Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
File: x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft (raw, json)
Hash identifier: r+4BWHFi7ggAcSXNH29jwkXc77b+QvXF7sTIvGDA7OQ=
Subject key identifier: 08:4B:4A:BF:69:A3:FA:A4:C1:21:D9:F7:5A:14:02:25:26:9F:A2:7C
Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Certificate issuer: /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Certificate serial: 01A12BB2955C2A37BD78D9886B5302BDF4ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 16:01:26 +0000
Manifest this update: Sun 11 Oct 2026 16:01:26 +0000
Manifest next update: Mon 12 Oct 2026 16:01:26 +0000
Files and hashes: 1: IdCieT_FXqDI14dT8duUpcsBKXs.roa (hash: WZwdbmj4EPfIzjAKG+pkXmeMhYN6QkPRXsW2FQB2pGA=)
2: x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl (hash: 4J7usW65n4fblRP4XwW7e2qHm9j33UmxL4Y0VrEYymM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:95:5c:2a:37:bd:78:d9:88:6b:53:02:bd:f4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Validity
Not Before: Oct 11 16:01:26 2026 GMT
Not After : Oct 12 16:01:26 2026 GMT
Subject: CN=084b4abf69a3faa4c121d9f75a140225269fa27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2a:26:47:bd:d4:e9:65:36:62:46:91:0d:02:
3e:f9:6b:8b:c9:b8:6e:db:93:24:2b:e4:76:8a:3e:
44:61:c3:b3:da:ce:81:37:02:49:10:d8:d4:1f:8e:
00:48:ee:46:b5:84:31:4f:84:ff:5d:45:55:45:f1:
b1:e0:0b:fb:41:7b:ba:3c:da:50:3f:a8:d8:2d:77:
18:34:b9:08:94:47:07:4b:81:0b:0f:af:0b:66:62:
17:c6:75:37:c4:24:34:ea:1a:53:c3:48:f5:26:b0:
52:9b:28:85:80:cd:f2:8b:ef:d1:a4:1f:66:71:28:
03:74:aa:c1:99:0d:16:f9:7d:41:77:4f:71:ac:bc:
1b:29:32:25:7b:4f:4e:6d:74:50:82:46:61:2e:1d:
6b:c1:8c:7a:24:5b:f2:a6:3c:a1:e4:e0:29:12:98:
f2:56:25:54:44:de:ee:84:b8:0d:1a:81:9d:27:db:
b8:52:85:92:67:7c:a2:4d:90:5b:63:a7:32:93:4b:
0f:69:92:17:6b:84:a8:74:88:27:99:2f:c8:42:60:
b1:66:1b:52:56:47:e3:5a:c0:8d:db:19:9b:86:ec:
55:5a:08:e0:cf:59:4e:c6:5c:82:ec:fd:07:2c:b0:
c8:71:44:30:4d:2f:52:d2:7f:67:26:77:0e:1d:81:
b9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4B:4A:BF:69:A3:FA:A4:C1:21:D9:F7:5A:14:02:25:26:9F:A2:7C
X509v3 Authority Key Identifier:
keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0c:c0:1a:fe:d0:1f:3b:42:8e:a7:de:60:da:7b:9e:f4:40:
c7:ad:6e:5e:67:b5:26:22:7a:fb:6c:e7:99:15:84:e8:a4:ab:
4e:9d:4c:13:4c:68:cf:7c:59:cb:6c:c1:fc:69:98:cb:c6:be:
00:95:db:2e:a6:d4:15:23:b1:5b:bd:f2:ac:2e:60:58:84:8d:
70:20:c6:85:cd:40:96:02:21:69:0d:fb:7c:b8:26:1d:a9:f8:
39:30:4f:c6:df:1c:86:d3:9f:2d:9e:33:d7:17:2a:a0:15:9e:
ba:b9:43:d4:86:41:5b:7e:bd:83:78:ad:15:d9:b4:39:80:fb:
ec:c6:67:f1:5c:5c:c8:39:f6:1f:40:73:58:c3:ba:03:58:01:
15:bc:81:e2:d0:a5:6e:ff:08:18:14:69:fe:3d:88:ef:09:71:
c3:f1:e2:d8:03:1a:0a:07:15:de:c4:4e:ad:a9:47:34:c1:b1:
e3:ad:ec:a4:27:09:95:e6:5d:a0:37:53:4c:3f:bf:0d:89:e1:
5e:e4:c7:b9:f5:5a:80:15:75:bf:46:4e:fb:59:37:12:7a:76:
0b:d7:1b:a2:72:fb:f4:f3:2e:90:2f:5f:da:ee:78:a3:15:ba:
de:b3:25:3d:b2:84:a3:19:d6:8e:96:f3:eb:7d:a6:a9:a1:56:
92:50:39:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:16:13 2026 by rpki-client