Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
File: X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json)
Hash identifier: A+Nz1D/Ejyhcz9ojfSh8LooOLDzIc9N3T4ZNbA93swY=
Subject key identifier: 02:84:93:82:89:C5:DC:83:A5:ED:23:D4:3A:40:2F:15:42:A5:2C:BA
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 019F93FFC959DAB5719C7BD2AB3416D0C57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
Manifest number: 0F4E
Signing time: Fri 24 Jul 2026 12:00:41 +0000
Manifest this update: Fri 24 Jul 2026 12:00:41 +0000
Manifest next update: Sat 25 Jul 2026 12:00:41 +0000
Files and hashes: 1: 1-5Pgda6HIJ1A50ORC-s21IuXoKI.roa (hash: G3EoBYlK+6iAK1+dHCsC16Icl5M1ev7HNUR0XeGO+Q0=)
2: 3D1cLIqJM9j2TiDk4FKtoH3bACY.roa (hash: 9wyJBuDfbj2/qxzFzPQPUFVR/sga3QbA+VZr0ZYglIg=)
3: DVjlzf9-odFEmzfa3WbgW4SKOHc.roa (hash: G99ptyhMQXh4T7sxQFOQiD1Ft8xrRXqhmTKs+Lr/jf8=)
4: MR48vFydmr0SsuxdgWTO19IRiHw.roa (hash: mUaEgZFfj65CrRRMW4qrWw5/5psCJW35a20y1tpoOkI=)
5: OOjjbiEjw5WVY_zDG3MNRgHawWc.roa (hash: 6hSHQjeZPUQqSFTuBckD24PIf8hoBIsHEYoWzKPaWp4=)
6: Uv7GAQ_UlMBXFGvxutIi16HxUTg.roa (hash: CsEeDd1h6WkVmrp/M5Z/7OMRR7HqcBmhfSum5Jl9L2E=)
7: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: 0IU3/Chs2N5wjPRGU+fEeMXGbgUWiO7gHRl7qf55Wzc=)
8: _GfFqUw5mWGbjc_mCBWnNfju97k.roa (hash: 2siq+SOSG2tsLvn2PAlvw4ivV0pVSjLxvVW1AegSSYg=)
9: wYvIMqVJD5kGsVB7Odk1zqw9PLE.roa (hash: lv2FW5IzYlo7gJNIKly5LsLWJkSxo+G8ybKR+UJH+Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:c9:59:da:b5:71:9c:7b:d2:ab:34:16:d0:c5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Jul 24 12:00:41 2026 GMT
Not After : Jul 25 12:00:41 2026 GMT
Subject: CN=0284938289c5dc83a5ed23d43a402f1542a52cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6e:65:3f:3e:73:d3:34:30:07:4f:08:30:bc:
ba:6b:67:82:08:08:57:5c:7a:03:a5:7e:3b:bd:bf:
b7:dd:e7:9f:15:00:ea:f2:80:b6:16:e0:ae:8a:5b:
ff:9d:55:37:e2:85:4f:2b:6a:0a:0b:d8:29:38:87:
6e:2a:52:04:04:d7:45:95:9f:4f:a9:42:36:56:f9:
c7:5b:05:40:5e:b5:54:f8:f9:75:4a:ff:7c:b9:b6:
8c:b1:ce:8c:99:d2:94:2d:2f:65:5e:45:08:ed:01:
b5:7c:cf:28:b4:89:5d:f9:fc:1b:81:dc:b3:d8:76:
68:1a:01:09:df:43:9c:92:12:9f:eb:32:7b:a6:97:
f1:37:fc:ae:fc:f6:6b:a4:17:db:46:ad:da:33:94:
0a:4d:d4:49:f6:15:d5:b7:bf:fa:80:8f:77:6a:1f:
0a:4c:17:e7:08:1d:b7:77:f8:a1:7c:3e:f2:2a:29:
d2:22:b9:3f:bb:26:3e:3d:c4:5e:42:c0:c4:30:26:
7a:7d:11:d1:50:ec:d8:82:a3:54:36:cd:c8:5a:19:
f1:e1:3d:40:97:b5:63:20:9e:a7:4d:4f:04:3a:1a:
67:ce:0f:9a:df:4d:64:4d:19:22:a7:5d:d8:80:5b:
39:fd:bf:4b:8b:26:19:87:3b:7a:fa:ac:f7:a0:35:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:84:93:82:89:C5:DC:83:A5:ED:23:D4:3A:40:2F:15:42:A5:2C:BA
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:69:82:5b:43:3e:e7:3e:4d:fe:7a:c9:c4:ce:58:45:d4:88:
52:11:bd:df:58:51:c6:d7:18:8a:ec:e7:ed:9f:59:ad:ea:27:
17:85:78:6f:8e:3d:0d:12:94:fe:7f:58:e1:4c:c5:c2:63:d7:
88:c5:53:ab:bd:11:b6:3a:e7:fd:83:6c:26:fa:a8:d5:7b:6e:
76:48:1c:4d:33:1e:ab:2c:20:49:36:6c:ea:09:e2:56:ec:b9:
ee:de:8b:09:22:71:03:f6:52:c7:98:92:89:ca:cd:6c:d0:35:
06:4f:b4:44:1a:65:d0:66:52:d2:8a:c6:00:57:91:cf:94:e1:
02:f6:3b:46:4c:18:40:99:8a:2d:14:c8:44:a3:3c:d2:8c:20:
ec:a7:da:f7:4f:9d:54:bd:44:18:c4:bc:41:8b:74:1a:a0:1a:
1f:cc:7a:e6:a5:63:ef:f5:1c:bb:35:6c:1d:a6:4d:69:04:9e:
ae:e4:b3:51:ab:ab:eb:2e:8d:c9:77:60:8d:b2:c5:e1:79:91:
31:71:e2:51:6c:a2:1d:ac:22:09:a8:44:e3:ff:c0:3e:e0:68:
56:66:6c:7b:02:f0:78:6d:7d:4d:32:77:33:c7:cd:c4:20:39:
1a:2d:da:b4:c8:72:ba:a5:d5:72:74:67:78:34:2a:8f:41:5f:
4c:05:d1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:21 2026 by rpki-client