Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
File: X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft (raw, json)
Hash identifier: 5w+P1oKZp55iPMKr+rdSSvPNVd2lpDJ7euWtAznkypI=
Subject key identifier: D9:2A:07:7C:BA:03:43:79:EC:07:6C:DB:55:37:76:F2:26:17:CB:22
Authority key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
Certificate issuer: /CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Certificate serial: 019D270493D6020C62F4B10444266016EF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
Manifest number: 0787
Signing time: Wed 25 Mar 2026 22:01:44 +0000
Manifest this update: Wed 25 Mar 2026 22:01:44 +0000
Manifest next update: Thu 26 Mar 2026 22:01:44 +0000
Files and hashes: 1: Sp-Rp44m3Zt8RuuF6n5097S4ock.roa (hash: Lz4ywdxNN6CBi6o+N2fbgHtT/99fDk01I1Om7/73lR4=)
2: X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl (hash: 1LHpJA9duDrFmtvsqKo+RxppdD1Q+BD2x7JfHvOeq4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:93:d6:02:0c:62:f4:b1:04:44:26:60:16:ef:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Validity
Not Before: Mar 25 22:01:44 2026 GMT
Not After : Mar 26 22:01:44 2026 GMT
Subject: CN=d92a077cba034379ec076cdb553776f22617cb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:a6:da:ea:af:5c:e4:97:ba:e4:ef:80:b6:
06:38:b1:75:fa:2a:ab:3a:e8:22:12:e5:a4:95:74:
09:27:50:98:2c:69:a9:a7:af:13:af:33:f0:9f:80:
cd:3a:4d:97:7c:bb:bd:7d:06:32:5c:40:30:50:1c:
91:76:e8:c7:87:e5:8b:53:02:2d:c6:4e:78:54:8a:
56:a8:27:b7:86:40:02:27:8a:22:c7:04:2f:61:1a:
b7:eb:2d:82:8e:91:b6:79:cd:ec:44:20:ed:fc:eb:
94:53:0e:de:a5:c0:1c:1c:97:a4:1f:fa:dc:c2:31:
0f:a6:2c:ef:90:22:e0:bf:90:e2:3a:5f:34:ad:08:
af:78:a5:3b:bb:d7:46:97:64:14:e5:5d:35:43:f8:
69:11:53:73:6d:3a:73:8a:e5:99:24:ce:60:d1:f8:
aa:09:88:f2:29:b7:11:31:c3:cc:c3:55:3a:33:e3:
fc:49:f0:d6:54:76:25:1c:23:84:22:d2:d5:98:b5:
16:74:4a:9c:64:ed:0a:53:66:b2:d3:18:16:7f:b6:
2b:61:bf:d5:91:74:fd:2a:5f:76:ca:67:68:65:36:
6d:42:40:6f:7e:a1:01:f4:5c:d9:c0:15:35:65:b9:
b5:54:e0:8a:5d:ef:99:e2:41:f9:47:a6:63:df:85:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2A:07:7C:BA:03:43:79:EC:07:6C:DB:55:37:76:F2:26:17:CB:22
X509v3 Authority Key Identifier:
keyid:5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:be:39:df:cf:2b:9d:4b:9c:0c:9b:07:db:88:1f:80:b2:68:
3f:77:e4:e9:b3:7f:31:1c:33:e8:85:41:4b:b3:af:4f:bb:2e:
08:fc:5b:63:c7:cf:e8:cb:24:22:bb:84:87:94:d5:cc:cb:e1:
f5:11:0e:32:f8:09:e2:67:4e:94:cb:d1:b7:88:7d:15:de:22:
af:af:bb:4a:fc:92:0f:8e:b0:54:eb:ab:2c:9c:c5:d7:f0:a2:
dc:c2:b1:c7:18:7d:b5:82:e0:ea:4f:b7:f5:60:6f:22:a1:00:
b6:57:05:09:ad:e9:75:05:a4:c8:07:d8:f6:5d:f5:60:0f:e0:
c0:ba:4e:e8:42:71:1f:cf:55:15:dc:87:47:7b:43:67:69:93:
2f:df:75:f2:b7:31:f4:8d:21:f4:45:ec:23:ad:22:c8:b5:6f:
1f:5f:7e:c5:9d:bd:79:f5:fa:42:cd:4c:05:51:cd:8a:47:91:
91:c9:5d:de:99:c9:7e:a1:10:1f:37:3c:c8:30:43:14:92:9f:
3f:2c:72:07:29:a5:f2:fc:05:a0:d5:c5:0c:1e:cc:5a:98:59:
c8:9f:1b:03:71:17:40:2e:9f:81:b2:c3:e7:3b:9b:8f:b6:fa:
90:b7:72:57:5b:ae:cd:f0:e1:d5:d5:3a:40:57:4e:c4:18:d0:
7f:d8:34:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:49 2026 by rpki-client