Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: yT5CrA8fV09Kvh2Rn59dAWLy7wgWDlPfB6rO+D2AQh8=
Subject key identifier: 5D:26:F5:7C:DF:30:56:0F:B8:29:B0:98:4F:7B:B8:01:28:9C:84:FB
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 019FA30542CB067D7DD0BF7FEE6667F22436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 10:00:58 +0000
Manifest this update: Mon 27 Jul 2026 10:00:58 +0000
Manifest next update: Tue 28 Jul 2026 10:00:58 +0000
Files and hashes: 1: fXCfZUIcS9FszTCvtMFRqyOwHUA.roa (hash: 6cg3gD/b2Eq0ozSudTsMLJ3h/kzYzkasW+awbVRHCw8=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: PetqfXbi7Rd+7FmucR36YUIibA0l9kI7YBr2O9go4A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:42:cb:06:7d:7d:d0:bf:7f:ee:66:67:f2:24:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Jul 27 10:00:58 2026 GMT
Not After : Jul 28 10:00:58 2026 GMT
Subject: CN=5d26f57cdf30560fb829b0984f7bb801289c84fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:66:e0:4f:40:07:e0:4f:a8:66:34:85:84:
54:e2:76:04:3d:e7:65:bd:ac:f5:f0:9b:24:d3:e3:
06:50:05:98:93:6f:8c:7a:55:3b:db:a8:14:72:df:
48:12:4c:f0:64:92:93:89:40:41:57:ca:59:92:9a:
51:20:1c:67:56:cc:9a:5e:1d:ef:13:76:c9:a7:a2:
c3:dc:cf:d2:0e:0e:3f:ae:87:ce:92:dc:26:0d:51:
44:81:eb:4a:b0:11:8b:8c:10:62:1e:1d:ec:92:09:
28:f9:e1:88:69:cb:e4:94:0f:fd:50:d2:b2:73:27:
81:52:b4:06:85:25:28:da:fd:d5:db:9f:2a:aa:5a:
14:5f:ca:b6:b9:a0:38:1a:ef:51:b3:58:40:c3:18:
13:e6:4f:26:bb:e5:1c:3d:52:c6:a9:ca:7e:80:0e:
ac:9e:c4:0e:4e:5f:f7:79:51:a9:46:99:b7:6a:00:
54:fa:5e:50:ae:33:da:1d:ca:fa:6d:77:7a:3a:73:
2e:f7:d9:a4:d0:32:1b:16:82:cb:fc:60:07:90:01:
f9:77:de:30:2d:a5:aa:9e:85:b0:09:8b:06:59:1e:
66:fa:10:f8:5a:56:6b:45:69:25:b9:50:a5:2b:e3:
52:2e:60:c0:74:35:91:f5:52:01:51:2c:0a:25:e4:
5d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:26:F5:7C:DF:30:56:0F:B8:29:B0:98:4F:7B:B8:01:28:9C:84:FB
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:07:3b:ff:8e:ee:57:b5:82:96:e3:71:af:ef:e3:f4:4e:06:
79:ab:e7:36:da:ee:1d:1b:08:1f:be:e3:0d:24:49:c7:b2:fc:
06:0b:00:5e:7e:26:67:58:fd:76:dd:ef:9a:6c:27:36:cc:a9:
ee:4d:50:5d:31:e3:68:96:f2:73:35:3e:09:a9:bf:84:c8:78:
fb:b3:e4:8b:b0:b8:69:c3:b8:b0:e5:fc:de:88:9d:17:4f:97:
54:93:0d:fc:5f:ce:73:d3:82:74:d8:f2:3b:75:6f:39:1c:a2:
db:66:6b:ed:94:53:05:6d:a8:4d:d8:23:01:09:cd:86:62:15:
35:89:a6:89:17:b1:71:48:84:68:8e:d3:58:2a:4d:a1:d4:e2:
59:c8:02:40:6f:df:c9:73:35:5d:b7:38:ab:1c:54:6f:ab:75:
15:3b:10:92:50:e0:26:e9:89:8d:1c:f4:ba:7c:8b:88:a3:8c:
c3:cf:0f:73:4d:f2:ae:67:35:7d:b0:30:93:bb:15:86:80:a7:
7b:fc:ab:52:ce:ad:cf:28:0e:d3:30:c7:b1:52:fe:45:f6:c3:
9c:4c:ff:b8:70:00:ba:3a:ee:f6:7f:60:cc:38:a3:18:41:fd:
c3:51:8e:c2:84:6b:65:40:64:6a:1b:5a:54:62:75:49:80:78:
d3:cd:52:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:02:02 2026 by rpki-client