Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier: 2pN/zp2zvkayI3IHcPf19XpuVQ6EA7oluoheFdIvf3E=
Subject key identifier: A3:2B:EB:6A:F0:00:3B:43:ED:CA:A8:77:D0:E9:0B:9D:A9:86:81:70
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 019D27A8A3212FB29462CA84FBA491220FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number: 05E8
Signing time: Thu 26 Mar 2026 01:00:56 +0000
Manifest this update: Thu 26 Mar 2026 01:00:56 +0000
Manifest next update: Fri 27 Mar 2026 01:00:56 +0000
Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: fAYMWKEd1hneBnqunFxTbVyillOI6/rt1MGtFX0Rxl0=)
2: NnFd_WEgwW5v_Q4XnzqgHc73AUU.roa (hash: qPnnpRuZWwT2D2tSbOOn+WEnPUGhmP0A1leKPzarn0s=)
3: aJGaWlz_CFVJ2Nm0gy1yUmZTtS0.roa (hash: vHZJo0+5vZ38Mb8o++2KXKDyHid1BpZNVh84OdWoQD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a3:21:2f:b2:94:62:ca:84:fb:a4:91:22:0f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: Mar 26 01:00:56 2026 GMT
Not After : Mar 27 01:00:56 2026 GMT
Subject: CN=a32beb6af0003b43edcaa877d0e90b9da9868170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:ed:ec:2c:ed:6b:5a:3a:5b:ce:40:3e:e8:
be:59:af:28:12:3a:49:02:33:80:a2:93:9a:81:4b:
df:76:1a:45:bf:fb:eb:b3:61:cc:55:2c:ac:ce:53:
77:e8:3b:98:cd:52:4d:d0:8a:ec:85:50:92:78:5a:
6a:2f:54:1e:c2:76:38:3a:cd:3c:68:2a:b7:87:60:
e7:fc:d2:84:73:87:2e:c4:25:dc:21:b4:22:bd:53:
9a:07:54:56:4a:9a:e9:66:32:05:32:d4:85:53:26:
f1:c3:c1:94:ac:6f:87:6b:10:83:4b:5c:e4:24:5c:
f2:cd:b7:87:11:00:52:58:ca:b7:4d:6e:6f:74:7a:
ab:f4:80:10:21:e0:2c:53:32:e5:c4:3d:8c:e5:97:
f4:02:d4:fd:61:32:4f:f1:b1:c5:eb:95:b9:54:2f:
40:a7:21:6d:f6:8e:fd:19:6e:64:2d:ce:6c:ae:7c:
03:9b:84:65:85:a3:58:44:2d:0d:61:92:df:64:84:
3a:ad:98:16:38:23:6e:f4:66:f6:f7:12:85:54:b2:
99:da:aa:08:db:91:c7:00:67:a3:aa:1c:32:54:ea:
c3:39:6c:fb:6b:e1:25:a1:3a:22:2a:c0:ad:b4:f8:
f6:7b:e9:20:c7:0b:10:d6:6a:6a:2d:ff:be:0b:60:
7f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2B:EB:6A:F0:00:3B:43:ED:CA:A8:77:D0:E9:0B:9D:A9:86:81:70
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1c:42:bf:25:4f:d9:49:8d:cb:37:b1:75:8e:31:07:19:01:
eb:20:d0:77:c1:02:7a:a6:8c:10:d8:e1:cd:7f:0b:58:1c:1d:
04:98:a4:22:45:63:ee:13:f3:a0:ac:20:33:94:46:09:52:b2:
37:90:fd:cd:06:c6:25:27:0f:89:f2:e7:49:ad:83:86:04:b3:
01:1a:03:21:20:31:e8:93:b5:b7:47:94:9d:8d:70:7d:f8:ee:
f9:5c:73:77:5b:61:94:f0:00:78:28:3c:04:90:ed:57:da:22:
5c:d6:b7:c5:29:71:79:42:29:e0:2e:d8:e7:17:0d:9d:cb:8d:
a4:d3:19:52:ac:17:6b:e5:04:7d:7e:a9:4d:3b:59:bb:6e:04:
32:8f:0d:23:5f:ce:41:3a:76:c6:42:09:28:a2:18:85:54:4d:
37:66:71:6e:21:1e:80:5b:94:8d:c0:dd:6d:eb:8d:b6:08:f0:
fb:6e:0f:d2:e5:25:9a:63:96:d4:13:0a:c8:64:4d:b8:8e:a5:
17:77:2e:bd:6a:72:af:4c:0d:7f:6a:62:4b:db:c7:c3:ba:70:
c1:97:b4:89:c8:af:35:50:09:c6:24:b6:a8:35:7b:b0:b4:27:
a7:b5:00:bf:19:6e:6a:9c:87:62:93:44:f3:2c:5d:5e:06:8d:
58:14:76:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:20:27 2026 by rpki-client