Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: OOO6Xtw0uq5P7NAh44QnGt9mhJ+w59sKhG+QnU17W6s=
Subject key identifier: 53:B5:4E:7F:77:30:F7:B6:CC:F6:67:0F:FC:45:D5:10:86:7B:27:59
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 019D3752C475666A1E86DDFBD9FF8FAA5713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 08BE
Signing time: Sun 29 Mar 2026 02:01:04 +0000
Manifest this update: Sun 29 Mar 2026 02:01:04 +0000
Manifest next update: Mon 30 Mar 2026 02:01:04 +0000
Files and hashes: 1: V1X5AoJuWVktixeEEeg847CrLW4.roa (hash: sDvrIAa5SeWcR7s8zM+NUTwaLMsawn+2eiUy7AxPXYo=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: Vs5DzIoawqXB7by3c5JgaEd3AfWhi/Wooc5toWVIPyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:c4:75:66:6a:1e:86:dd:fb:d9:ff:8f:aa:57:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: Mar 29 02:01:04 2026 GMT
Not After : Mar 30 02:01:04 2026 GMT
Subject: CN=53b54e7f7730f7b6ccf6670ffc45d510867b2759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3f:4d:17:59:2a:99:85:c7:48:01:70:fd:7c:
a7:99:ea:ab:50:2b:56:37:5a:48:4b:17:7e:b6:af:
3a:02:4c:e6:ec:54:a5:a9:f2:b7:02:83:e7:3a:39:
5b:1e:99:89:59:cd:7b:17:a3:42:57:fd:f8:82:c5:
45:f1:7a:e9:1b:fe:cb:22:45:0f:a2:6b:f1:4e:37:
1f:77:02:a4:ec:6a:42:83:95:e0:8f:3d:af:ac:69:
9d:d2:c1:c9:4a:3e:68:1a:76:7d:9d:8d:73:95:30:
4c:7c:b2:7e:28:53:98:b9:9e:94:7c:d5:b8:da:fe:
74:d0:df:91:a5:27:1a:28:8a:98:9a:28:4e:72:f2:
ce:e4:1a:93:64:81:9e:bf:41:f6:92:ea:16:50:02:
de:1c:18:5f:cb:b9:32:c3:0f:48:55:36:71:ba:32:
8d:16:62:8a:dd:b4:92:23:7f:02:a0:54:c6:a9:5d:
2e:80:45:95:49:21:94:20:2b:d9:d1:2c:af:f6:c9:
1d:3e:1f:4a:94:5d:45:c7:80:b6:9e:6a:26:36:80:
f6:2c:5e:6e:84:be:d4:b2:12:ff:46:8f:0a:5f:73:
f5:e4:39:04:9b:88:64:8f:c2:b3:97:cc:18:6e:ff:
2a:5b:e9:14:24:b4:7a:bc:b1:f2:b6:e8:69:58:03:
4f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B5:4E:7F:77:30:F7:B6:CC:F6:67:0F:FC:45:D5:10:86:7B:27:59
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e8:00:dc:a0:25:f1:28:c9:60:55:0e:12:91:c0:00:05:16:
77:d8:9f:2b:f9:21:02:8d:00:4a:d0:0d:eb:97:6c:7a:ba:94:
c2:f6:3c:ff:a4:bd:bf:c0:3a:c6:4a:ef:29:3a:7f:40:6f:08:
1e:cd:9d:e6:4d:eb:da:36:0e:b4:c5:03:e4:41:2e:04:e4:af:
f3:a9:ab:73:d6:17:89:d0:b1:37:a1:3b:d2:0d:26:ab:0b:62:
2c:1f:1e:5b:d2:60:a9:3b:af:ae:dd:42:03:eb:9c:20:65:bf:
a5:53:cc:26:3c:3a:d3:a2:cf:1b:0a:9a:cc:f5:f9:f0:9c:4e:
4c:07:e1:a1:30:c4:3a:1d:5e:1b:09:fa:31:ee:b6:7c:60:98:
72:2c:29:8e:21:c0:78:bb:df:2a:9c:42:9e:df:c9:fe:e8:e1:
b8:08:56:58:d4:79:da:a9:ad:3c:b6:9a:6f:78:61:91:7d:80:
c1:10:9e:7a:67:f5:a4:92:2f:71:44:54:d4:4c:59:4e:f5:c5:
93:f8:95:f3:84:30:7b:5e:21:9f:c2:d4:27:2e:44:c7:dd:b9:
8e:e2:bd:49:2a:6f:c0:52:e7:73:42:d7:f2:e5:78:0d:e9:05:
5a:f4:44:7c:fc:c9:05:39:e1:1a:a7:d1:5b:11:ef:73:aa:04:
77:51:e8:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UsR1Zmoeht372f+PqlcTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2ExMWNjYWQxMmU0NTUyODZmNWQwZWIzMDQwZTg2M2Yz
MGM5OTMwHhcNMjYwMzI5MDIwMTA0WhcNMjYwMzMwMDIwMTA0WjAzMTEwLwYDVQQD
Eyg1M2I1NGU3Zjc3MzBmN2I2Y2NmNjY3MGZmYzQ1ZDUxMDg2N2IyNzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT9NF1kqmYXHSAFw/XynmeqrUCtW
N1pISxd+tq86Akzm7FSlqfK3AoPnOjlbHpmJWc17F6NCV/34gsVF8XrpG/7LIkUP
omvxTjcfdwKk7GpCg5Xgjz2vrGmd0sHJSj5oGnZ9nY1zlTBMfLJ+KFOYuZ6UfNW4
2v500N+RpScaKIqYmihOcvLO5BqTZIGev0H2kuoWUALeHBhfy7kyww9IVTZxujKN
FmKK3bSSI38CoFTGqV0ugEWVSSGUICvZ0Syv9skdPh9KlF1Fx4C2nmomNoD2LF5u
hL7UshL/Ro8KX3P15DkEm4hkj8Kzl8wYbv8qW+kUJLR6vLHytuhpWANPqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFO1Tn93MPe2zPZnD/xF1RCGeydZMB8GA1UdIwQY
MBaAFMd6EcytEuRVKG9dDrMEDoY/MMmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgt
MDkwZTViZDU4MGIzLzEveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgtMDkwZTViZDU4MGIz
LzEveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOgA3KAl
8SjJYFUOEpHAAAUWd9ifK/khAo0AStAN65dserqUwvY8/6S9v8A6xkrvKTp/QG8I
Hs2d5k3r2jYOtMUD5EEuBOSv86mrc9YXidCxN6E70g0mqwtiLB8eW9JgqTuvrt1C
A+ucIGW/pVPMJjw606LPGwqazPX58JxOTAfhoTDEOh1eGwn6Me62fGCYciwpjiHA
eLvfKpxCnt/J/ujhuAhWWNR52qmtPLaab3hhkX2AwRCeemf1pJIvcURU1ExZTvXF
k/iV84Qwe14hn8LUJy5Ex925juK9SSpvwFLnc0LX8uV4DekFWvREfPzJBTnhGqfR
WxHvc6oEd1Hoqw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:29 2026 by rpki-client