Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: G92Q1Dco81vDSdwEYSPyZ1UD+CVMdAL7crdEt34cLyY=
Subject key identifier: 6A:94:F5:0F:1F:06:A1:A6:99:F7:45:43:2F:B3:78:9C:76:C0:34:B2
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 019DCFABD68ED2BBD292692F906D269BA888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 16:00:38 +0000
Manifest this update: Mon 27 Apr 2026 16:00:38 +0000
Manifest next update: Tue 28 Apr 2026 16:00:38 +0000
Files and hashes: 1: fXCfZUIcS9FszTCvtMFRqyOwHUA.roa (hash: 6cg3gD/b2Eq0ozSudTsMLJ3h/kzYzkasW+awbVRHCw8=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: WQFklWjq7U274/cHsTWywNIp5+upkGgcXeZdFSVHP5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ab:d6:8e:d2:bb:d2:92:69:2f:90:6d:26:9b:a8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Apr 27 16:00:38 2026 GMT
Not After : Apr 28 16:00:38 2026 GMT
Subject: CN=6a94f50f1f06a1a699f745432fb3789c76c034b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:dd:e2:1f:31:22:d5:46:42:6a:67:0b:bb:
90:11:6d:d5:93:e0:9d:87:a1:7b:5b:05:37:f8:ea:
6f:8f:56:3d:f0:4b:e7:50:c6:82:0c:09:00:62:29:
d2:dd:5a:9e:6f:c9:db:9a:85:ed:fa:a4:93:86:85:
07:c9:87:e2:fa:0e:53:6b:35:cb:3b:56:c6:20:f3:
f8:86:33:19:fe:0e:d8:c6:f2:33:70:cf:68:e8:70:
37:68:27:c2:f6:41:b8:92:e4:2a:8e:9d:dd:d0:c5:
65:ba:ff:d1:06:a4:5a:cc:b8:2d:bd:0e:a8:c0:ec:
4f:2e:69:c5:62:4c:7f:42:73:84:5e:82:cd:c1:ef:
d0:5e:37:50:2c:30:e1:73:44:c3:7d:8d:62:19:2a:
c2:5b:fb:98:16:c3:59:a7:06:fb:45:98:2f:0c:0a:
1c:b6:e0:59:98:2d:c3:f7:2b:6d:a9:63:e2:1e:98:
63:c4:cc:48:ad:df:a1:12:63:5a:af:99:47:ca:ab:
ab:d9:2e:3d:14:b6:da:6a:b1:52:9b:43:03:7e:38:
86:b3:6d:01:6a:64:93:30:d4:84:07:cd:72:84:58:
5d:3a:f7:db:6d:f7:69:69:82:e7:91:b3:0e:66:ef:
59:c8:c8:9e:60:04:d4:4c:27:28:c2:10:10:fa:01:
11:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:94:F5:0F:1F:06:A1:A6:99:F7:45:43:2F:B3:78:9C:76:C0:34:B2
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fa:40:ee:48:c5:94:7a:06:fe:a5:c7:d3:f3:fc:46:0d:d0:
b4:f8:b6:9c:4e:e3:bf:51:23:6d:10:15:59:52:91:b8:2c:3c:
30:05:b1:e0:c3:bd:45:bc:99:e5:c0:55:92:ff:f2:f4:3b:44:
85:1b:8c:2b:ef:82:a0:06:24:3e:87:c9:72:2f:8a:ac:19:f9:
32:fe:ab:85:6d:ac:55:01:53:e6:68:de:75:68:08:ae:cc:fe:
57:c7:49:dd:5a:a1:7f:90:3b:84:1f:46:2d:46:67:0f:99:17:
3d:46:9e:5e:f8:fd:31:b3:05:69:ed:ff:65:d6:d4:1e:56:31:
de:c6:36:7e:7a:56:cb:1c:f4:09:b3:8f:42:cb:2c:11:29:6a:
88:fb:82:b5:86:26:a4:23:a7:b4:7b:57:a3:d2:cf:12:ec:ed:
51:8a:bf:eb:98:f0:a9:46:2c:c7:f1:b1:05:72:9c:e3:3d:16:
62:ae:50:aa:d7:8b:fa:7f:b7:40:8d:d9:60:a9:e1:be:1e:76:
63:0e:de:da:63:f7:40:a6:78:f6:70:9f:e1:1f:be:9a:66:d1:
88:cd:6a:67:98:af:aa:38:ae:99:02:f3:36:1b:0e:26:db:17:
93:fa:ea:68:eb:64:5a:52:46:8e:2c:e4:85:6b:d0:48:6d:23:
34:58:52:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:26:40 2026 by rpki-client