Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: R51XefAhLjvnJbczSJVAHSgvZggMwwe0EDmTqu0s4Y4=
Subject key identifier: B8:86:2D:08:45:A5:62:17:69:10:43:93:56:30:3A:2F:34:88:A9:C3
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 019EB9584589ED3811AE575EBA793FD55376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 01:00:30 +0000
Manifest this update: Fri 12 Jun 2026 01:00:30 +0000
Manifest next update: Sat 13 Jun 2026 01:00:30 +0000
Files and hashes: 1: fXCfZUIcS9FszTCvtMFRqyOwHUA.roa (hash: 6cg3gD/b2Eq0ozSudTsMLJ3h/kzYzkasW+awbVRHCw8=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: 9VOgEmA5AaCt/cvj3HyQ6tzeEpWSf3ITqpHWmNIwhaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:45:89:ed:38:11:ae:57:5e:ba:79:3f:d5:53:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Jun 12 01:00:30 2026 GMT
Not After : Jun 13 01:00:30 2026 GMT
Subject: CN=b8862d0845a562176910439356303a2f3488a9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:a8:c3:9b:24:34:72:13:8b:14:0c:9b:4a:
da:e5:e1:82:97:19:73:63:5d:a0:c8:07:79:f1:d7:
71:ac:d8:fc:9b:bb:fb:64:a6:92:54:d7:d8:8b:c8:
38:84:93:99:a7:02:08:5b:a5:1c:17:93:b0:3b:f5:
94:7e:2d:a8:6e:fe:48:c7:37:e3:d2:03:71:42:9b:
16:07:9e:d0:89:4a:f5:b9:25:9a:2f:16:ca:0d:56:
e8:f8:3f:d2:e9:f8:63:08:de:a1:0c:68:ee:c3:98:
7d:44:51:a1:a3:76:04:15:25:ce:7d:9b:22:ce:98:
ec:07:6f:93:1a:eb:dc:72:23:e7:18:ed:f2:23:19:
ec:3c:d7:0a:10:31:bc:1f:fd:24:4a:6f:94:8d:e4:
ff:ed:a0:44:e1:10:8c:3d:ca:15:37:7b:27:78:a2:
9f:7a:70:ff:d0:d5:03:3e:e4:25:42:0f:a4:e7:15:
fe:b0:b9:36:ea:49:07:a4:d8:f9:e9:b6:79:f4:cd:
0a:1f:85:39:e4:41:89:91:0f:cd:37:63:70:32:6d:
b2:64:f9:b8:fa:11:6f:8e:dc:88:64:0f:5a:59:97:
4c:72:1b:d5:68:4a:02:64:e3:77:5f:76:a7:6c:c5:
f1:44:be:ac:c6:4a:3a:ad:d6:87:c4:84:9d:0c:90:
12:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:86:2D:08:45:A5:62:17:69:10:43:93:56:30:3A:2F:34:88:A9:C3
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e2:ed:bd:fa:2f:b8:34:72:a4:b5:76:44:6f:1f:2d:84:b0:
d0:8f:e0:23:2b:45:5e:f4:9a:e6:fa:11:a8:15:ae:bb:e7:7d:
67:dc:9f:c6:fa:1f:30:6b:77:bb:60:c9:e6:3e:69:e6:3d:c5:
1a:16:98:89:22:7b:db:09:15:7c:81:38:f8:01:50:3b:d8:0a:
1a:39:2f:ee:3f:28:9a:79:42:c1:1a:86:bf:f3:d2:df:75:ed:
c2:2e:0d:e1:1f:c1:d1:f9:9c:ef:1a:71:e8:65:ca:5a:62:6f:
28:e0:df:77:a7:49:6c:2d:9e:44:88:77:2b:6d:f4:5d:c9:cd:
ab:e2:1e:2b:14:39:f8:2d:80:9d:23:aa:f8:2c:e1:ae:cf:18:
a1:3e:18:28:2e:d3:83:19:28:09:46:41:dc:2a:d0:cd:4e:7a:
6c:c0:02:4c:4f:a2:02:6f:18:da:ae:c9:ae:23:8c:9d:f4:42:
2d:89:70:07:77:98:2b:8f:75:51:6f:a8:24:5c:85:be:3b:2b:
ff:7c:8f:ba:14:e4:0f:b9:e1:40:d7:8a:23:49:e8:c4:6e:37:
aa:32:a4:06:16:39:90:9f:17:25:bf:78:b1:06:7c:61:ee:75:
21:8d:83:4f:9f:88:52:a0:7c:02:6d:fa:97:b2:de:dc:d0:53:
41:0c:b9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:12 2026 by rpki-client