Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
File: X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json)
Hash identifier: dRCmvekRptDFt7eSz28KrFIIu4srLImHfDpA1/wKq1s=
Subject key identifier: F8:5D:ED:70:8D:36:C1:E8:A2:20:9B:A0:5E:03:C0:A1:B7:54:96:D8
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 01A0F1552DF30384E3D70BC2D22F293B10B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
Manifest number: 100C
Signing time: Wed 30 Sep 2026 08:01:26 +0000
Manifest this update: Wed 30 Sep 2026 08:01:26 +0000
Manifest next update: Thu 01 Oct 2026 08:01:26 +0000
Files and hashes: 1: 8ZZTeJpDBcDE73u8m41H0-lGPPY.roa (hash: 8m61DCUJ11WDE8bG7zcJxhYtu4vlHHTEEUTPQVhJRkE=)
2: AGHCS-ixsIWB0-lqutli-vvU1Nc.roa (hash: WCE3HATmUblpfjUoorTVGOjh6oDDC4lQMXaVw/0d2O8=)
3: JsMnbrdIaxVJCAfbkanZJmJY8KA.roa (hash: xYEVUlGxhvFP9bF5W7UAg6rvOmBON7mfzaUHb2SYtRQ=)
4: KRefFYXKlIzwgLe6X2u3LKd7yyE.roa (hash: Du136c+HIMkTr5Ejm95v2mfyMSLoNOYcvMzlhfMYQBg=)
5: MR48vFydmr0SsuxdgWTO19IRiHw.roa (hash: mUaEgZFfj65CrRRMW4qrWw5/5psCJW35a20y1tpoOkI=)
6: NrcU88JD63OVBZN-HsA67x9dDHE.roa (hash: HUkDNA6Xh8flgHRqE5N9jUO0pv+vYDw6mEy5GD9/GH8=)
7: OOjjbiEjw5WVY_zDG3MNRgHawWc.roa (hash: 6hSHQjeZPUQqSFTuBckD24PIf8hoBIsHEYoWzKPaWp4=)
8: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: S+nwUpkJkpFixJ0HdqIXLkVDE/XjIyYClSWom8mYpWo=)
9: _OEsYiK5KqFB_kzK0ssj0S5CK68.roa (hash: 4Cjt41jfxhqXMuxBGItK34YzzamDJgH6/BTR+mCLnTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:55:2d:f3:03:84:e3:d7:0b:c2:d2:2f:29:3b:10:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Sep 30 08:01:26 2026 GMT
Not After : Oct 1 08:01:26 2026 GMT
Subject: CN=f85ded708d36c1e8a2209ba05e03c0a1b75496d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:21:6d:4d:59:13:c8:79:a0:29:45:2a:47:f9:
10:d9:c4:a9:12:55:34:25:cc:4f:ff:86:f4:85:bc:
5d:5a:2f:cb:b7:2d:ac:ed:41:94:68:ad:c1:e9:eb:
40:b7:82:7b:53:cd:87:eb:8f:82:15:c3:07:21:a0:
59:30:38:d8:6a:9c:e8:9f:06:5f:c3:b1:6a:e0:fa:
41:b4:9f:51:ee:82:8a:1c:10:cf:34:18:ab:22:9c:
ea:6d:b9:d8:98:4c:20:2b:1b:14:a6:8a:20:b6:b2:
6d:b5:7f:de:b7:2f:3c:3c:27:d4:86:b5:77:7d:d1:
2b:4e:41:96:0a:20:ca:33:1a:62:9f:04:2c:d8:03:
fb:43:0f:9a:ef:ef:b6:fb:f8:31:8c:f8:e9:0a:91:
ed:84:74:9d:59:2f:b6:d2:09:76:61:7d:d4:97:95:
c6:03:c5:d2:47:70:da:17:a8:d1:ea:ea:a0:fa:5f:
d4:dd:1d:8c:b8:d1:aa:43:ac:84:ec:de:9e:f7:34:
35:57:8f:95:13:ee:5f:33:58:c3:3f:cf:87:9b:ba:
57:5d:4f:11:62:13:f6:36:b5:da:84:2f:f1:6c:b1:
59:74:7c:a1:6f:51:60:ee:69:d7:41:d8:3f:c2:e2:
8c:99:47:bd:32:54:71:51:37:be:27:b5:13:13:74:
2b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5D:ED:70:8D:36:C1:E8:A2:20:9B:A0:5E:03:C0:A1:B7:54:96:D8
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c0:e3:6d:f3:2a:c2:53:6b:0e:ce:5d:b7:52:fc:8f:ac:93:
8e:c2:7d:74:68:f1:20:0c:2c:55:a4:2e:0b:5a:d8:2c:82:c2:
0d:b6:a7:d2:9b:03:61:74:e8:20:23:28:96:88:aa:94:6e:ee:
08:8d:8a:35:30:14:b4:03:18:60:21:05:ac:d9:e8:04:10:2b:
ec:a4:0e:28:c2:7a:ff:d0:c1:4e:d2:97:2c:56:a4:b6:84:63:
38:4e:2b:b1:b5:e9:78:9f:ce:d1:8c:b7:94:0f:22:87:93:06:
20:89:11:12:9c:ba:8e:b7:4d:41:5b:8b:cb:5c:dd:5a:f2:6d:
89:c1:78:ae:e1:b3:a7:65:d5:5d:74:95:3b:ee:f5:8a:cb:e6:
58:aa:5e:a3:39:e6:51:4e:22:7f:26:c1:ba:30:37:df:65:99:
42:2c:e2:9c:4c:0d:f7:01:ff:6f:ea:00:85:12:eb:5c:89:80:
c8:fc:81:17:14:9e:c6:71:3d:a0:54:3e:6b:e3:d9:7b:5e:0b:
2a:c1:b3:a4:9b:89:61:00:4a:4d:71:22:47:a4:cc:87:25:18:
48:ed:41:52:ea:93:7c:39:2f:82:e2:dd:9d:10:a4:ef:e7:a3:
9d:c9:85:42:ed:19:74:20:8e:72:0a:14:fd:70:f5:bd:5e:23:
ba:85:d7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:06:10 2026 by rpki-client