Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
File: x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json)
Hash identifier: 0PGGA71/6PwKh7lJLaF8efzbU5IW/tEkVJPcpVAz4W8=
Subject key identifier: CD:76:4B:55:30:E9:CC:29:D4:E0:41:07:65:3C:D8:BB:2D:33:68:B8
Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Certificate issuer: /CN=c77549551405d9948c662dfe4de24de055daff5e
Certificate serial: 01A16157296DF1384619B3ABBBDDFE47028B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
Manifest number: 1AB8
Signing time: Thu 22 Oct 2026 02:01:04 +0000
Manifest this update: Thu 22 Oct 2026 02:01:04 +0000
Manifest next update: Fri 23 Oct 2026 02:01:04 +0000
Files and hashes: 1: voGrppNhCGHuRZLwsuAkj7Qr9qY.roa (hash: PhKSVss4XujDromY1GHIug1qUmjQzQEMDbCWKPHUiJY=)
2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: MKBrs8kpsuPB4lynGiF5jps72a3pmHgfN0zy8ncFb7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:57:29:6d:f1:38:46:19:b3:ab:bb:dd:fe:47:02:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e
Validity
Not Before: Oct 22 02:01:04 2026 GMT
Not After : Oct 23 02:01:04 2026 GMT
Subject: CN=cd764b5530e9cc29d4e04107653cd8bb2d3368b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3c:6c:63:38:18:dc:f4:29:9e:04:2c:62:38:
39:37:19:0c:8d:5b:94:e5:89:09:0b:25:aa:fe:b5:
63:2e:45:1e:d2:9d:63:2c:bd:49:c8:08:1b:22:53:
51:c3:9b:48:5f:cc:e0:4a:a5:0f:73:a2:55:e4:78:
32:73:09:67:15:42:b2:86:e8:93:43:7d:5f:f8:8b:
73:35:aa:ea:95:87:50:2c:54:be:f5:c7:6c:cd:39:
fd:d3:90:6d:c6:cc:61:12:0b:b5:2b:90:3c:4d:4d:
df:1b:86:8e:d6:36:fa:57:80:31:5d:4d:ce:3e:92:
01:6d:e2:d8:c4:c4:72:b4:87:ac:6e:27:91:ef:f2:
65:b4:1d:fb:06:77:87:33:23:de:d8:19:4e:c9:1a:
34:c0:31:24:d3:ed:86:5f:82:f1:ba:b5:6b:3b:a6:
d4:3d:3b:de:e0:f4:d6:89:4f:57:0b:61:f1:8e:35:
06:65:ff:3a:19:f5:89:ad:dd:78:a6:68:05:d3:6d:
50:60:4c:78:0b:18:5f:95:69:aa:d4:37:24:0e:f7:
68:84:d2:01:07:b7:be:b3:bc:12:a6:14:a5:9c:39:
e3:92:23:a3:58:27:73:91:f5:9f:c1:bc:31:14:2b:
41:d1:79:56:65:29:2f:0b:69:18:c8:52:4f:52:7e:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:76:4B:55:30:E9:CC:29:D4:E0:41:07:65:3C:D8:BB:2D:33:68:B8
X509v3 Authority Key Identifier:
keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fa:2c:09:64:f8:5f:55:d7:03:fb:5c:c7:03:b1:3a:9b:b9:
3a:6b:8d:ee:d4:37:e6:ea:43:2b:5a:b8:1e:e2:5e:54:46:f9:
a7:43:4d:e8:69:52:35:b7:58:6b:05:90:7f:93:e2:29:c5:82:
42:31:63:36:b4:d3:70:63:45:c5:ad:7a:ab:63:8b:c2:1f:72:
f1:a1:58:3d:d2:2a:a7:25:5c:34:d4:7e:d3:bb:b8:f1:26:1e:
70:98:70:62:53:e9:7d:7e:0f:49:8a:39:24:50:54:8f:c3:de:
4f:04:2d:0d:aa:06:ae:d0:a9:fb:f3:b4:ce:6c:b6:e2:d2:bf:
bb:d5:31:c3:a5:74:79:37:7d:f0:e5:05:77:ab:be:17:d1:b0:
16:d8:a4:76:a1:5b:1c:75:c8:56:92:9a:06:6b:48:5d:7b:4d:
95:7d:d0:26:7e:b9:fb:f8:e2:08:e9:70:8a:f1:d1:db:f2:a3:
f6:73:38:4e:66:3c:ea:e7:23:49:13:e9:e3:bb:1f:8d:c3:4c:
3e:a6:53:d2:c2:1e:5e:cd:bb:44:1b:9a:e8:34:d9:2b:21:b8:
24:b5:bf:39:ef:10:e6:5b:af:83:2b:3c:c5:60:cc:0b:b6:3e:
72:b0:12:7d:dd:95:45:a0:44:77:92:a1:86:b1:61:f5:20:14:
38:87:a8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:54:53 2026 by rpki-client