Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
File: X3UgMVHTsj7My2T1IPtCVJhgz_A.mft (raw, json)
Hash identifier: 8evG1aBGpc1cBDnfnOpLnsgBKRBW8p0EXmKwbxz9iIE=
Subject key identifier: C5:11:48:C6:12:C3:FA:A4:F7:0F:8E:88:B0:4E:BE:41:0E:AC:4B:C3
Authority key identifier: 5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
Certificate issuer: /CN=5f75203151d3b23ecccb64f520fb42549860cff0
Certificate serial: 019D2996ED321AF7E2BD7297A9E30B1C9607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
Manifest number: 1334
Signing time: Thu 26 Mar 2026 10:00:49 +0000
Manifest this update: Thu 26 Mar 2026 10:00:49 +0000
Manifest next update: Fri 27 Mar 2026 10:00:49 +0000
Files and hashes: 1: X3UgMVHTsj7My2T1IPtCVJhgz_A.crl (hash: zL3IZxAUSgyASQmDnSy8HSW68dFvokQQ428aKzGJMrA=)
2: _bNCiGJxahmWNfuieBMbkzGV9Ow.roa (hash: jgB/46kLWrM8U+ephCXoLnuepJdYT1yvSIychEW3MaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:ed:32:1a:f7:e2:bd:72:97:a9:e3:0b:1c:96:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f75203151d3b23ecccb64f520fb42549860cff0
Validity
Not Before: Mar 26 10:00:49 2026 GMT
Not After : Mar 27 10:00:49 2026 GMT
Subject: CN=c51148c612c3faa4f70f8e88b04ebe410eac4bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:c0:c4:73:03:c7:20:d2:5a:f5:07:d7:ba:
3b:6d:3b:71:32:ba:57:0d:14:84:da:9d:e1:5d:26:
41:ae:0a:81:8c:f8:4c:e9:73:47:16:a0:a9:53:b6:
5d:d6:96:79:24:93:c5:75:0a:fa:51:b1:5a:10:f1:
06:e5:e4:7f:e0:e6:37:33:ff:e7:2b:9d:85:e5:eb:
00:ab:d9:3c:5a:81:b6:77:1a:f1:a9:3a:f8:db:c3:
a9:01:a5:29:e8:49:95:33:b7:f2:8a:e5:2a:71:3c:
cd:15:82:ee:3a:45:2b:cd:fb:32:cf:f6:b6:d8:79:
af:5c:62:eb:68:fd:15:29:9a:71:b5:80:87:4d:51:
82:e8:1f:95:41:68:a0:98:18:8e:c7:66:de:11:ab:
8c:2d:cb:2d:d1:f5:02:bc:4e:6b:20:8a:b8:76:c7:
9d:ca:0e:0a:f3:66:8b:f7:21:8b:b9:52:c6:fb:04:
6e:d4:c2:53:00:8f:00:a5:5a:f6:27:f6:db:ee:25:
61:9d:ff:7f:4d:56:53:9c:72:66:8e:3d:89:c2:7a:
61:dd:23:f1:cc:a4:8f:5f:12:d1:37:eb:79:ac:3a:
8c:67:c9:44:17:f6:46:45:0e:be:ca:ed:92:16:86:
cd:35:9d:aa:e9:cf:90:42:33:16:86:40:d1:c5:60:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:11:48:C6:12:C3:FA:A4:F7:0F:8E:88:B0:4E:BE:41:0E:AC:4B:C3
X509v3 Authority Key Identifier:
keyid:5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e1:c6:af:37:b4:4e:0c:9a:f5:82:86:66:f1:71:f5:47:95:
83:e7:8e:a1:d9:0a:38:13:c4:38:45:91:fa:d7:c4:54:16:cc:
0b:16:8c:42:8d:93:6a:32:17:14:09:2e:3e:0c:a4:1d:97:72:
cf:58:bb:7f:29:11:d3:c5:47:f0:bf:96:2e:f4:d0:56:11:07:
3f:39:9b:f5:14:74:b2:a3:44:33:e8:6d:2a:99:b3:21:3a:5b:
93:4b:27:6c:f3:67:8e:7a:6f:ab:02:cf:58:83:00:8e:55:7c:
3d:32:be:0b:56:4a:63:f6:36:7a:31:c1:03:87:6b:e1:8b:35:
73:7e:0a:35:34:c8:3e:d3:f9:30:6f:bb:e6:9b:0f:51:cc:f2:
42:ad:0c:72:37:6c:15:83:77:c0:6e:9a:84:32:a6:93:b0:66:
64:e6:5c:fa:6c:6e:a3:59:36:60:2b:ff:61:ff:41:48:ae:93:
95:5c:d3:f9:f3:b2:5d:29:ee:3d:45:dc:c8:dd:92:8e:0a:fa:
09:c3:10:81:36:34:0d:74:65:0b:63:69:6a:3e:2a:a1:dc:4a:
09:f6:d2:7e:e2:f7:28:14:8a:5d:39:7e:2d:fc:22:0e:83:aa:
fd:36:ce:61:eb:b4:cc:d3:fc:99:cf:21:69:b6:b3:8b:8b:bd:
9e:09:b3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:15 2026 by rpki-client