Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
File: x3Nu3rkvk36kWJPqm89O-D8V_8g.mft (raw, json)
Hash identifier: kYvPrLhWVPQUolBO3WH1of+qz+dlK9U2yLE0THNbyUM=
Subject key identifier: F4:EB:75:EE:2C:48:DC:79:60:08:A9:0D:31:85:0F:8C:29:FF:CC:CF
Authority key identifier: C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
Certificate issuer: /CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Certificate serial: 019D37C09826187467E5CCA68049432C5994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
Manifest number: 1190
Signing time: Sun 29 Mar 2026 04:01:01 +0000
Manifest this update: Sun 29 Mar 2026 04:01:01 +0000
Manifest next update: Mon 30 Mar 2026 04:01:01 +0000
Files and hashes: 1: WgyWXzUsbTmY_1RP05v7gzecvkE.roa (hash: 21qhAR+umq3QUHZh7Y6Cu4mrPcpjOq1CbtvmUgC6mpY=)
2: x3Nu3rkvk36kWJPqm89O-D8V_8g.crl (hash: Rzd5C54hu2d4k952ebTeyepdJK+Wdg4SwfiwR4vH3/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:98:26:18:74:67:e5:cc:a6:80:49:43:2c:59:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Validity
Not Before: Mar 29 04:01:01 2026 GMT
Not After : Mar 30 04:01:01 2026 GMT
Subject: CN=f4eb75ee2c48dc796008a90d31850f8c29ffcccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:36:9a:e0:76:b7:84:af:4f:9a:20:91:ff:e8:
8d:c8:87:03:9d:6b:0e:4c:36:51:3c:d0:39:b0:99:
af:7a:ac:b9:bd:df:8e:ff:23:7f:2c:ff:99:07:40:
66:f4:b3:38:05:60:af:c1:ef:9c:fa:dd:5c:66:01:
35:4d:4d:cc:f6:ca:2c:ff:45:cd:87:4c:f4:ef:00:
de:6d:d3:62:06:a3:a9:57:38:75:e1:6c:00:1d:bc:
fc:21:8c:cb:89:a2:e5:fb:2b:cd:b8:25:e7:75:af:
17:f7:42:14:cc:79:0c:87:89:bb:bc:39:6d:bf:0d:
80:8d:0f:b5:60:fd:22:90:96:8e:b6:74:f6:93:f0:
20:98:12:f6:4b:bf:98:6a:96:43:cd:54:ca:e0:d6:
f8:26:16:2f:57:1f:cf:d9:6b:98:85:94:3a:a1:3c:
b2:74:aa:6d:5f:64:0f:ad:a2:03:35:d3:88:16:93:
70:c4:be:1b:f9:a1:3f:a8:bb:5d:fd:08:dc:13:39:
6b:f5:2b:fd:bd:ba:54:4d:6e:a1:11:bb:01:39:b5:
73:d7:d9:06:1a:42:c1:d6:ef:8b:f8:d0:9c:d2:ca:
c2:33:ba:c8:e8:5a:3d:f3:08:13:53:31:ec:cf:ec:
4b:5d:48:f7:f5:a1:38:e6:9f:bc:8d:85:5a:3d:d9:
2c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EB:75:EE:2C:48:DC:79:60:08:A9:0D:31:85:0F:8C:29:FF:CC:CF
X509v3 Authority Key Identifier:
keyid:C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:63:73:87:6c:16:c2:9e:fd:04:27:db:c3:ed:87:4e:42:bc:
3b:24:86:11:a9:fb:f1:eb:15:fa:ae:36:81:37:a6:7a:21:c3:
2a:08:19:62:98:76:ab:ef:af:24:d5:c0:b3:bf:8e:b9:5f:e6:
fd:38:73:d0:93:ce:12:db:23:28:54:df:26:95:08:f8:bb:d6:
1a:6d:bd:ff:32:07:97:70:e9:af:19:64:3b:d9:e4:75:48:b4:
dd:b4:70:8c:30:83:2e:4f:d4:57:6d:5b:55:10:5b:48:91:da:
ef:38:48:66:49:e5:a3:74:7f:c6:56:89:89:e7:d7:bd:a9:41:
80:6f:e5:43:27:61:aa:c0:e9:10:4d:dc:ca:38:96:f3:5e:4c:
3b:00:fc:6f:d5:01:9f:d9:2b:47:ec:3a:35:eb:3a:a5:a2:f1:
e6:45:c4:4b:b8:12:d2:ab:ce:bc:7b:21:88:8d:ab:6f:d3:9f:
71:32:d3:29:9c:41:89:52:6c:bb:40:04:8e:1e:6c:6f:a6:02:
14:c8:04:74:a2:b1:76:01:2d:d6:40:82:8d:70:b9:26:25:89:
5f:95:d3:01:b4:35:45:ea:94:10:6b:6c:ac:52:e5:f6:35:89:
bd:2b:ec:06:11:b9:73:8a:09:e1:a1:ff:42:92:f3:1b:ae:9a:
2d:b2:28:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:01 2026 by rpki-client