Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
File: X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json)
Hash identifier: hrORoDS3sDrBG8E7VWsxvwjA2/8tr5pDS9LQbxLkZdE=
Subject key identifier: E9:E7:B0:FF:E9:FB:F8:42:44:3A:11:6B:0D:AB:42:13:29:85:3C:63
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 019FAB2C7E731F2570627265EC4373319D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
Manifest number: 0F5A
Signing time: Wed 29 Jul 2026 00:00:47 +0000
Manifest this update: Wed 29 Jul 2026 00:00:47 +0000
Manifest next update: Thu 30 Jul 2026 00:00:47 +0000
Files and hashes: 1: 1-5Pgda6HIJ1A50ORC-s21IuXoKI.roa (hash: G3EoBYlK+6iAK1+dHCsC16Icl5M1ev7HNUR0XeGO+Q0=)
2: 3D1cLIqJM9j2TiDk4FKtoH3bACY.roa (hash: 9wyJBuDfbj2/qxzFzPQPUFVR/sga3QbA+VZr0ZYglIg=)
3: DVjlzf9-odFEmzfa3WbgW4SKOHc.roa (hash: G99ptyhMQXh4T7sxQFOQiD1Ft8xrRXqhmTKs+Lr/jf8=)
4: MR48vFydmr0SsuxdgWTO19IRiHw.roa (hash: mUaEgZFfj65CrRRMW4qrWw5/5psCJW35a20y1tpoOkI=)
5: OOjjbiEjw5WVY_zDG3MNRgHawWc.roa (hash: 6hSHQjeZPUQqSFTuBckD24PIf8hoBIsHEYoWzKPaWp4=)
6: Uv7GAQ_UlMBXFGvxutIi16HxUTg.roa (hash: CsEeDd1h6WkVmrp/M5Z/7OMRR7HqcBmhfSum5Jl9L2E=)
7: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: 2Ya2hFnO8XosJBEIX5ujIYOHuJyy3VmaQ5Gz+pNmpXA=)
8: _GfFqUw5mWGbjc_mCBWnNfju97k.roa (hash: 2siq+SOSG2tsLvn2PAlvw4ivV0pVSjLxvVW1AegSSYg=)
9: wYvIMqVJD5kGsVB7Odk1zqw9PLE.roa (hash: lv2FW5IzYlo7gJNIKly5LsLWJkSxo+G8ybKR+UJH+Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:7e:73:1f:25:70:62:72:65:ec:43:73:31:9d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Jul 29 00:00:47 2026 GMT
Not After : Jul 30 00:00:47 2026 GMT
Subject: CN=e9e7b0ffe9fbf842443a116b0dab421329853c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:c5:05:00:f6:a5:2d:54:56:f9:c9:13:23:
80:d5:bd:28:a3:7c:0f:2a:33:c4:60:94:4c:81:4d:
b4:c4:12:f3:1d:db:d2:c0:50:bc:ea:94:bf:d9:5a:
af:01:bd:f6:70:0e:d6:18:2e:37:d1:cb:ea:26:da:
51:3b:61:4e:43:35:d9:d8:39:0d:ec:3c:4c:2f:59:
f5:f7:28:ad:c0:0d:96:81:4d:4b:7d:db:89:b5:f5:
03:29:c3:88:ef:6c:7d:8b:22:76:d2:0b:aa:73:2b:
e1:6d:0e:66:9d:1f:4f:7a:41:5f:bf:8e:cc:b8:0b:
fb:75:a5:a3:58:d1:82:0c:e9:96:ca:ad:8e:5d:51:
8f:f7:80:de:d8:8f:bc:85:80:35:64:3b:0b:7a:07:
b2:57:23:f1:21:75:7c:f8:e2:1d:99:1a:43:3f:96:
9b:23:59:fb:60:50:59:51:1a:9e:7d:27:58:95:16:
b9:79:ed:67:4c:6a:6c:38:0e:d8:ce:e3:c3:6d:4e:
50:52:3d:48:fc:05:28:c0:56:2e:d7:a8:81:ac:ef:
ef:aa:1b:f2:a2:7f:0c:d4:b9:be:6c:d8:d4:8c:78:
ed:95:31:65:73:fb:cf:74:0b:4a:77:db:b9:b0:83:
62:6b:5c:65:b6:40:b4:3e:94:c4:ea:73:20:04:a7:
2b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E7:B0:FF:E9:FB:F8:42:44:3A:11:6B:0D:AB:42:13:29:85:3C:63
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a6:49:0d:a8:6a:79:d7:62:05:6f:84:53:ef:b4:f2:be:cd:
ef:81:44:64:e9:d2:88:03:d2:60:4e:4b:90:63:b9:95:d2:37:
c0:8c:e7:99:12:2f:69:d4:f0:ad:08:a2:c9:04:4f:fa:03:bd:
c1:08:b9:2c:5d:bb:4c:9f:58:ca:f0:32:96:86:dd:4b:7d:89:
8d:c7:7e:c0:69:ef:26:4c:e2:d6:61:b7:e3:9d:ca:45:26:35:
77:2a:70:e8:39:18:f6:1a:b2:15:49:c1:7a:29:c3:4e:de:ce:
ba:7b:5f:50:c2:37:f7:0a:1b:6c:5f:0b:89:08:46:ea:47:48:
bc:ab:df:60:e0:ba:e8:61:86:0a:41:d8:13:a6:8d:66:19:3c:
23:33:29:c4:9f:ad:cd:52:6e:d3:8d:77:70:18:1c:64:05:bf:
ef:aa:47:02:85:52:c7:4b:c7:6e:d0:b3:da:73:8e:40:8c:51:
c6:fc:4d:bd:3e:82:cd:93:3a:a5:c1:b0:c8:ae:fb:dc:ec:ef:
ba:2d:30:1b:5b:bb:1b:38:7f:de:78:66:f0:35:e2:72:ae:2d:
13:a6:e5:ef:19:02:ba:f2:b1:51:85:3e:be:b6:7c:0f:ab:5a:
a8:40:62:2b:7c:43:4e:c4:f5:0a:89:ed:18:31:d2:ad:2a:24:
41:75:c6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:31 2026 by rpki-client