Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: 1SFZMo8B1beqPeze3jFrbTP+77u9/GyufvcD4nXYY6g=
Subject key identifier: CA:74:CD:55:FD:BC:70:F9:BC:19:1D:6A:99:E6:91:D3:30:38:FF:07
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 01A16CEDC49709C6A2D8AB36F2D067D2A6F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 0AEC
Signing time: Sat 24 Oct 2026 08:01:24 +0000
Manifest this update: Sat 24 Oct 2026 08:01:24 +0000
Manifest next update: Sun 25 Oct 2026 08:01:24 +0000
Files and hashes: 1: V1X5AoJuWVktixeEEeg847CrLW4.roa (hash: sDvrIAa5SeWcR7s8zM+NUTwaLMsawn+2eiUy7AxPXYo=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: hJD8l75L0lQGQjFJVbj4v5Sugjnx9yjYJu+ZMhT6DUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:ed:c4:97:09:c6:a2:d8:ab:36:f2:d0:67:d2:a6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: Oct 24 08:01:24 2026 GMT
Not After : Oct 25 08:01:24 2026 GMT
Subject: CN=ca74cd55fdbc70f9bc191d6a99e691d33038ff07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:b0:dd:b3:16:1f:5b:d0:bc:f1:13:fa:d6:
f6:4d:e9:a7:49:1b:96:d3:5f:ca:2b:b8:f8:a2:45:
29:e6:7b:54:5e:b4:62:58:47:0c:50:54:42:24:a5:
32:83:8a:ff:90:28:1d:3f:63:ae:a2:51:65:15:fd:
82:69:6c:b5:ba:85:af:ed:91:ee:9e:39:80:86:23:
06:e1:29:c1:2a:eb:e8:60:22:76:30:41:90:85:b3:
24:b5:cf:40:28:91:e5:1b:81:8e:e3:5c:14:35:2f:
11:51:08:af:d1:46:c5:77:e7:ef:9d:6a:2d:86:15:
a9:58:b0:a2:93:2e:5d:4a:c5:81:c3:2f:0c:ab:65:
0b:c0:b9:68:bc:af:ff:b8:1d:33:15:98:e9:47:23:
4d:ec:7e:a1:5e:be:d5:d1:55:36:81:b7:eb:29:42:
91:03:29:40:84:b0:3a:d7:a0:0f:d4:8d:f6:ba:3e:
7a:4c:dc:06:81:f6:e6:36:5c:f9:b9:be:40:bc:f5:
84:2d:36:19:25:31:54:2d:6f:4b:8b:5f:ec:c9:ed:
b5:60:fe:8d:44:29:91:82:2b:ed:2e:c9:f5:78:bb:
98:65:7d:9e:e4:a4:6c:29:a8:a6:4b:a6:1c:df:c4:
f0:e9:5d:26:76:eb:c1:c9:02:99:0a:5e:ce:4c:b5:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:74:CD:55:FD:BC:70:F9:BC:19:1D:6A:99:E6:91:D3:30:38:FF:07
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:fc:19:99:f5:f8:8f:e5:dd:c4:d1:50:1b:f0:e0:bd:41:6f:
c5:c1:0d:a5:ec:8c:45:b7:61:67:be:06:7c:91:64:af:40:55:
3e:5d:b6:76:b2:27:19:d3:94:89:85:2c:30:37:84:61:3b:40:
15:99:e7:0e:61:c5:40:f0:e0:2e:a2:09:d0:75:85:2e:21:65:
6a:e2:fe:fc:bf:b1:af:12:c9:17:62:84:9d:b4:40:d6:92:da:
86:ac:56:34:1f:a7:8e:5a:9d:c8:a8:a5:c0:c2:99:52:4f:ee:
7d:b8:da:83:b8:e8:27:dd:0c:98:23:c9:85:4a:14:95:5b:d3:
f7:9a:b8:1e:b3:8e:96:30:c4:4b:3e:38:2e:03:f4:ad:89:f7:
87:fd:19:94:63:26:a1:55:8e:3a:77:c1:f9:f7:13:64:00:07:
32:12:59:c9:44:d7:7a:4c:85:3c:34:33:be:60:10:71:7c:e4:
11:0f:3c:1c:77:a3:ee:24:4c:60:8f:53:fe:5e:f3:73:cf:55:
c8:85:a3:b2:96:42:2c:4c:3e:40:58:2e:e3:1a:ed:42:f2:53:
bd:e7:21:15:ba:68:45:6f:03:ad:a0:2e:0d:5a:78:b5:5a:41:
7c:59:9e:79:8f:00:1e:c5:32:30:b0:e6:9c:6f:76:37:ed:1e:
87:19:15:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:43:51 2026 by rpki-client