Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
File: X39wJQCCw-BW8_5Si9d7BuIOQHw.mft (raw, json)
Hash identifier: KuvgX8eAc9X79pIxXwuIl3xhtJtPlvSxcLz1g8eeB68=
Subject key identifier: 3B:26:9F:BE:65:36:B1:9B:28:50:E0:78:42:F6:36:48:C1:1E:59:25
Authority key identifier: 5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C
Certificate issuer: /CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
Certificate serial: 019D270406D2C0B864758F003CEE01B0F44E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
Manifest number: 012C
Signing time: Wed 25 Mar 2026 22:01:08 +0000
Manifest this update: Wed 25 Mar 2026 22:01:08 +0000
Manifest next update: Thu 26 Mar 2026 22:01:08 +0000
Files and hashes: 1: 6PCZUJB3ipwVXLiyKcyJrFQu4wQ.roa (hash: m4ynyhKu4YCsiRrg6pHmEytuHr7lJuhn9fuEsyhPlJc=)
2: BOpDj9O5HVfOitBF2luTW4iqfg8.roa (hash: rJJylU5TJKs4KdXAQOEGLtGPNJZVDTHP3mloiSNNuu8=)
3: X39wJQCCw-BW8_5Si9d7BuIOQHw.crl (hash: Y4EWAYuC2RIXQdXkoGaS6A2qMWxFxTAnJa7DuxY6wi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:06:d2:c0:b8:64:75:8f:00:3c:ee:01:b0:f4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
Validity
Not Before: Mar 25 22:01:08 2026 GMT
Not After : Mar 26 22:01:08 2026 GMT
Subject: CN=3b269fbe6536b19b2850e07842f63648c11e5925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:30:a4:e6:5b:79:2e:d7:36:80:6f:dc:e1:
a2:01:6f:15:f8:e0:d3:72:7d:26:47:1f:26:19:32:
36:b5:d2:c2:c3:c2:1d:66:a3:66:ae:4b:19:e5:8f:
73:06:09:7a:3d:f7:b5:0b:db:9c:a6:3c:66:f1:a5:
c1:2d:5a:25:cd:cc:50:64:fc:1d:62:fb:72:db:8f:
29:bd:59:cd:95:12:d9:e9:56:99:9a:89:56:fb:62:
55:f4:f8:e9:f4:90:bb:99:3a:4d:cc:cc:fe:2b:dd:
ac:e1:3f:0d:51:d8:e4:bc:23:0d:5b:b1:cf:35:36:
2d:46:3e:18:56:57:2b:be:8c:1d:16:88:58:68:11:
07:e9:3c:4f:d3:43:5d:ce:91:33:08:e9:79:d1:70:
1b:b0:97:4d:1e:b2:a6:a8:43:0b:80:50:cd:15:35:
aa:d7:a3:32:c6:ba:cc:95:7d:c6:d7:de:3d:1c:3a:
fe:83:e6:24:7b:75:f4:b8:de:21:59:b9:97:23:20:
b5:0d:af:31:9a:96:f4:55:89:c7:ab:4f:8b:5f:ae:
2f:f3:0a:93:cb:40:fa:e8:84:75:23:c6:d3:74:fe:
f6:ab:59:47:6e:c1:32:99:16:fc:03:e4:2e:22:e9:
1c:32:e9:38:c0:84:59:01:f5:8f:f2:ec:dc:8f:ef:
c8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:26:9F:BE:65:36:B1:9B:28:50:E0:78:42:F6:36:48:C1:1E:59:25
X509v3 Authority Key Identifier:
keyid:5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d4:56:5a:f2:d8:f2:2d:92:fe:6e:d7:0f:3f:06:d8:b5:12:
0b:4a:94:ab:91:0c:8b:37:cb:77:6d:77:81:e2:02:76:32:dd:
58:fb:ab:fe:e7:95:2b:25:a3:67:57:df:90:0f:8f:8b:2c:3e:
5f:8e:4b:f1:37:44:83:59:9d:38:9e:27:de:a3:f0:56:54:e5:
16:a3:8e:9e:a4:64:26:77:b2:ca:d4:1e:58:d6:2c:14:fe:4f:
6d:2f:cc:ec:2e:4d:b1:6c:b3:79:63:43:28:eb:fe:b5:62:45:
88:13:ce:34:af:f3:fe:35:2b:8b:02:a3:3d:f3:8d:3e:dd:fe:
fd:19:c7:0c:fa:ab:a4:b5:2e:f9:7f:fa:db:70:4e:ac:b0:5e:
25:0f:95:05:44:8f:0d:5b:1a:b6:4a:9e:55:6c:15:d2:0d:21:
2c:ab:c0:b5:55:88:af:a6:e2:ae:4a:ca:48:ae:2c:38:ae:b0:
16:09:e7:cf:93:32:d1:14:43:b0:5d:f7:5e:55:8b:0e:ae:45:
d2:01:fa:66:34:7e:38:ff:3f:8f:89:d8:8f:c3:2c:a0:e4:fc:
61:35:73:ba:ed:c0:9a:58:d3:ce:03:e2:3a:bb:2f:90:b2:8b:
91:61:c7:70:79:c2:2a:58:19:3e:0c:3b:ae:da:08:19:d7:de:
62:ca:03:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBAbSwLhkdY8APO4BsPROMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmN2Y3MDI1MDA4MmMzZTA1NmYzZmU1MjhiZDc3YjA2ZTIw
ZTQwN2MwHhcNMjYwMzI1MjIwMTA4WhcNMjYwMzI2MjIwMTA4WjAzMTEwLwYDVQQD
EygzYjI2OWZiZTY1MzZiMTliMjg1MGUwNzg0MmY2MzY0OGMxMWU1OTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHkwpOZbeS7XNoBv3OGiAW8V+ODT
cn0mRx8mGTI2tdLCw8IdZqNmrksZ5Y9zBgl6Pfe1C9ucpjxm8aXBLVolzcxQZPwd
Yvty248pvVnNlRLZ6VaZmolW+2JV9Pjp9JC7mTpNzMz+K92s4T8NUdjkvCMNW7HP
NTYtRj4YVlcrvowdFohYaBEH6TxP00NdzpEzCOl50XAbsJdNHrKmqEMLgFDNFTWq
16MyxrrMlX3G1949HDr+g+Yke3X0uN4hWbmXIyC1Da8xmpb0VYnHq0+LX64v8wqT
y0D66IR1I8bTdP72q1lHbsEymRb8A+QuIukcMuk4wIRZAfWP8uzcj+/I/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsmn75lNrGbKFDgeEL2NkjBHlklMB8GA1UdIwQY
MBaAFF9/cCUAgsPgVvP+UovXewbiDkB8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDM5d0pRQ0N3LUJXOF81U2k5ZDdCdUlPUUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80ZTk0MTQtYmM0ZC00ZjJjLWI5ZjEt
MjNmMGMwNGQyYzE3LzEvWDM5d0pRQ0N3LUJXOF81U2k5ZDdCdUlPUUh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80ZTk0MTQtYmM0ZC00ZjJjLWI5ZjEtMjNmMGMwNGQyYzE3
LzEvWDM5d0pRQ0N3LUJXOF81U2k5ZDdCdUlPUUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtRWWvLY
8i2S/m7XDz8G2LUSC0qUq5EMizfLd213geICdjLdWPur/ueVKyWjZ1ffkA+Piyw+
X45L8TdEg1mdOJ4n3qPwVlTlFqOOnqRkJneyytQeWNYsFP5PbS/M7C5NsWyzeWND
KOv+tWJFiBPONK/z/jUriwKjPfONPt3+/RnHDPqrpLUu+X/623BOrLBeJQ+VBUSP
DVsatkqeVWwV0g0hLKvAtVWIr6birkrKSK4sOK6wFgnnz5My0RRDsF33XlWLDq5F
0gH6ZjR+OP8/j4nYj8MsoOT8YTVzuu3AmljTzgPiOrsvkLKLkWHHcHnCKlgZPgw7
rtoIGdfeYsoDiw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:07:05 2026 by rpki-client