Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json)
Hash identifier: vlj4JxzfaAKlm4ZMVMuFT8zHFjkkFceO/vF7UvAD3hc=
Subject key identifier: 0E:20:6C:DE:19:BD:6D:EA:10:F1:38:BB:B1:4A:B3:36:EE:EA:0A:CC
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 01A191314F6E36FDAF3386F649DDC36AA114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
Manifest number: 1ADB
Signing time: Sat 31 Oct 2026 09:01:30 +0000
Manifest this update: Sat 31 Oct 2026 09:01:30 +0000
Manifest next update: Sun 01 Nov 2026 09:01:30 +0000
Files and hashes: 1: A8hQT388ItEqoQYFOhqCCsEIlTI.roa (hash: 97e6isQPIjw70otEwzd0gLtQm2r1Kv7FnFS5tJziJjw=)
2: F_3SEAz-EKjAxo_g2p-mjUGzRIs.roa (hash: j/8Kr9e/zq+L0yS9GkMCdBYgA7yMxgnitG1QiH62Ck0=)
3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: J1WD51CJDvTozpdX6N9NLmyKnm1PqvsVt9zvqmacmI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:31:4f:6e:36:fd:af:33:86:f6:49:dd:c3:6a:a1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: Oct 31 09:01:30 2026 GMT
Not After : Nov 1 09:01:30 2026 GMT
Subject: CN=0e206cde19bd6dea10f138bbb14ab336eeea0acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:40:0d:a2:5d:4c:d4:e1:8a:1f:66:b6:9a:d4:
f4:88:3f:80:27:c6:fb:86:90:45:7d:5e:6a:41:71:
2a:7d:a8:2b:fe:fb:64:b4:2d:25:33:54:78:e3:76:
e0:e6:b1:0d:dc:43:84:3a:5d:80:d6:5f:2a:5d:a9:
26:bc:7c:d8:af:57:b6:ac:8d:21:48:17:21:98:3a:
16:57:22:f5:9b:a2:8c:29:b3:9d:71:81:dd:90:0b:
90:3d:a3:65:1d:74:04:bf:42:95:38:1d:cc:0f:f9:
28:dd:85:e0:27:b8:8c:65:e0:f2:00:c6:36:28:64:
1f:b8:bd:db:ec:9c:d1:68:70:c0:45:df:aa:40:bd:
f5:e4:b3:c3:99:8b:f6:ab:c3:db:fe:62:95:ab:30:
97:5b:f9:8a:bc:5a:0f:0d:a6:6b:fc:2c:24:9e:f6:
15:5a:ed:3b:04:dd:73:19:65:75:a5:6e:af:81:5c:
d1:00:98:a1:6b:49:e4:96:d5:be:a6:73:f4:86:ff:
b7:8f:71:6f:29:d5:64:67:07:0f:9b:e9:36:17:b9:
4a:ba:e7:18:c4:51:c6:61:8f:08:22:5b:7a:27:7b:
16:64:b5:df:20:46:e4:bd:b6:09:d5:06:71:03:38:
24:04:6f:08:bb:b7:eb:61:d9:c8:11:36:56:55:47:
8e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:20:6C:DE:19:BD:6D:EA:10:F1:38:BB:B1:4A:B3:36:EE:EA:0A:CC
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:19:e8:75:2b:e2:a4:e1:23:80:bd:ef:9d:64:99:fb:c9:51:
7d:ac:15:92:7f:1b:ce:89:c4:97:d7:f8:8e:89:a3:d9:17:28:
cf:f0:02:1a:cc:33:26:a3:5c:96:a7:c5:aa:6f:fc:6d:d2:6d:
20:ea:30:dd:82:9f:fd:3c:7f:b5:67:bc:9b:15:42:78:5b:d6:
44:ed:a6:b8:24:c7:a4:d6:55:10:d0:9d:91:32:ae:d4:7e:b9:
4e:a0:2c:22:9a:a2:ca:f6:f2:b5:7e:55:61:8d:38:a9:12:42:
4b:f0:32:7e:f7:4f:f8:85:31:cc:6e:bc:79:13:74:3f:3f:0a:
1a:cc:6a:7d:2a:e2:0e:5a:c2:48:5f:e0:c0:39:c5:8d:c2:14:
63:09:97:bc:07:4b:1c:a8:eb:bf:b0:4c:6b:72:12:48:34:f6:
6e:1c:c3:85:68:da:34:3d:a4:32:71:eb:0d:88:41:4b:9c:fa:
83:e2:57:49:49:ff:54:3c:22:d8:9a:2d:8e:63:f1:83:ec:e2:
c0:b8:05:bd:78:5a:ac:f1:ee:92:e8:5b:b4:42:16:fd:8e:4c:
ed:57:e7:22:82:84:40:21:4d:50:5b:c7:23:42:e9:f1:f3:86:
c4:2f:d5:b6:fa:2f:4a:a5:12:50:fb:ec:a7:c9:de:30:2d:c9:
f2:0c:c7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:28:43 2026 by rpki-client