Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
File: X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft (raw, json)
Hash identifier: anKljq5x3MjXgWUT91dcnMprIVhTBx59kVA8iiSEGVM=
Subject key identifier: B4:57:83:44:5A:75:DA:AA:F9:43:CC:80:D0:70:5D:38:A2:21:7D:E1
Authority key identifier: 5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
Certificate issuer: /CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Certificate serial: 019D265FBB02C1511CD9C8C50D0693F8AC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
Manifest number: 035C
Signing time: Wed 25 Mar 2026 19:01:41 +0000
Manifest this update: Wed 25 Mar 2026 19:01:41 +0000
Manifest next update: Thu 26 Mar 2026 19:01:41 +0000
Files and hashes: 1: MUOy_bICxHwJR6mlgWUoUwVMqbc.roa (hash: zYV7qFrIdVJVJeaFnHA8N1kYCPRTpDcW34owFMJXGG8=)
2: X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl (hash: 92YyYDoZh0ipPVb/40ycfgBV0h9ook/qkYfqQb44QzY=)
3: f_g1_FIZZK96z7ZSNPocxjCjsbQ.roa (hash: gb0q9RjIvyLcVT8CSfpFcZqoMX+jR12UyGETqF9tVsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:bb:02:c1:51:1c:d9:c8:c5:0d:06:93:f8:ac:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Validity
Not Before: Mar 25 19:01:41 2026 GMT
Not After : Mar 26 19:01:41 2026 GMT
Subject: CN=b45783445a75daaaf943cc80d0705d38a2217de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:87:ea:f3:91:6f:30:9f:c9:af:b0:95:9a:
2c:e2:c4:ff:03:43:e8:20:b4:39:0b:e3:54:6a:81:
c7:b5:d6:4d:f4:23:22:2e:84:d1:a3:c8:c6:98:52:
8d:50:f7:cc:e3:3e:75:af:76:87:df:c2:7e:f2:4d:
2a:ce:82:24:2f:1a:31:46:6e:b7:8a:2f:84:25:fa:
6a:52:9d:48:ce:0f:a7:3f:f0:62:b8:dd:d5:c3:e8:
b8:e7:01:ce:f4:ad:98:6a:96:df:88:29:4f:df:b2:
93:b2:21:e4:41:90:91:01:07:64:4f:2f:90:19:bc:
5c:5c:1b:5d:08:a9:82:a8:30:25:41:b8:57:5b:63:
75:a8:dc:97:5c:8c:99:9b:bf:3f:3f:27:3a:f1:75:
f1:a6:16:49:aa:b8:ed:55:cc:21:d3:15:82:b6:dc:
3e:5c:62:9c:69:d8:0c:e0:85:ba:b6:dd:fd:7c:f3:
43:56:18:43:1b:59:9c:eb:28:6e:f7:03:d0:52:2e:
76:5b:b5:36:b1:40:5f:33:02:bd:8e:1d:d9:e9:17:
52:80:c8:72:47:e5:f6:42:2a:8f:12:be:47:18:0a:
46:38:39:d5:c9:46:e5:ff:cb:6c:d6:14:c6:40:c5:
98:a9:e3:90:4c:e2:69:52:0d:0a:47:dc:b9:52:5c:
01:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:57:83:44:5A:75:DA:AA:F9:43:CC:80:D0:70:5D:38:A2:21:7D:E1
X509v3 Authority Key Identifier:
keyid:5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:20:e6:ae:79:ac:42:e2:e4:af:02:9e:dc:66:14:28:8c:90:
53:fe:7a:d4:f4:5c:9c:36:af:ed:35:1c:ff:e3:ac:35:2f:68:
39:b6:37:d2:26:5c:b0:1b:58:73:57:6a:b7:e9:1d:16:18:0a:
2f:e9:b9:60:e3:d6:77:2e:35:eb:85:91:c0:3b:07:36:e2:10:
a9:3d:51:83:62:ff:ed:1e:42:ca:d1:3d:49:a4:16:e5:34:08:
e5:40:82:3a:c3:7b:18:a4:75:98:f2:cd:51:cd:0f:c5:5c:dd:
1c:d0:60:4f:c8:6b:5f:7f:47:1f:10:42:6e:7d:84:72:84:09:
54:eb:74:39:f8:b8:a6:34:7b:d2:e6:0d:6d:bc:db:61:e7:db:
bc:29:6c:cd:d6:65:17:ad:27:19:48:3e:71:6c:bb:48:f4:9c:
43:e2:c7:c1:2f:f4:6e:e3:cd:75:65:b4:dd:52:85:a6:c3:3a:
77:20:6f:56:ac:1b:27:b2:95:e8:da:fe:d2:4e:73:07:05:b5:
ac:d0:ab:3c:b9:f7:2a:b8:ed:45:5e:1e:1e:6e:a0:48:4e:af:
a1:a5:9f:dc:22:1f:0e:c2:af:39:63:7e:cf:93:86:eb:72:cc:
c5:c9:3f:af:8a:0f:91:f8:7c:e7:48:60:d5:8c:1c:3f:55:80:
b4:39:79:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX7sCwVEc2cjFDQaT+KwzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZWI3NTY1ZTIxY2Y1YjA3YmQ5NzFjOTZlY2MzYTRhNjRm
YWQyMDQwHhcNMjYwMzI1MTkwMTQxWhcNMjYwMzI2MTkwMTQxWjAzMTEwLwYDVQQD
EyhiNDU3ODM0NDVhNzVkYWFhZjk0M2NjODBkMDcwNWQzOGEyMjE3ZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBeH6vORbzCfya+wlZos4sT/A0Po
ILQ5C+NUaoHHtdZN9CMiLoTRo8jGmFKNUPfM4z51r3aH38J+8k0qzoIkLxoxRm63
ii+EJfpqUp1Izg+nP/BiuN3Vw+i45wHO9K2YapbfiClP37KTsiHkQZCRAQdkTy+Q
GbxcXBtdCKmCqDAlQbhXW2N1qNyXXIyZm78/Pyc68XXxphZJqrjtVcwh0xWCttw+
XGKcadgM4IW6tt39fPNDVhhDG1mc6yhu9wPQUi52W7U2sUBfMwK9jh3Z6RdSgMhy
R+X2QiqPEr5HGApGODnVyUbl/8ts1hTGQMWYqeOQTOJpUg0KR9y5UlwBNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRXg0Raddqq+UPMgNBwXTiiIX3hMB8GA1UdIwQY
MBaAFF/rdWXiHPWwe9lxyW7MOkpk+tIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWC10MVplSWM5YkI3MlhISmJzdzZTbVQ2MGdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zZWViZjktMGUwNS00OGI2LTg0NTAt
ZGNmNWI4NjY5M2M5LzEvWC10MVplSWM5YkI3MlhISmJzdzZTbVQ2MGdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zZWViZjktMGUwNS00OGI2LTg0NTAtZGNmNWI4NjY5M2M5
LzEvWC10MVplSWM5YkI3MlhISmJzdzZTbVQ2MGdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxiDmrnms
QuLkrwKe3GYUKIyQU/561PRcnDav7TUc/+OsNS9oObY30iZcsBtYc1dqt+kdFhgK
L+m5YOPWdy4164WRwDsHNuIQqT1Rg2L/7R5CytE9SaQW5TQI5UCCOsN7GKR1mPLN
Uc0PxVzdHNBgT8hrX39HHxBCbn2EcoQJVOt0Ofi4pjR70uYNbbzbYefbvClszdZl
F60nGUg+cWy7SPScQ+LHwS/0buPNdWW03VKFpsM6dyBvVqwbJ7KV6Nr+0k5zBwW1
rNCrPLn3KrjtRV4eHm6gSE6voaWf3CIfDsKvOWN+z5OG63LMxck/r4oPkfh850hg
1YwcP1WAtDl5Mw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:46 2026 by rpki-client