Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
File: X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json)
Hash identifier: TFhJy1/fE0hmN1x6TCU+julmVbfo/ZJzLlGJjx4dUVA=
Subject key identifier: F3:A6:9C:D5:B9:C9:41:B6:6E:F7:BC:C0:D8:28:6C:45:39:BE:AF:A0
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 019D25F18EC634403968061451E06DBD42D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
Manifest number: 0E0B
Signing time: Wed 25 Mar 2026 17:01:20 +0000
Manifest this update: Wed 25 Mar 2026 17:01:20 +0000
Manifest next update: Thu 26 Mar 2026 17:01:20 +0000
Files and hashes: 1: 1OR7MiBYrBCTFUeXZt8nxO3fT1w.roa (hash: O61r2RIUvERzmLaBVoDYNHK7kM7U4nIi+QM0eXMDPoU=)
2: 3D1cLIqJM9j2TiDk4FKtoH3bACY.roa (hash: 9wyJBuDfbj2/qxzFzPQPUFVR/sga3QbA+VZr0ZYglIg=)
3: 5lLzlOSe2EMzTCpU7J1Pn4O1Qb8.roa (hash: yloQb3FNDE4bgwNWi1qn6U4HxV6wapprJyRxX2uAb+o=)
4: DVjlzf9-odFEmzfa3WbgW4SKOHc.roa (hash: G99ptyhMQXh4T7sxQFOQiD1Ft8xrRXqhmTKs+Lr/jf8=)
5: OOjjbiEjw5WVY_zDG3MNRgHawWc.roa (hash: 6hSHQjeZPUQqSFTuBckD24PIf8hoBIsHEYoWzKPaWp4=)
6: Uv7GAQ_UlMBXFGvxutIi16HxUTg.roa (hash: CsEeDd1h6WkVmrp/M5Z/7OMRR7HqcBmhfSum5Jl9L2E=)
7: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: BJQLUZfzd6P9TGCW0pgIMUsDWA+PUdUZXiX+R+fR6Uk=)
8: _GfFqUw5mWGbjc_mCBWnNfju97k.roa (hash: 2siq+SOSG2tsLvn2PAlvw4ivV0pVSjLxvVW1AegSSYg=)
9: wYvIMqVJD5kGsVB7Odk1zqw9PLE.roa (hash: lv2FW5IzYlo7gJNIKly5LsLWJkSxo+G8ybKR+UJH+Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:8e:c6:34:40:39:68:06:14:51:e0:6d:bd:42:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Mar 25 17:01:20 2026 GMT
Not After : Mar 26 17:01:20 2026 GMT
Subject: CN=f3a69cd5b9c941b66ef7bcc0d8286c4539beafa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1c:3d:21:8d:2f:06:66:fb:00:4f:32:ee:c8:
34:00:ce:34:63:63:5c:48:8a:e3:5f:c3:9c:c4:67:
6c:1a:32:14:49:dd:9c:49:f2:34:c6:cf:31:4b:26:
b9:e4:f6:3e:ba:fe:53:b8:21:38:5d:33:b7:b5:59:
f1:0f:f2:95:8a:e3:a7:87:76:8a:95:c9:ff:4c:66:
e9:5b:38:95:28:5b:2f:a9:86:7c:a3:9b:40:79:22:
65:84:bf:bc:86:23:fa:a2:7f:ee:ee:e2:a9:b7:e2:
d0:ae:a7:70:b5:8e:66:b7:14:a6:bd:21:3e:29:19:
24:10:9d:16:b0:c5:f1:16:0c:12:fc:c4:d0:40:b1:
36:ee:38:96:57:0d:8a:3e:e1:1a:ec:ed:a4:48:ef:
23:4d:70:a1:84:a3:2f:ce:62:f3:09:da:ca:ce:8f:
5a:22:33:6c:8c:c7:1a:56:33:e9:f5:80:5b:58:a9:
36:84:47:ac:31:84:a2:19:50:d2:95:57:90:17:2d:
16:15:eb:3e:98:6b:2b:56:dc:07:30:68:e4:da:74:
92:86:09:04:3e:0c:88:6f:72:c3:05:dd:18:9b:d7:
60:e8:2c:95:b1:f4:52:08:9d:21:86:f8:f6:12:3e:
02:3c:d9:ac:cd:b7:df:6f:72:36:15:76:96:3d:d6:
a9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A6:9C:D5:B9:C9:41:B6:6E:F7:BC:C0:D8:28:6C:45:39:BE:AF:A0
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:af:c2:a0:3e:0b:9b:4c:38:b0:2d:00:93:18:ad:77:70:6a:
83:43:2e:78:c0:26:33:48:bd:e9:9c:fb:47:3d:1b:3d:cb:aa:
d2:dd:25:e8:9f:53:b2:47:84:72:2c:3d:d7:94:c6:b5:0e:b1:
fd:1c:1c:6f:32:e6:0b:15:da:66:7c:d8:2c:08:7f:39:40:b0:
04:34:93:15:8d:41:32:a2:04:8f:3e:73:4a:96:ab:f4:c6:21:
57:e2:96:f6:a3:bd:b2:78:53:83:cf:cb:be:98:4f:10:a0:95:
cc:3e:62:10:9d:ed:a6:ce:ab:b7:b5:02:ef:10:cf:5e:59:9f:
8a:02:3d:5e:02:d5:1e:86:c8:90:b2:5c:2c:4b:7d:0e:f1:fe:
66:e9:66:0b:47:0d:cc:3e:dc:a0:03:76:a5:04:43:41:b5:f7:
1d:73:b0:17:66:64:e2:b4:b1:2a:e2:7b:97:2e:10:e1:f2:24:
f1:d8:37:60:4b:4a:34:a9:0b:df:85:7c:3f:b8:c4:13:66:0a:
2e:ab:ca:e7:7b:81:1f:a7:d2:d7:a4:10:ca:1f:d6:f6:44:20:
c8:8c:b1:19:c4:af:62:2c:f1:44:74:32:ca:cc:4a:d2:99:78:
89:16:4d:12:f9:13:9e:88:93:b5:94:78:73:b6:9d:1c:9b:3c:
e0:d2:7f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:24 2026 by rpki-client