Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: VoGSr0gvGf4uo/IYTFTgipGXaJCFfdCybM24hmFD0yY=
Subject key identifier: F8:16:77:B5:5D:78:F5:7D:DC:A9:EF:18:C5:71:7A:C7:20:8B:AA:91
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 01A181F4A180304428B70BEA4B1C309CBE4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 10:00:55 +0000
Manifest this update: Wed 28 Oct 2026 10:00:55 +0000
Manifest next update: Thu 29 Oct 2026 10:00:55 +0000
Files and hashes: 1: fXCfZUIcS9FszTCvtMFRqyOwHUA.roa (hash: 6cg3gD/b2Eq0ozSudTsMLJ3h/kzYzkasW+awbVRHCw8=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: iTdOwcAw2o/Lmnfn8mZTIe5B35nNCzOyiknjI40AP9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:f4:a1:80:30:44:28:b7:0b:ea:4b:1c:30:9c:be:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Oct 28 10:00:55 2026 GMT
Not After : Oct 29 10:00:55 2026 GMT
Subject: CN=f81677b55d78f57ddca9ef18c5717ac7208baa91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:40:1a:ab:37:2f:bb:e9:37:59:32:41:92:
3a:3f:ef:cd:60:8d:30:98:1a:cb:bb:8c:3a:cb:a6:
e1:cc:e4:24:e3:ef:c5:13:c5:04:a6:e9:5b:57:4b:
77:af:18:80:30:b4:36:4b:43:b1:8b:fb:8f:ba:05:
df:d3:56:98:e2:69:90:cd:ff:20:16:8f:69:9f:cf:
39:2c:79:f4:57:41:e8:0e:43:b6:5b:8f:93:ab:6d:
af:31:79:4c:af:20:1e:ff:b2:b9:76:b0:f9:c5:99:
57:80:10:28:3c:72:ff:1e:45:bd:a4:90:52:7f:a5:
29:d1:2c:95:da:0d:6b:de:a6:82:61:90:d7:1e:c4:
a6:0a:4c:a7:4b:bc:ec:fd:09:85:49:b2:35:bc:d3:
18:f4:ce:28:0a:c4:b5:2c:33:43:2c:82:0f:9a:fb:
bf:05:3e:64:36:84:eb:8f:62:ec:30:b8:ff:fe:ec:
10:db:9a:d6:4b:46:45:cc:94:f9:61:6f:07:a0:a4:
98:a6:0d:d8:57:60:2e:a4:39:e4:52:e4:5a:9e:0e:
e4:ac:01:6a:1e:1b:ad:d0:0a:b9:a6:1e:97:50:0d:
ae:cd:89:2c:d9:dc:56:19:8d:3e:bc:f5:67:01:45:
56:b6:e5:3c:04:e3:c5:78:bf:53:fa:ad:61:01:d7:
69:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:16:77:B5:5D:78:F5:7D:DC:A9:EF:18:C5:71:7A:C7:20:8B:AA:91
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:af:a7:5c:f9:35:c1:96:64:a6:42:66:22:66:d3:c4:04:bb:
21:43:2d:35:df:6a:84:be:16:59:f0:d2:7c:a6:55:71:e3:3c:
61:d0:87:74:c5:78:ee:57:41:e3:b8:cf:df:ba:b6:03:6b:51:
b5:3b:fc:6d:1a:91:ba:6e:b5:b5:51:e1:f1:f5:6b:63:d6:6c:
76:48:ba:05:a5:98:51:be:a0:36:09:80:47:20:ba:b8:6b:4f:
e0:b7:f0:43:ef:00:49:dd:0b:ab:95:b6:b4:a3:3b:d9:ac:e6:
72:c7:76:96:50:be:96:d8:1c:a5:f4:69:44:a4:36:89:1d:b6:
b4:09:fa:be:46:f9:b4:fa:23:53:f5:a0:a5:29:34:7c:23:11:
06:ae:70:92:b6:05:9b:6d:2f:06:3d:e8:52:88:cb:94:97:75:
00:ba:ff:62:ef:4f:6e:8d:46:49:b4:6a:73:01:95:88:c5:87:
df:76:f4:8e:7d:3f:2d:d8:6f:b9:41:48:11:eb:18:41:1d:4e:
0e:c9:c0:8d:c7:46:76:27:03:8d:93:51:da:df:98:8e:7b:60:
db:6b:9f:74:70:23:c8:96:d9:83:aa:a9:80:cd:3d:6a:0c:58:
0c:38:c0:55:e0:9a:9b:f5:41:de:f4:02:12:53:22:d5:d7:7d:
10:6f:fb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:07:37 2026 by rpki-client