Tw5EJXY3MB8GA1UdIwQY
MBaAFMd6djklVhGKDO61QTBmnI5pbxVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YjFkZWItYWVhNy00OGQzLWIxZmQt
ZmZiM2E5NjUzOGFkLzEveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84YjFkZWItYWVhNy00OGQzLWIxZmQtZmZiM2E5NjUzOGFk
LzEveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxr/W7UOd
NlIndZ6rJdunh0v9ZQzgxAbUqCrgd+3k8WrRlZoSyvA6TmbzDQKHoPqWnDevQxAu
pm4tC7ODxh7nOAjkoRYALA9fxouQ7DDGXKkoq5rqAKWhYS/B/MCEyEimkYj7EW+4
uxPSMuumPhZ4JKguaFm9xPcRK7vk6uHxF8vo6ByqmN/4FvbCtH2nDSS99bIlXsD6
yaMPB4wmBW+m2jNfb8ia5fX6x0RQsQ1vQtdZId+ElVvKElxuCb1YUbTXS76pQ0id
79mXQJM3xUKHmK6S3OE6hkE8cWdkpJJZfdzPU0fr4mITluYLKQNXFyWM94U+rbyF
NLlhGRCn1tVYgw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:42:58 2026 by rpki-client