
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File: x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier: gDOpJPAv4sMdGAgwzKKcsj0fMqS7xuansAwmGfXYN5Y=
Subject key identifier: 22:94:5E:C1:39:D0:CF:17:A7:67:D8:AF:EC:FC:84:70:40:99:30:24
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer: /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial: 019D390A60301A25041BCAE927700A208B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:01:14 +0000
Manifest this update: Sun 29 Mar 2026 10:01:14 +0000
Manifest next update: Mon 30 Mar 2026 10:01:14 +0000
Files and hashes: 1: O7DvE_j0yVa8Neokc-i_HaDtXmM.roa (hash: 3lAq1Q6ERq8LruEXX9XUeCK19VsJiVKMmGnOXIPs3os=)
2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: p8Yfth7/pKxkZOVMwIhxiGeTLy/c51MBKKFnnhiDycA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:60:30:1a:25:04:1b:ca:e9:27:70:0a:20:8b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Validity
Not Before: Mar 29 10:01:14 2026 GMT
Not After : Mar 30 10:01:14 2026 GMT
Subject: CN=22945ec139d0cf17a767d8afecfc847040993024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:ff:60:2b:d3:fe:89:05:47:74:d6:89:e4:
fd:33:4e:24:0f:de:a1:1e:21:55:ca:13:9e:68:15:
5d:3e:6d:78:50:96:d4:a2:75:5b:2e:94:5e:52:3b:
66:4d:e8:3a:0c:07:43:d3:58:f4:05:ee:39:4d:e1:
e1:01:6d:bc:d7:ea:ad:3e:03:d4:6e:33:e6:e1:98:
ad:f5:3b:fc:f3:a2:9e:ac:2a:59:96:a4:31:d0:69:
ef:38:3c:c9:42:b9:48:ee:2c:55:dd:90:b4:1d:32:
08:14:16:56:a8:96:80:cc:bd:6c:d6:85:fa:b9:f0:
93:ec:0b:f2:db:f1:4b:72:6a:6d:7c:17:db:01:3f:
1d:77:39:4d:db:95:fa:58:97:06:d4:2e:21:a7:28:
25:db:87:70:f8:43:70:fb:97:19:27:8a:12:a0:11:
08:c6:a9:59:e0:22:6d:a3:46:d9:4d:c3:82:90:5f:
51:fa:4d:11:99:4b:89:0b:dd:46:04:6f:d1:b6:d9:
31:41:37:97:5c:54:a4:d8:a1:1b:48:cc:41:39:e2:
be:1c:66:c1:25:51:74:4a:c9:ba:57:d5:52:e9:6e:
4f:64:b3:01:a0:57:8a:01:d6:88:a5:75:12:e8:6e:
b1:74:37:5e:e6:0b:df:5c:4f:da:28:39:1c:c4:51:
b7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:94:5E:C1:39:D0:CF:17:A7:67:D8:AF:EC:FC:84:70:40:99:30:24
X509v3 Authority Key Identifier:
keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:57:9d:6c:ec:46:16:e2:ef:4d:6d:5d:e4:55:90:64:85:4e:
98:31:4c:83:26:af:4e:27:bf:78:5f:81:df:fe:cd:3b:e4:b6:
6f:63:b3:b7:cb:43:dc:24:00:a9:ae:3e:a1:aa:ed:d9:87:6d:
d3:b4:bd:06:fe:5f:c0:ef:ff:7c:b8:24:68:a6:68:f3:fb:8b:
60:65:eb:2d:5f:5c:8c:24:4a:97:dd:39:cf:26:ca:ae:6c:a0:
85:6a:8a:d6:22:c7:84:b5:83:1b:99:2c:65:f8:9c:d4:7e:d4:
db:3f:93:04:5a:19:e2:24:49:08:24:6f:59:df:35:5d:c4:78:
ed:9b:6d:3e:f4:df:d2:44:ac:b4:ef:69:62:68:88:57:14:c8:
82:c6:52:3f:87:90:7d:1d:06:0c:0c:b0:1f:85:d1:bb:43:48:
96:44:d9:bc:67:c8:a5:fd:37:90:a4:47:a6:e3:17:ba:a0:48:
c1:ea:7e:83:93:1e:84:45:4f:98:c9:69:b0:0c:52:30:be:10:
90:12:6e:42:43:a3:bd:f8:5b:06:37:ab:78:8f:08:d4:c8:a1:
41:46:0c:cb:4a:d4:11:e8:d6:70:08:2c:ca:fc:22:5e:d3:db:
48:64:8b:8f:fb:40:5c:58:ca:50:0d:2a:ef:fa:d8:7c:a2:64:
9e:07:ef:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CmAwGiUEG8rpJ3AKIIthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzE3MWE1ZTQ1NTA2Yzg2YzkwMTZiYmU1YjE0YjNkYjhi
YzZjYzMwHhcNMjYwMzI5MTAwMTE0WhcNMjYwMzMwMTAwMTE0WjAzMTEwLwYDVQQD
EygyMjk0NWVjMTM5ZDBjZjE3YTc2N2Q4YWZlY2ZjODQ3MDQwOTkzMDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW3/YCvT/okFR3TWieT9M04kD96h
HiFVyhOeaBVdPm14UJbUonVbLpReUjtmTeg6DAdD01j0Be45TeHhAW281+qtPgPU
bjPm4Zit9Tv886KerCpZlqQx0GnvODzJQrlI7ixV3ZC0HTIIFBZWqJaAzL1s1oX6
ufCT7Avy2/FLcmptfBfbAT8ddzlN25X6WJcG1C4hpygl24dw+ENw+5cZJ4oSoBEI
xqlZ4CJto0bZTcOCkF9R+k0RmUuJC91GBG/RttkxQTeXXFSk2KEbSMxBOeK+HGbB
JVF0Ssm6V9VS6W5PZLMBoFeKAdaIpXUS6G6xdDde5gvfXE/aKDkcxFG3UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKUXsE50M8Xp2fYr+z8hHBAmTAkMB8GA1UdIwQY
MBaAFMdxcaXkVQbIbJAWu+WxSz24vGzDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZjhmNTgtZDgzYy00NDBlLTk5MGIt
YjQzOGI1Yjg4Y2YyLzEveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83ZjhmNTgtZDgzYy00NDBlLTk5MGItYjQzOGI1Yjg4Y2Yy
LzEveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVedbOxG
FuLvTW1d5FWQZIVOmDFMgyavTie/eF+B3/7NO+S2b2Ozt8tD3CQAqa4+oart2Ydt
07S9Bv5fwO//fLgkaKZo8/uLYGXrLV9cjCRKl905zybKrmyghWqK1iLHhLWDG5ks
Zfic1H7U2z+TBFoZ4iRJCCRvWd81XcR47ZttPvTf0kSstO9pYmiIVxTIgsZSP4eQ
fR0GDAywH4XRu0NIlkTZvGfIpf03kKRHpuMXuqBIwep+g5MehEVPmMlpsAxSML4Q
kBJuQkOjvfhbBjereI8I1MihQUYMy0rUEejWcAgsyvwiXtPbSGSLj/tAXFjKUA0q
7/rYfKJkngfv6g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:15 2026 by rpki-client