Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
File: x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft (raw, json)
Hash identifier: r7dfz56jHNgUtmfMjXE5aikGGZHMkh1NocyEhdjTyZY=
Subject key identifier: D1:74:5D:43:D6:C0:DE:34:7C:D0:F2:C7:0F:97:6D:A6:6B:FF:05:B4
Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Certificate issuer: /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Certificate serial: 019F9FCD0A51E8764521545628779E1B46FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 19:00:42 +0000
Manifest this update: Sun 26 Jul 2026 19:00:42 +0000
Manifest next update: Mon 27 Jul 2026 19:00:42 +0000
Files and hashes: 1: IdCieT_FXqDI14dT8duUpcsBKXs.roa (hash: WZwdbmj4EPfIzjAKG+pkXmeMhYN6QkPRXsW2FQB2pGA=)
2: x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl (hash: oC64Zg/+XLzs3pbg7LrNhXyQXI4F5Vikb7Wb+LNu66c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cd:0a:51:e8:76:45:21:54:56:28:77:9e:1b:46:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Validity
Not Before: Jul 26 19:00:42 2026 GMT
Not After : Jul 27 19:00:42 2026 GMT
Subject: CN=d1745d43d6c0de347cd0f2c70f976da66bff05b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:24:28:a6:e1:72:3c:95:34:34:35:8c:7a:
c2:ce:d4:ac:42:1f:8d:4d:12:88:fb:47:c1:2d:9c:
62:18:9e:a6:ed:45:ac:1f:17:fa:b4:48:14:8c:17:
9a:1b:b6:d9:0c:f2:49:e3:e8:26:3b:ae:47:ce:61:
7b:cf:18:06:12:85:6b:60:cb:f5:86:ae:fb:b8:fb:
bb:ce:20:fe:e6:3e:c1:07:65:60:6e:c3:1a:0d:85:
b9:08:40:e0:88:f3:8d:0e:35:4c:62:a0:aa:3e:60:
67:94:ae:23:d8:4d:ab:43:2b:90:19:e0:9c:7b:65:
88:d4:8f:f4:9e:e6:95:95:8d:2e:73:d2:42:2e:15:
14:cc:73:12:cf:94:11:5b:b0:2d:62:df:46:69:22:
79:f9:c2:6c:84:8c:3d:12:06:50:b0:3d:7b:a0:0c:
50:3e:bc:75:73:b6:b0:34:28:00:7c:8b:75:25:6c:
4f:33:ad:4b:a1:1b:3b:1b:9d:1b:84:fc:26:bf:7c:
42:6e:e5:e8:a0:25:97:da:e1:0c:21:8b:29:a8:d4:
7d:ca:c4:23:b0:1c:9a:6c:db:90:b3:94:9c:ad:6b:
ef:34:77:f9:f3:c0:70:3e:41:56:9a:b7:59:6d:e2:
8e:72:11:07:e8:5d:ab:6b:a4:28:52:1e:04:48:6a:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:5D:43:D6:C0:DE:34:7C:D0:F2:C7:0F:97:6D:A6:6B:FF:05:B4
X509v3 Authority Key Identifier:
keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:af:2e:86:46:86:64:21:b7:47:78:e3:36:c7:f1:e5:05:96:
cc:90:ae:ea:e6:e0:b9:28:5b:e8:23:66:e7:6f:ed:88:de:2d:
a8:75:97:a1:22:3a:a4:84:19:e8:27:99:fa:ca:f3:e5:5b:a5:
bd:62:2f:94:33:ac:54:9d:7e:d0:e6:ea:d2:67:38:63:e9:f9:
77:df:65:84:d0:95:6f:95:08:df:6f:2b:e5:3f:e3:38:cf:41:
57:2d:c2:11:3d:07:ab:62:49:e4:ca:f1:57:69:45:fe:9a:65:
81:b1:4f:42:09:f1:2a:1c:4a:f0:79:3a:d1:55:33:8e:ae:2e:
f1:f4:17:2b:b4:f5:e1:50:56:f1:d9:19:cf:d3:88:f3:2f:e0:
e0:85:20:98:82:2f:39:3b:ce:f5:d4:a9:a3:55:8c:bf:a6:ba:
e1:0f:a7:53:db:1f:ee:b8:e4:d4:71:e6:b5:2a:40:82:4b:2d:
2d:4e:7c:61:20:57:3c:bb:4b:76:85:b1:4a:6d:c5:f8:20:d9:
a2:e5:f6:bc:d5:ce:cf:49:45:a3:9d:ab:db:a3:e2:b7:75:05:
e8:34:1a:0e:c9:c7:5b:17:8c:b6:db:ed:5e:36:10:8e:77:1e:
72:00:fc:fd:a4:8c:82:87:ad:f9:3f:8d:d0:b6:4e:00:a1:80:
5c:45:46:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:34:10 2026 by rpki-client