Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
File: x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft (raw, json)
Hash identifier: ATUCC1UwHJLHSaNtKxVLj29mAVObNFjXfKQnzKXJplM=
Subject key identifier: 8C:3D:C3:12:8E:75:B8:41:F9:E2:62:48:51:C0:64:21:1E:83:ED:56
Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Certificate issuer: /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Certificate serial: 019EAE66A1D1C29A23327F916C55711EA48E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
Manifest number: 1951
Signing time: Tue 09 Jun 2026 22:00:22 +0000
Manifest this update: Tue 09 Jun 2026 22:00:22 +0000
Manifest next update: Wed 10 Jun 2026 22:00:22 +0000
Files and hashes: 1: IdCieT_FXqDI14dT8duUpcsBKXs.roa (hash: WZwdbmj4EPfIzjAKG+pkXmeMhYN6QkPRXsW2FQB2pGA=)
2: x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl (hash: WrkZX9dPJkXhAMWceZKd//9fQNiTcvBbvUCnwbjfxq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ae:66:a1:d1:c2:9a:23:32:7f:91:6c:55:71:1e:a4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Validity
Not Before: Jun 9 22:00:22 2026 GMT
Not After : Jun 10 22:00:22 2026 GMT
Subject: CN=8c3dc3128e75b841f9e2624851c064211e83ed56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:07:25:01:fb:80:0f:4f:18:3c:12:54:8e:f1:
b5:a1:67:91:47:46:bb:dc:37:16:b6:90:a1:57:0b:
4b:5e:be:a9:43:a4:e3:d1:16:52:b1:35:dc:47:2a:
b9:9d:44:d0:02:4c:d4:3d:0e:42:7c:91:34:4a:2e:
28:79:83:ff:00:67:53:e3:89:e9:e4:1a:63:6a:6b:
f5:72:fc:d5:fe:fc:ff:60:4b:8d:f4:ab:03:c6:f1:
bc:04:dc:3b:54:75:02:61:34:20:e8:ca:29:99:84:
2c:6b:27:36:ff:a6:34:84:70:1e:34:61:d5:40:ab:
4e:a2:bb:f8:f7:17:53:d4:56:e9:ec:f1:e1:d9:57:
89:26:df:a7:82:2d:a2:32:06:81:07:99:d2:7c:65:
35:b0:56:30:40:23:71:fb:0c:62:8f:a7:e0:01:81:
4b:81:a0:34:0c:c7:ce:94:4a:5b:8a:bf:d5:e3:2d:
09:12:75:b2:78:b3:16:ac:c2:2c:01:75:c3:46:96:
53:dc:09:70:5b:6f:8d:53:50:c3:4d:d2:6d:cf:b1:
ed:d1:9e:de:91:84:11:29:f3:b6:e0:50:30:4f:a3:
ea:d7:b2:10:c0:ca:59:16:2e:bc:bb:76:07:e0:9f:
7b:f7:d7:53:e1:95:21:8e:85:71:89:70:8e:7a:f5:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3D:C3:12:8E:75:B8:41:F9:E2:62:48:51:C0:64:21:1E:83:ED:56
X509v3 Authority Key Identifier:
keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ee:de:d6:2f:8e:9d:21:67:20:b4:67:7b:65:fa:fe:2a:0c:
f7:57:e5:03:75:38:e4:f4:d7:b2:53:25:e0:d2:2e:7f:5b:3e:
f8:35:11:b1:d2:36:22:1a:35:9b:0f:7f:34:25:01:f1:17:71:
1b:56:0d:71:94:5d:23:ff:e8:d2:03:e9:ea:04:b4:28:5f:23:
15:85:90:e4:9a:fc:5a:f7:3d:74:f4:21:5f:d4:fa:b5:91:13:
3b:ec:12:4b:88:69:ec:37:3a:59:c1:52:8e:fb:8f:78:be:4e:
2a:05:55:66:b0:5b:26:91:93:c5:b4:ec:6b:13:1e:3c:6e:dd:
e1:ba:16:20:d8:87:9b:02:78:34:23:b8:f5:29:6e:e8:21:94:
46:3a:02:d9:4d:d0:c2:c7:9b:f6:b5:b4:a0:eb:4a:58:52:79:
75:19:60:4e:cf:a8:ce:18:22:1d:d6:9b:f4:8c:9d:82:46:41:
2f:94:0a:44:ca:26:a5:28:09:c8:2a:85:5f:d8:6e:e6:f5:24:
3b:6c:fb:a6:38:8f:75:f1:ff:1d:f3:e8:f3:dc:68:80:d3:d2:
51:c3:5f:42:66:0b:30:81:e1:83:26:6f:0c:1d:f9:ad:1b:8f:
9b:e9:93:0a:c7:6a:0f:11:96:6f:50:09:7c:4c:4c:9d:19:62:
44:08:c2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 05:54:34 2026 by rpki-client