Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: 9VlGzW7XucTjDXtqXGN5REVq3nBiv6s9/2m65EMcLVI=
Subject key identifier: 24:BB:1F:6A:F0:89:53:04:4C:97:CB:FD:CC:37:CB:1F:D6:F9:D8:E4
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 019CE5FF2A022F041B00FBADB8E22DFDB00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 07:00:30 +0000
Manifest this update: Fri 13 Mar 2026 07:00:30 +0000
Manifest next update: Sat 14 Mar 2026 07:00:30 +0000
Files and hashes: 1: fXCfZUIcS9FszTCvtMFRqyOwHUA.roa (hash: 6cg3gD/b2Eq0ozSudTsMLJ3h/kzYzkasW+awbVRHCw8=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: 7C89b/B3YqhqtUiY6n+N0tw15PLk+WhCdJXBHfKkPNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:2a:02:2f:04:1b:00:fb:ad:b8:e2:2d:fd:b0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Mar 13 07:00:30 2026 GMT
Not After : Mar 14 07:00:30 2026 GMT
Subject: CN=24bb1f6af08953044c97cbfdcc37cb1fd6f9d8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ee:cd:59:14:9e:6c:81:3f:93:3b:a3:cc:2e:
25:33:76:e4:12:47:49:96:47:b9:91:73:67:ad:61:
e0:fa:11:a0:83:b7:07:04:47:a8:5c:e0:25:4e:7d:
e4:d6:e5:1b:9c:3e:40:fc:98:1f:41:9b:41:8b:f4:
db:67:4a:cd:10:f9:8b:c6:42:b1:c4:30:11:90:99:
45:df:de:79:54:10:25:dc:8a:93:b9:51:c0:a4:9e:
54:2a:e4:d7:6a:00:c0:65:0d:3a:32:47:58:cb:e0:
da:27:45:6d:a4:fc:d5:82:af:aa:b0:f7:df:48:43:
e4:65:13:e5:fe:31:0f:e7:e8:4d:0a:dc:64:2b:97:
46:4b:af:99:92:4a:79:77:97:07:17:f3:6b:1a:85:
0d:b4:9c:38:4c:dd:86:ac:d8:50:92:ac:fa:19:c3:
51:b5:86:ba:fc:1b:8e:68:31:4f:f8:87:bb:59:47:
92:ba:7d:18:30:f9:4a:2f:40:46:53:d6:86:be:26:
33:3f:1e:29:b3:76:4c:00:4d:ae:37:b5:02:d4:0f:
ea:d6:8f:55:91:3c:37:8e:ab:7d:40:2d:d2:78:7a:
c7:92:bb:a2:f9:12:75:a5:ea:67:c4:74:47:68:61:
4d:07:04:0d:8e:81:01:bf:f6:a5:9b:fc:a1:27:89:
05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BB:1F:6A:F0:89:53:04:4C:97:CB:FD:CC:37:CB:1F:D6:F9:D8:E4
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:31:37:bd:b3:3d:8d:1a:7a:ad:6f:21:09:a8:ed:d0:f2:9f:
21:29:9e:82:05:8e:98:e0:45:ae:e3:cf:a3:ba:7f:f2:91:35:
de:bb:a7:a5:89:28:ab:13:6d:67:28:f9:9d:23:b2:bc:c5:90:
2a:7e:fa:95:2c:9c:74:a7:05:ae:47:68:be:53:90:fe:0d:e1:
b6:60:cf:4d:3d:3a:50:a6:db:6d:39:05:b1:04:51:58:5d:e2:
23:1f:af:36:9f:d2:f3:48:85:d6:3c:69:33:ae:24:9b:65:3a:
f3:83:cf:6c:96:a8:e3:3b:37:96:1f:f1:09:04:c1:8c:f0:28:
66:0c:41:68:0b:67:dc:6e:0e:c9:13:29:9a:52:6e:79:f3:37:
e6:cf:c1:de:63:f6:ad:22:4b:05:74:a7:f4:ca:e7:f5:b5:dd:
d2:f7:61:e9:43:49:a5:b8:33:46:77:65:69:20:16:72:50:e5:
d7:ea:50:f7:e3:29:2a:51:9f:ad:8c:9e:3e:23:53:b3:a4:1b:
5f:13:8e:f3:6f:24:37:b0:d5:b8:44:bd:ce:1a:f0:05:6e:e1:
ab:8d:58:6c:85:a9:af:d9:d2:29:a5:34:c6:2b:10:3d:5f:d7:
d1:10:25:b0:b4:dd:5b:63:d6:c0:f7:b0:ef:f9:11:3c:70:81:
69:e1:f4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:08:43 2026 by rpki-client