Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json)
Hash identifier: zdnAmmmMLxAnCis6RZ3HwZuGoMN9c8F/lYpFxt8MgaQ=
Subject key identifier: BE:86:09:06:87:66:9A:6A:5B:C3:A4:2E:A0:5E:A5:13:01:55:5F:3D
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 019EB92252A0D9738614BFAD7D2C985351C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
Manifest number: 1962
Signing time: Fri 12 Jun 2026 00:01:34 +0000
Manifest this update: Fri 12 Jun 2026 00:01:34 +0000
Manifest next update: Sat 13 Jun 2026 00:01:34 +0000
Files and hashes: 1: A8hQT388ItEqoQYFOhqCCsEIlTI.roa (hash: 97e6isQPIjw70otEwzd0gLtQm2r1Kv7FnFS5tJziJjw=)
2: F_3SEAz-EKjAxo_g2p-mjUGzRIs.roa (hash: j/8Kr9e/zq+L0yS9GkMCdBYgA7yMxgnitG1QiH62Ck0=)
3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: NwalqXt58qkMjsvPcumn6uOgJnuZUEwL6LC9Mk73tHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 00:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:22:52:a0:d9:73:86:14:bf:ad:7d:2c:98:53:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: Jun 12 00:01:34 2026 GMT
Not After : Jun 13 00:01:34 2026 GMT
Subject: CN=be86090687669a6a5bc3a42ea05ea51301555f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:61:5e:6e:50:63:ad:eb:0b:95:2a:c4:7b:
cc:40:a2:b3:75:99:07:e2:71:13:0d:0c:be:bd:77:
28:0a:b6:35:e4:6f:0d:68:47:ea:05:28:0d:2c:fd:
ee:d5:6e:b4:db:bb:60:8a:75:20:9b:c3:d3:d6:1b:
ea:4a:4a:ec:05:a5:d1:50:ac:09:59:51:f5:04:ac:
bf:0d:61:d7:aa:8a:b9:99:c6:9a:6f:9d:79:77:cb:
2d:d2:df:df:33:48:7b:69:ff:ec:10:29:2b:d4:be:
7e:94:71:10:76:a9:2e:fe:82:72:58:f3:74:6c:c8:
d7:36:22:ba:30:b1:07:fc:64:dd:b2:52:2b:76:ed:
be:c7:5f:e3:e3:2f:73:49:79:a0:7a:5b:42:be:c4:
f9:20:08:81:9d:12:64:e1:cf:49:6e:c3:8c:27:ed:
43:b9:57:15:79:9a:76:bc:44:96:e2:8e:d3:81:4f:
be:c3:17:b0:58:6d:19:aa:15:8b:29:e7:58:ce:52:
98:c4:63:ff:d5:6c:26:4d:cc:a6:b5:61:1d:fc:52:
d0:66:60:1a:f6:63:1b:45:9d:4d:e0:e9:c8:f1:de:
3a:ae:25:e8:e1:c2:67:ba:55:95:64:d1:23:6e:c4:
96:2b:5c:67:7c:98:3d:8f:43:21:7a:02:82:b4:1b:
52:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:86:09:06:87:66:9A:6A:5B:C3:A4:2E:A0:5E:A5:13:01:55:5F:3D
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4f:00:e5:8c:6c:3e:03:7b:e0:87:07:4f:b0:0f:63:e8:f5:
7a:47:22:38:e7:b4:65:e0:c9:67:b7:51:9f:77:5a:00:26:19:
93:ee:93:35:0f:6c:d8:9d:4c:a3:ad:31:e0:1d:7f:4c:80:58:
e0:2a:19:bd:84:4d:a3:50:26:91:2d:2c:dc:57:45:5e:d7:83:
15:18:1b:b3:0f:c6:6a:92:02:90:ea:85:43:41:f8:e0:e9:6e:
22:12:8f:b6:f0:00:88:63:36:a0:d7:9f:8f:ef:8d:23:a9:5d:
87:8b:fa:1e:e9:9b:af:98:1c:e9:7c:62:e6:3a:81:e1:a9:eb:
46:28:3b:5a:2a:a0:f5:cc:a0:b0:b7:9f:75:82:f9:a1:fa:5f:
0a:c4:87:86:e0:71:18:aa:62:8e:27:a3:9f:21:b4:de:b7:d7:
67:45:d5:6f:ef:2c:e2:a5:cb:58:27:3d:8f:05:fd:21:1d:e1:
5d:04:ea:b5:3b:49:8d:64:20:21:16:89:e1:2c:5d:18:39:1e:
57:42:c8:9d:12:d8:83:d6:ea:87:a0:fc:d5:f9:4f:c4:89:f3:
39:4f:ff:b3:cf:87:37:0a:43:30:b5:fb:ea:83:bb:f2:45:1c:
dc:c4:ae:a2:12:73:7c:96:54:41:25:67:50:6d:34:47:ea:35:
46:03:6c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:47 2026 by rpki-client