Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: iZxDWt5OjTpKvkS36/sMjdWFx+eygNUSHARTQmUPZqY=
Subject key identifier: 17:22:C2:92:80:58:04:C0:5D:0B:6A:FF:01:A5:D9:A4:BA:6D:AA:D7
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 019D28BBE2CCD44ED262FB0792442EDE2ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 06:01:35 +0000
Manifest this update: Thu 26 Mar 2026 06:01:35 +0000
Manifest next update: Fri 27 Mar 2026 06:01:35 +0000
Files and hashes: 1: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: rDKKNyksaEJ9HK0tPIxYQtX/LRfjuqzcg2vh6Y2LnQY=)
2: wBzUUS1esVzgp7-S8WP1zjKAIpw.roa (hash: UgXBz+OKL1MAmpi06fp5fY0KFQ1LRcUZSGp9CfyxDlU=)
3: wjNWOCuY2E1_FvlqggQMJz_Utqw.roa (hash: BberhHSGLHh2AX9W6raGWWWl/q21AJDPsEIrCo+NFbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:e2:cc:d4:4e:d2:62:fb:07:92:44:2e:de:2e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Mar 26 06:01:35 2026 GMT
Not After : Mar 27 06:01:35 2026 GMT
Subject: CN=1722c292805804c05d0b6aff01a5d9a4ba6daad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:c4:7d:bd:92:b6:90:e9:79:15:8a:31:a7:
d5:cd:92:d5:19:f6:11:ea:17:4e:a4:71:15:24:e7:
e8:3e:fb:a1:d7:a9:ec:1c:a0:79:91:4c:53:88:e4:
bb:eb:de:2b:5d:71:e8:6a:f2:f7:25:c7:db:07:c1:
aa:d3:4b:1c:5f:0d:79:79:7b:a5:df:57:79:f1:2d:
c3:39:e4:f0:1b:9f:24:a9:01:7e:d8:32:bd:19:91:
20:85:82:2b:e7:15:d0:a5:ff:6c:08:64:60:14:33:
0f:7a:c9:90:39:5d:b5:b2:3a:a4:ff:58:cc:af:76:
e0:45:48:aa:dd:6e:c3:e8:9a:5e:6b:ec:a0:70:e6:
3f:bd:dd:e1:38:0d:34:5d:13:49:4f:f1:d5:a3:c8:
c8:78:4d:9e:0b:79:df:a6:fe:6d:44:b7:d7:10:0b:
16:c1:e8:1d:f2:31:dc:3d:57:05:3c:87:57:2d:ea:
7b:5a:d5:f7:50:61:5f:56:c0:96:2b:85:e4:8d:97:
32:28:b2:9c:fb:7b:1b:c6:f4:e6:ca:08:ec:a8:e6:
bb:2c:9e:65:41:28:8d:25:cf:99:43:e9:3f:48:67:
61:3a:1b:84:10:98:57:dd:52:16:12:81:90:e8:85:
fc:9a:95:ae:f3:4d:0e:c2:c6:de:5b:6d:9a:9e:2b:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:22:C2:92:80:58:04:C0:5D:0B:6A:FF:01:A5:D9:A4:BA:6D:AA:D7
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c4:47:89:95:aa:c9:50:6e:60:7c:9f:90:82:98:5e:48:46:
5e:b4:da:a5:c0:e7:f5:f1:5f:b7:29:96:50:ea:e2:81:9d:57:
6a:b1:12:85:74:57:02:e5:bc:8b:2a:67:d4:ab:a2:c3:39:d4:
92:db:87:c9:d3:0c:38:b0:48:46:f4:7d:e1:7c:ed:91:62:5f:
1c:db:ad:31:2e:8e:b4:13:50:ba:1c:0f:b2:64:c5:fa:1c:6c:
6f:f9:47:c8:69:1e:40:bf:2d:0d:ce:ba:2a:d8:89:9f:f8:8c:
cf:c2:35:75:18:f0:06:34:4b:e4:08:c2:99:5a:1c:59:62:10:
86:0b:4a:6f:09:c3:09:13:6c:cf:f3:b8:64:cd:78:b1:6c:e9:
9e:86:02:95:6f:02:a8:c4:03:2a:a8:d2:b1:51:1d:d8:2e:f9:
eb:58:60:96:5c:b6:1a:6d:34:db:4c:3e:34:d3:fb:22:24:41:
54:80:cd:1b:6c:42:21:62:f1:3a:e5:5d:de:92:d2:42:7b:81:
63:ab:b4:fc:a5:c1:4c:da:6f:26:a0:a2:1f:58:b9:06:ab:4d:
af:cd:8a:7a:6b:04:54:8a:7b:ee:7d:85:bb:a9:b4:ab:05:92:
95:ec:c2:52:8b:4d:c9:a8:2d:e9:18:6d:8b:1c:f5:f4:2d:c1:
9e:ef:25:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou+LM1E7SYvsHkkQu3i7KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1N2Y5ZmRlYTM1MGE3NjZiYjk4YzYwNGQzYjljMjc5MTY3
MzIyMDkwHhcNMjYwMzI2MDYwMTM1WhcNMjYwMzI3MDYwMTM1WjAzMTEwLwYDVQQD
EygxNzIyYzI5MjgwNTgwNGMwNWQwYjZhZmYwMWE1ZDlhNGJhNmRhYWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb/Efb2StpDpeRWKMafVzZLVGfYR
6hdOpHEVJOfoPvuh16nsHKB5kUxTiOS7694rXXHoavL3JcfbB8Gq00scXw15eXul
31d58S3DOeTwG58kqQF+2DK9GZEghYIr5xXQpf9sCGRgFDMPesmQOV21sjqk/1jM
r3bgRUiq3W7D6Jpea+ygcOY/vd3hOA00XRNJT/HVo8jIeE2eC3nfpv5tRLfXEAsW
wegd8jHcPVcFPIdXLep7WtX3UGFfVsCWK4XkjZcyKLKc+3sbxvTmygjsqOa7LJ5l
QSiNJc+ZQ+k/SGdhOhuEEJhX3VIWEoGQ6IX8mpWu800OwsbeW22anitCqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBciwpKAWATAXQtq/wGl2aS6barXMB8GA1UdIwQY
MBaAFHV/n96jUKdmu5jGBNO5wnkWcyIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81YTNiNmItOWE2MS00NTU3LWEzZDYt
YzI1YWJhNmI1NWFmLzEvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81YTNiNmItOWE2MS00NTU3LWEzZDYtYzI1YWJhNmI1NWFm
LzEvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncRHiZWq
yVBuYHyfkIKYXkhGXrTapcDn9fFftymWUOrigZ1XarEShXRXAuW8iypn1KuiwznU
ktuHydMMOLBIRvR94XztkWJfHNutMS6OtBNQuhwPsmTF+hxsb/lHyGkeQL8tDc66
KtiJn/iMz8I1dRjwBjRL5AjCmVocWWIQhgtKbwnDCRNsz/O4ZM14sWzpnoYClW8C
qMQDKqjSsVEd2C7561hglly2Gm0020w+NNP7IiRBVIDNG2xCIWLxOuVd3pLSQnuB
Y6u0/KXBTNpvJqCiH1i5BqtNr82KemsEVIp77n2Fu6m0qwWSlezCUotNyagt6Rht
ixz19C3Bnu8l3A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:26:08 2026 by rpki-client