Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json)
Hash identifier: BuArAEbIMwDkwT5kYQdWdpHID1RzKPkv5utZQsF5FZg=
Subject key identifier: B6:FB:70:7D:BD:39:75:BA:54:1B:DB:9C:2B:A7:28:76:0F:F2:9A:25
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 01A18F428EB86FBA3BE0C044793127C2F67A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
Manifest number: 1ADA
Signing time: Sat 31 Oct 2026 00:01:06 +0000
Manifest this update: Sat 31 Oct 2026 00:01:06 +0000
Manifest next update: Sun 01 Nov 2026 00:01:06 +0000
Files and hashes: 1: A8hQT388ItEqoQYFOhqCCsEIlTI.roa (hash: 97e6isQPIjw70otEwzd0gLtQm2r1Kv7FnFS5tJziJjw=)
2: F_3SEAz-EKjAxo_g2p-mjUGzRIs.roa (hash: j/8Kr9e/zq+L0yS9GkMCdBYgA7yMxgnitG1QiH62Ck0=)
3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: iiBGMirBzYaae3csQeqCx3EvSVz6KzFUR4ziWQ2lPD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:42:8e:b8:6f:ba:3b:e0:c0:44:79:31:27:c2:f6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: Oct 31 00:01:06 2026 GMT
Not After : Nov 1 00:01:06 2026 GMT
Subject: CN=b6fb707dbd3975ba541bdb9c2ba728760ff29a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8c:d1:89:97:ae:f8:30:b0:67:fa:3a:5b:80:
90:5a:64:d4:b0:8a:70:a0:af:a0:7c:9a:61:79:5c:
fd:d1:69:53:9e:94:08:27:1f:ab:68:b6:6d:97:8d:
f1:6d:87:45:4e:2e:d0:fe:d3:84:0d:94:3f:8a:ba:
c5:dd:fc:8a:8c:21:7c:18:3c:94:eb:fb:86:0a:0a:
a4:05:27:0c:af:75:61:dc:84:9b:bd:0a:16:1b:ff:
3f:84:9b:3d:4b:40:de:11:40:07:d7:9f:c4:50:6e:
6d:c5:d5:41:21:fe:66:a4:81:a4:1b:73:dc:35:12:
0a:e2:f5:fc:5d:b5:d1:b7:a1:34:9c:9b:f9:63:fd:
99:46:51:61:99:80:56:28:ea:5c:20:68:f0:1a:67:
86:13:30:a6:93:f9:91:7c:bb:0b:eb:66:ff:2b:9b:
d3:fc:87:36:0f:c5:3a:d6:e6:f0:72:57:fd:aa:cf:
64:ca:eb:37:f5:b9:1d:d3:c6:ca:b3:80:1e:64:3a:
ba:27:be:92:89:a5:c0:48:52:84:14:e7:6e:d3:d7:
de:24:9b:73:ad:1e:d3:cc:b5:21:a8:10:9b:39:a2:
35:09:66:0d:87:80:4a:29:08:b6:0c:67:cc:40:2f:
63:72:75:c1:69:43:ea:b8:10:83:9a:b9:0c:cf:46:
4e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FB:70:7D:BD:39:75:BA:54:1B:DB:9C:2B:A7:28:76:0F:F2:9A:25
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:33:50:bd:a2:80:b6:94:e0:a5:09:c1:be:76:2f:c7:fe:01:
a2:e7:b1:65:7d:13:bd:b4:6a:db:78:06:4e:34:b2:e6:a0:a3:
e6:36:25:f0:02:4b:0d:1e:75:91:94:e8:eb:65:cc:33:8d:2f:
fb:ef:17:28:04:4c:cc:14:96:59:94:c8:67:dd:d5:7d:61:14:
65:64:7a:ea:22:08:e2:4c:55:65:bf:ab:b5:2a:4c:96:1c:63:
aa:1e:7f:4a:67:2a:56:ee:e6:b8:9e:72:c4:ab:50:66:32:c7:
5f:99:91:6d:4d:3b:dc:e9:92:8e:44:18:83:b5:b0:11:58:9f:
06:68:57:2e:bf:62:f8:5e:76:b5:65:59:d9:bf:25:68:42:0d:
d3:a2:23:e4:58:df:87:3f:c5:c8:0a:7a:e1:20:c1:ce:6d:e8:
d3:75:01:93:c0:ac:4e:24:59:8c:d2:90:cc:ae:2b:d8:5b:c4:
73:6c:93:97:f2:5e:6c:0c:ce:3e:c9:81:bf:8c:06:4d:90:09:
28:c4:8d:93:a0:cb:3c:9a:49:e6:bb:0d:57:85:5b:33:6d:37:
26:4d:ff:0a:2d:20:a2:69:a1:73:d3:75:78:2c:b7:d7:b4:61:
25:38:f8:b9:0b:b3:2c:c7:91:06:b3:d5:70:13:0b:78:d4:9f:
15:a0:8f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:48:09 2026 by rpki-client