Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json)
Hash identifier: ZoUdqC2NLvzzMRGS8Nufpm41gf4R563gSRSSkirBKsA=
Subject key identifier: 11:84:3A:D7:FA:59:67:67:86:B4:E4:12:C3:A4:5A:98:B2:42:92:B7
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 019D38D2D7AAC083F715CF3A339624EC6AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
Manifest number: 189B
Signing time: Sun 29 Mar 2026 09:00:34 +0000
Manifest this update: Sun 29 Mar 2026 09:00:34 +0000
Manifest next update: Mon 30 Mar 2026 09:00:34 +0000
Files and hashes: 1: A8hQT388ItEqoQYFOhqCCsEIlTI.roa (hash: 97e6isQPIjw70otEwzd0gLtQm2r1Kv7FnFS5tJziJjw=)
2: F_3SEAz-EKjAxo_g2p-mjUGzRIs.roa (hash: j/8Kr9e/zq+L0yS9GkMCdBYgA7yMxgnitG1QiH62Ck0=)
3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: hP6YYzVTMTyMZDm93m+i5qukdqFcCM1VFEygOLL5Xyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d7:aa:c0:83:f7:15:cf:3a:33:96:24:ec:6a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: Mar 29 09:00:34 2026 GMT
Not After : Mar 30 09:00:34 2026 GMT
Subject: CN=11843ad7fa59676786b4e412c3a45a98b24292b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:6b:7f:4f:3e:c0:0f:0d:79:44:ce:c7:7a:
23:92:b0:a8:2a:c7:2e:fd:4c:98:a9:d2:62:20:b2:
19:f6:fd:ae:ca:34:f3:5a:ee:60:d1:56:e5:13:25:
4c:b7:bb:0f:7e:a4:87:70:4b:44:e3:2a:35:c0:72:
c4:77:5e:f8:4a:58:9a:9a:78:39:03:0c:05:e5:05:
a6:fd:46:b2:20:72:5e:88:80:87:c7:12:fe:a7:61:
e0:97:ab:8b:ed:05:ed:77:73:1c:52:31:cf:8f:06:
b3:a2:e3:a0:33:13:2c:46:a7:24:62:b7:e2:1c:ba:
45:4f:73:42:f8:51:a9:1f:de:1c:7e:f9:e5:26:01:
02:2d:c5:21:9c:19:c5:11:f5:86:b3:9b:94:95:fd:
cb:b4:bc:4c:18:cd:31:61:cb:6f:86:b1:27:71:a3:
26:c6:5a:3e:0d:b3:29:d2:d1:2c:65:4a:87:1f:c7:
f0:fa:03:cc:1b:89:0a:91:2a:c6:4c:e8:8a:99:dc:
37:7e:ab:0b:6c:cf:4b:aa:55:68:6b:52:4e:18:ce:
be:f6:ba:2d:0c:0a:e2:53:2d:77:09:04:fa:ca:5f:
2f:4b:40:b8:83:2f:70:2e:38:9c:25:40:46:36:6d:
20:56:6d:bf:b2:ef:9e:89:7f:a1:2b:3f:a1:ff:cf:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:84:3A:D7:FA:59:67:67:86:B4:E4:12:C3:A4:5A:98:B2:42:92:B7
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fc:e4:46:8a:20:89:00:a1:70:25:88:e1:54:ce:49:e7:08:
21:5f:e9:51:62:6c:b6:7b:04:a6:54:06:51:06:2d:08:85:03:
cc:f4:77:90:e8:51:5b:80:25:62:0b:4c:38:c9:82:8f:d4:a4:
ff:2c:70:08:2d:d5:e2:c0:9d:4e:cd:2b:ad:9c:3a:a0:0a:0a:
9e:af:9d:e5:37:06:ab:f2:9b:fc:f7:a1:18:78:6c:53:72:17:
38:90:83:87:bb:62:3d:62:39:0b:37:98:57:5c:08:f0:f8:a5:
4a:f3:e3:86:c1:4e:5a:7a:08:84:63:ae:be:68:ee:0d:f3:72:
6c:49:b1:67:e4:fb:5a:dd:d6:1e:4c:27:3e:67:6c:61:70:aa:
92:1e:fd:63:33:b9:f0:70:4d:2d:51:30:95:8a:00:b9:46:b7:
54:b9:ba:89:05:47:b2:b9:fe:d4:7d:8b:af:46:2c:d7:8f:3c:
17:89:5d:ff:17:8a:0f:60:63:37:63:ab:3e:a1:81:0e:35:36:
6a:32:35:2a:32:c6:28:52:a9:49:9e:d4:f7:95:fd:a3:5e:56:
fc:e3:1c:b0:a3:2d:5c:5f:90:cb:af:89:cd:d6:46:83:e1:4a:
0f:21:17:de:0c:85:ae:41:60:48:43:97:97:8f:b8:cb:2c:43:
9f:ad:49:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:10 2026 by rpki-client