Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
File: x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json)
Hash identifier: Hx1lpb7fPpSFV3QPPA+WD/+xWikuVXKU38j6Rub9n8c=
Subject key identifier: 69:28:EF:C2:A9:B4:BA:F4:C6:EC:3E:96:24:49:DF:EA:2D:70:39:3D
Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Certificate issuer: /CN=c77549551405d9948c662dfe4de24de055daff5e
Certificate serial: 019D394114D95E84CB038602FE71D4C8E7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:00:59 +0000
Manifest this update: Sun 29 Mar 2026 11:00:59 +0000
Manifest next update: Mon 30 Mar 2026 11:00:59 +0000
Files and hashes: 1: voGrppNhCGHuRZLwsuAkj7Qr9qY.roa (hash: PhKSVss4XujDromY1GHIug1qUmjQzQEMDbCWKPHUiJY=)
2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: vl6iAwqSQpkoBSrLK/vqY8QEmqwW0Vnnp65wNoc7u3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:14:d9:5e:84:cb:03:86:02:fe:71:d4:c8:e7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e
Validity
Not Before: Mar 29 11:00:59 2026 GMT
Not After : Mar 30 11:00:59 2026 GMT
Subject: CN=6928efc2a9b4baf4c6ec3e962449dfea2d70393d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b1:8b:32:63:62:ca:25:45:3f:e9:c4:6d:3b:
a7:96:5b:1a:05:cb:8f:82:d4:61:76:06:15:a9:4e:
60:26:4d:89:4c:38:d0:93:20:e5:a7:ae:be:78:53:
15:8a:21:39:7d:4e:d3:29:90:60:f3:4d:27:52:18:
01:2b:1a:d5:a6:d8:e0:27:b4:ad:df:b3:c7:19:c5:
e3:08:cb:1e:bb:eb:e0:09:07:c4:56:7d:50:94:77:
ff:4c:7f:61:32:b4:c4:38:0e:4f:ce:e4:fb:22:5e:
91:b8:3a:34:af:82:f0:54:fb:71:6d:9d:b4:4b:4f:
cd:35:49:3b:54:25:48:3f:44:ef:47:7d:16:c9:52:
3c:b3:87:85:a9:bf:2a:a5:29:a1:3a:09:34:b7:b3:
51:9c:45:9d:ee:bf:54:81:b3:51:7b:86:80:23:a0:
58:c2:80:8a:36:23:f1:c8:a2:1f:91:58:d1:7c:d1:
0e:5a:6d:d5:29:08:0f:37:6d:b5:fd:51:57:b0:3d:
ec:f3:4f:1f:0b:bf:e1:ee:03:7d:c8:a0:c3:0c:15:
7a:bd:99:db:95:34:20:b6:f6:d4:0f:24:68:ce:c8:
39:93:f4:f3:ae:c6:3f:c4:b1:ea:16:f2:9d:ed:0d:
46:a8:e5:86:72:a2:da:ab:d6:71:ba:57:ff:c4:be:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:28:EF:C2:A9:B4:BA:F4:C6:EC:3E:96:24:49:DF:EA:2D:70:39:3D
X509v3 Authority Key Identifier:
keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ce:7b:5d:bf:17:92:c3:99:05:8f:8b:d1:64:0b:87:25:5d:
36:84:70:b7:92:84:5f:bd:2f:7f:9b:96:13:56:4b:ba:69:37:
e5:a7:92:25:cf:5a:c9:34:4d:9d:80:c4:9b:9f:a3:f0:31:82:
1d:6a:55:f2:4f:7b:1c:35:fc:c7:57:29:1c:73:65:2c:e0:ed:
31:5d:a4:88:0c:8d:bd:41:95:df:f6:54:30:84:da:5c:a4:b5:
a4:25:31:65:7a:04:8d:49:cf:60:d8:be:9d:9c:18:2d:91:2d:
aa:72:1d:59:ef:a5:5c:78:fe:5e:18:96:fb:94:06:fd:b2:86:
26:6b:1b:91:d1:46:d1:d9:6f:7c:eb:03:d2:14:b7:c0:9c:57:
75:6c:4a:79:eb:40:04:a3:9f:57:7f:e0:e1:7a:ad:53:5e:b8:
d9:f0:4c:bd:bd:d6:cf:89:6f:18:85:80:27:72:54:32:aa:6d:
e5:46:33:35:12:c8:62:ea:13:a0:37:0a:d5:5c:6e:57:e7:92:
21:84:3d:3f:a0:c1:c1:84:ad:63:e3:27:b0:90:e3:e5:81:28:
c6:e7:ae:68:a9:83:41:7a:01:d8:cb:89:6c:09:18:c9:c1:c1:
6d:4c:34:be:a1:d0:9e:97:cc:76:94:6d:c1:70:8a:3d:42:fd:
30:83:00:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:29 2026 by rpki-client