Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
File: x3_gBdfljsAzypq6h-BgYCFTNhc.mft (raw, json)
Hash identifier: G5PHxJBe2xblSSFAYKDpK1Ng2mq/2IfxbGl/pJSGLNc=
Subject key identifier: B0:95:A4:4B:A0:47:01:61:92:0C:6F:55:0F:D9:C1:3E:60:B4:AE:F9
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Certificate issuer: /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial: 019D38D2D2DF2AFB51ACF3E938CF4E01F850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
Manifest number: 0D36
Signing time: Sun 29 Mar 2026 09:00:33 +0000
Manifest this update: Sun 29 Mar 2026 09:00:33 +0000
Manifest next update: Mon 30 Mar 2026 09:00:33 +0000
Files and hashes: 1: 7873A-doZHT3z3WdUC9-3ek1dsM.roa (hash: GiS1ksDLyImHjpb2W7ngtoEXY3bCfhYHNgRK23R2O8Q=)
2: SJYIkLcX_CNS1SprQ_soGckZIGQ.roa (hash: eDm4/cj9IxvpczJ1uU/Y+99aLmMJiA5yew/A11GEYVs=)
3: rf5y8gSq5wsa5gp2pUsrZdvorF4.roa (hash: LhVJmNP7LYW2COhuVTfB4/5Ch+7vx0bLlcnCO+/fQfk=)
4: x3_gBdfljsAzypq6h-BgYCFTNhc.crl (hash: nJMon0iDhF3Cs5yqS2iNbC5bl9DbHzNVpmZW0GStLds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d2:df:2a:fb:51:ac:f3:e9:38:cf:4e:01:f8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
Validity
Not Before: Mar 29 09:00:33 2026 GMT
Not After : Mar 30 09:00:33 2026 GMT
Subject: CN=b095a44ba0470161920c6f550fd9c13e60b4aef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:8f:56:d7:1c:f7:51:82:72:28:b6:9a:9c:
59:cc:67:0e:a8:8d:18:0e:1d:c9:ae:5f:5f:29:0e:
20:bd:10:5f:93:2e:8c:00:17:6e:e4:13:95:d2:bf:
9f:c9:c6:25:59:52:93:1f:4d:16:3f:dc:35:90:69:
6c:ed:25:95:11:85:3a:15:07:74:00:c5:00:61:34:
4a:45:8f:fd:56:15:1c:b7:f7:6d:81:22:b6:f2:bb:
04:87:4c:f7:22:38:fa:e0:89:b9:ee:24:f8:3f:1e:
e9:c9:e5:be:33:9a:ad:72:99:ae:92:b6:7d:30:f8:
91:e4:fe:8f:3e:28:1f:79:31:9b:22:df:71:53:73:
75:76:df:c8:d6:4d:65:94:41:6b:e7:09:6b:05:35:
e4:86:b6:a8:13:e4:38:05:32:d3:7e:7e:31:83:f2:
d1:7d:3b:32:e1:9f:0e:4d:e5:89:51:d1:fa:98:41:
53:ce:11:f0:87:02:c2:0a:f2:d2:a7:85:9e:66:b7:
90:93:9f:9e:e4:4d:a3:bb:13:71:cb:d0:3c:f8:cc:
a5:a8:aa:c9:b2:f9:b1:06:7c:21:97:b5:1b:71:99:
69:b7:57:46:3a:7d:65:95:13:af:ec:2e:b5:4d:ad:
ae:a5:d3:8f:10:c8:0b:66:11:bc:28:55:f5:a4:24:
2d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:95:A4:4B:A0:47:01:61:92:0C:6F:55:0F:D9:C1:3E:60:B4:AE:F9
X509v3 Authority Key Identifier:
keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:41:23:03:92:c5:a3:c1:17:42:9e:56:91:95:ca:0f:0c:68:
f8:52:aa:8f:c1:a1:89:7d:a2:d3:a0:b9:4c:a1:d9:a5:94:5d:
c3:39:3e:d6:09:fa:5a:48:39:fa:43:b0:08:22:cd:76:55:ef:
54:10:c0:4b:6b:f6:97:d9:9f:c5:28:f2:d2:95:46:d0:08:32:
e4:15:fa:36:36:7e:e3:0f:1f:ca:7d:0e:36:a0:da:ef:dc:0d:
7d:db:cd:00:bf:62:55:c4:4b:00:92:da:40:a0:a1:b6:20:69:
84:5b:cc:08:8c:1e:30:2c:dd:44:61:77:04:f7:62:3a:71:6b:
ca:23:fe:b0:1c:22:e0:04:bc:cc:8a:f2:0d:29:94:09:d4:0d:
e2:d1:8b:88:f1:a8:c6:7a:34:5f:65:6d:16:93:bd:06:24:36:
b7:e9:73:87:04:20:e5:68:d6:8f:ec:d6:23:2d:85:a9:66:61:
94:ea:30:f3:60:36:f8:c2:9e:e0:68:e1:2f:f0:ba:1c:fe:65:
70:c3:57:c7:ef:2a:02:de:26:a7:05:10:2d:4c:6a:27:6e:6b:
14:6e:68:80:30:a0:33:4e:79:b6:6c:3a:5c:f2:bb:38:af:10:
e8:08:13:cb:38:40:f9:c8:cf:59:f7:bf:7f:3e:66:9a:5d:1d:
16:02:3c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:13 2026 by rpki-client