Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
File: x3ER7FVJEVyzR2VNj-WycJ0n998.mft (raw, json)
Hash identifier: vaMH+9ggs+Ixt8fBffdZmxavA54rWtYChOp4XTEmjug=
Subject key identifier: 28:28:07:C0:FF:DA:3B:A9:55:C5:F3:FB:7E:55:02:34:6C:F6:48:5A
Authority key identifier: C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
Certificate issuer: /CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Certificate serial: 019D39410903802A765F3F066221D1667C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
Manifest number: 128B
Signing time: Sun 29 Mar 2026 11:00:56 +0000
Manifest this update: Sun 29 Mar 2026 11:00:56 +0000
Manifest next update: Mon 30 Mar 2026 11:00:56 +0000
Files and hashes: 1: VZDwVhwIg3g9iM3qt-x-zwWp4Ao.roa (hash: 7a9BH9RzouuHFjB1cCK0b23ksnqE0jY9b0U+LyPMrtw=)
2: x3ER7FVJEVyzR2VNj-WycJ0n998.crl (hash: BNg+4hVJLQ5fqhE1FTvUepowi6ShicH4l74FF3JbziA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:09:03:80:2a:76:5f:3f:06:62:21:d1:66:7c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Validity
Not Before: Mar 29 11:00:56 2026 GMT
Not After : Mar 30 11:00:56 2026 GMT
Subject: CN=282807c0ffda3ba955c5f3fb7e5502346cf6485a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:6d:31:c3:37:f7:59:29:2d:b7:4f:9c:1d:
a1:a0:0f:ea:75:92:31:d3:cd:65:65:b1:59:03:ab:
a8:f9:4a:7e:cf:5e:5b:e8:56:03:09:a0:84:e0:6b:
a4:a9:5b:25:29:60:94:af:4a:08:eb:0b:f5:23:5c:
ac:e1:b2:b7:e2:8b:5c:50:69:34:1a:9c:59:a4:2d:
f8:c6:b2:88:8e:82:44:f8:22:45:72:a4:98:cd:51:
68:b5:87:10:17:2f:35:4a:5c:65:80:4d:92:03:e9:
98:58:f5:5b:8e:7b:39:ec:da:a7:0f:e0:c2:c3:e7:
c5:71:90:e2:26:fb:38:27:80:ae:83:1d:c4:0a:24:
76:3a:65:fd:8e:a8:31:38:ce:ab:f8:2b:1f:16:4f:
c0:9a:db:77:6f:02:88:ca:e9:85:54:12:52:1b:a1:
68:c2:e0:77:c0:e3:e1:3a:d9:14:98:e6:a1:03:65:
a5:06:fc:01:32:45:31:f4:80:e0:09:8d:6b:55:f8:
57:f9:6b:a6:5b:a5:9c:c2:e5:f2:ba:20:10:70:0f:
8b:67:e1:7c:80:e0:2b:ff:56:40:1c:51:2e:84:e3:
41:0a:c3:4c:2d:06:f1:05:80:25:8b:94:c1:65:81:
51:db:da:e6:00:24:f5:d3:3a:55:d2:62:4c:02:f4:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:28:07:C0:FF:DA:3B:A9:55:C5:F3:FB:7E:55:02:34:6C:F6:48:5A
X509v3 Authority Key Identifier:
keyid:C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7d:3e:f4:48:f8:61:c5:8b:1f:9f:a4:40:bb:1e:3b:2f:13:
cb:89:01:9f:1c:8e:a3:7a:1a:5e:9a:35:0e:63:5a:24:8d:ef:
90:32:43:b2:03:cd:b0:30:7b:a4:d8:5b:c5:d5:86:4b:48:52:
c3:cb:2c:95:35:fc:e8:a6:39:90:84:ea:83:eb:b2:7f:23:f4:
31:ee:e4:7b:a6:07:fc:0c:99:ac:e1:e9:90:35:2e:1c:ec:eb:
30:17:28:8a:c8:85:31:7f:4c:d2:d1:61:58:91:f1:29:98:e8:
d9:3f:28:cc:59:46:3d:ac:ea:c7:54:c2:20:c5:ac:71:08:ad:
ca:f5:f4:4c:26:37:08:66:7b:48:06:90:cd:c6:56:54:ae:8b:
4e:9f:eb:88:07:c0:13:f2:0d:e0:65:85:22:79:93:11:ce:68:
e7:5a:ca:4e:6a:56:84:74:de:be:83:ec:87:1b:30:e0:ad:1c:
e8:a6:98:58:2c:66:94:24:29:32:f8:90:66:e0:2f:77:83:3d:
33:1d:17:e6:b3:c2:f8:9c:db:ce:78:c2:d2:cd:b5:86:27:fa:
03:20:39:c6:d9:4a:41:87:64:17:6d:08:40:eb:ea:b1:3c:4c:
84:6f:59:7c:96:fd:c8:db:f1:2a:b5:26:f8:d3:0a:1d:24:f2:
af:cc:54:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:13 2026 by rpki-client