Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json)
Hash identifier: vmfPvf2ORrZWoFf8EhbTeTBzEbmiuARSYglDTmMCz6k=
Subject key identifier: 9C:CB:9F:AE:D6:8E:95:50:EC:91:B5:F2:65:1A:E1:C9:70:BB:92:21
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 019FA2CE1C82A297DB80CFF3001ABE4EF51E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
Manifest number: 19DB
Signing time: Mon 27 Jul 2026 09:00:44 +0000
Manifest this update: Mon 27 Jul 2026 09:00:44 +0000
Manifest next update: Tue 28 Jul 2026 09:00:44 +0000
Files and hashes: 1: A8hQT388ItEqoQYFOhqCCsEIlTI.roa (hash: 97e6isQPIjw70otEwzd0gLtQm2r1Kv7FnFS5tJziJjw=)
2: F_3SEAz-EKjAxo_g2p-mjUGzRIs.roa (hash: j/8Kr9e/zq+L0yS9GkMCdBYgA7yMxgnitG1QiH62Ck0=)
3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: S0Ixxi81xKQAy5B0Wy77df8nR82YHbJghrC6h2Yv1/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:1c:82:a2:97:db:80:cf:f3:00:1a:be:4e:f5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: Jul 27 09:00:44 2026 GMT
Not After : Jul 28 09:00:44 2026 GMT
Subject: CN=9ccb9faed68e9550ec91b5f2651ae1c970bb9221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:53:b3:2c:f1:41:d9:20:99:15:c5:4e:b2:
99:2b:e4:2a:98:aa:34:b3:6c:3f:9d:f3:7d:1b:6b:
19:f1:ae:a3:cf:42:f4:78:ca:97:b0:60:f8:00:81:
60:f6:b3:a6:b3:a1:ab:e0:41:2c:dd:22:40:de:65:
b8:0b:85:4e:48:39:e3:f9:5f:ae:18:88:b2:20:79:
3e:61:24:b1:4c:32:9b:0c:0d:a7:a1:09:d0:c5:a0:
f2:22:f5:42:50:3c:f4:6e:53:97:95:79:62:54:3a:
86:3e:82:4e:89:7f:ea:e4:0f:b9:e2:ce:d0:cd:4c:
6d:77:61:4c:d4:8e:7e:9f:a5:39:37:05:2a:f1:39:
f0:bc:df:2e:3c:09:c4:0e:8e:03:da:6e:37:d9:c5:
b2:6d:96:8d:e0:be:78:f6:08:87:2d:58:f1:a0:0c:
51:7d:13:29:79:0c:bc:c9:ed:5a:df:1d:30:5c:d7:
57:e5:85:67:e0:6f:a9:d4:e6:be:b7:aa:0c:5f:82:
80:96:86:92:25:df:d1:61:18:7e:70:fe:9f:dc:7d:
73:6d:f8:85:8d:ff:e8:8c:d2:08:6a:6b:33:81:6c:
0b:f1:55:5e:08:ad:a5:41:ef:80:8b:be:0c:36:e4:
c2:85:e8:bf:c7:7b:35:d2:4e:f1:65:ab:12:3d:6e:
7e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CB:9F:AE:D6:8E:95:50:EC:91:B5:F2:65:1A:E1:C9:70:BB:92:21
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7a:e2:26:09:4a:0d:60:42:61:1b:01:6a:9c:af:87:15:ce:
a5:bc:13:a5:2b:58:bd:36:8e:88:e1:5b:a1:f7:65:6d:d5:be:
7d:c1:d3:e1:f8:64:e4:6d:71:30:b3:49:51:72:7e:58:dc:5e:
c0:1f:63:59:af:0d:a3:1f:e8:b5:c9:46:96:35:ef:32:d2:12:
55:96:ce:f3:22:78:28:a9:a9:d3:66:59:4c:18:c5:6f:5c:ca:
8a:26:18:02:6f:ac:25:ef:24:f6:a3:33:7a:55:08:e8:21:9c:
0c:c4:b9:46:8f:86:c0:4f:9f:cd:cc:3b:16:1e:d8:4f:8a:83:
bb:f5:b5:16:16:3b:45:30:4c:7f:3d:51:8b:62:6e:fd:30:da:
04:19:87:b5:4e:3d:30:2a:0c:10:e3:21:f3:6f:a6:f8:d4:e3:
97:d0:db:bd:30:27:94:08:01:f2:e9:86:ad:22:76:a7:9a:38:
8a:6f:2a:a7:36:2d:97:ee:c9:8e:fc:a3:22:21:81:40:d7:c2:
97:82:eb:b7:e6:3b:de:52:6b:77:c1:07:f5:a3:7a:f3:5d:8d:
db:ff:23:c3:23:7e:c9:ce:3f:86:dd:7f:53:4d:1d:f6:99:7e:
b8:f7:93:7c:15:98:25:e6:de:25:01:1d:01:13:cb:46:0b:57:
fc:39:45:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:09:04 2026 by rpki-client