Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: qdF0RzM7dU72C+4B4RHebpiQEp4KZUaq1JmKJUiI06c=
Subject key identifier: 43:AC:9B:24:3A:CA:69:50:6B:7B:95:B9:87:08:B6:48:7E:AF:E5:44
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 01A06C14846D3428FF851B5BBE6BF9BA0C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 0A67
Signing time: Fri 04 Sep 2026 11:01:18 +0000
Manifest this update: Fri 04 Sep 2026 11:01:18 +0000
Manifest next update: Sat 05 Sep 2026 11:01:18 +0000
Files and hashes: 1: V1X5AoJuWVktixeEEeg847CrLW4.roa (hash: sDvrIAa5SeWcR7s8zM+NUTwaLMsawn+2eiUy7AxPXYo=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: SyabJBiHEGAGT8/d2zYsA3XJzUvSo8bTMFezNtflVWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:14:84:6d:34:28:ff:85:1b:5b:be:6b:f9:ba:0c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: Sep 4 11:01:18 2026 GMT
Not After : Sep 5 11:01:18 2026 GMT
Subject: CN=43ac9b243aca69506b7b95b98708b6487eafe544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:8a:31:8f:4a:a7:2a:51:2c:df:af:0a:3a:
d0:d9:7a:f7:75:77:ac:af:65:c0:d9:d3:7d:ee:56:
e2:a2:d8:68:47:d0:64:93:5f:de:57:98:cb:f4:72:
cd:43:fe:cc:08:50:5e:5a:6e:09:a5:40:68:a1:d5:
2a:bf:85:b3:1b:5d:2b:eb:9d:c1:d4:45:94:49:dc:
b2:1a:0e:b9:d6:a9:48:f6:86:33:65:e6:7b:2c:c1:
a1:05:db:22:ed:22:1b:60:de:0d:61:ca:22:f5:16:
1e:fe:70:38:5f:1b:3c:50:d2:bc:bd:c0:44:cd:fd:
84:fc:53:dd:ba:12:85:c2:7d:ea:91:80:7d:6a:00:
a1:a8:66:52:b8:52:28:63:1e:65:dd:a1:40:e7:8c:
da:d5:ad:69:1b:b2:3d:ed:0a:03:49:4e:06:76:6a:
39:07:ef:e5:de:fc:69:a6:39:e2:36:71:9f:dc:1f:
ae:a9:cf:7e:dd:d2:8e:72:9d:d4:2f:f2:c2:74:f5:
ee:50:ff:3a:1e:7d:34:c0:11:20:85:7b:b2:aa:74:
5c:36:aa:0c:ae:1e:a2:15:7f:7c:a7:7f:26:44:dd:
ea:5b:23:91:c3:b7:e7:b3:50:05:83:ee:80:c9:5e:
68:91:82:50:06:2e:79:0b:36:26:56:dc:6f:38:e1:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AC:9B:24:3A:CA:69:50:6B:7B:95:B9:87:08:B6:48:7E:AF:E5:44
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:27:78:93:6d:1f:0d:70:fd:00:28:ff:f2:14:b5:6f:c2:66:
08:47:e1:ff:20:23:73:82:75:73:0a:c0:21:9a:69:c5:df:02:
6a:56:f1:9b:5a:42:0e:fc:0b:b3:e1:d5:42:3b:ff:72:1b:b8:
2f:fc:24:2c:a4:fc:ec:64:8d:51:af:18:9a:fc:02:67:0f:4f:
6e:6d:86:7a:d8:23:a3:3a:3e:dd:eb:63:69:ae:80:96:23:d0:
c2:5e:08:6f:08:7c:b5:0b:e6:2d:33:6e:67:a0:c0:b7:74:ad:
2f:bb:12:59:21:64:66:42:03:77:94:7f:2f:2d:5b:17:19:35:
bb:6d:bd:af:ca:14:3e:17:62:b2:d4:88:e9:51:97:5b:63:ea:
90:23:85:e2:79:48:d3:42:9f:c3:c9:45:b0:d1:e5:ec:4b:8f:
72:e7:4f:86:c4:45:9f:8d:ae:5a:a4:b8:45:17:83:dc:a0:b9:
9f:66:07:fd:17:9b:dd:93:be:33:b4:0c:b0:f2:80:60:df:8a:
88:82:93:3a:ae:88:05:fe:52:5b:00:7f:e0:97:e8:f5:54:3e:
2f:ff:fb:c4:23:b0:a6:05:ab:67:68:96:d7:39:87:ba:dd:5d:
de:a6:f3:29:1b:e3:1d:1c:0a:a0:ac:3d:42:9e:ba:96:a0:7b:
fe:75:17:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:18:25 2026 by rpki-client