Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
File: X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json)
Hash identifier: Mg8BL7PRpemH+3fsgMuobVXsmS028nO5SwA/RytXi2k=
Subject key identifier: 80:66:B2:77:5A:5D:8E:6F:34:01:EE:8D:13:71:DD:10:81:F6:DB:1D
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 019EC17FEC9F472B54C526DCEAF3D71D131A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
Manifest number: 0EE1
Signing time: Sat 13 Jun 2026 15:00:46 +0000
Manifest this update: Sat 13 Jun 2026 15:00:46 +0000
Manifest next update: Sun 14 Jun 2026 15:00:46 +0000
Files and hashes: 1: 1-5Pgda6HIJ1A50ORC-s21IuXoKI.roa (hash: G3EoBYlK+6iAK1+dHCsC16Icl5M1ev7HNUR0XeGO+Q0=)
2: 3D1cLIqJM9j2TiDk4FKtoH3bACY.roa (hash: 9wyJBuDfbj2/qxzFzPQPUFVR/sga3QbA+VZr0ZYglIg=)
3: DVjlzf9-odFEmzfa3WbgW4SKOHc.roa (hash: G99ptyhMQXh4T7sxQFOQiD1Ft8xrRXqhmTKs+Lr/jf8=)
4: MR48vFydmr0SsuxdgWTO19IRiHw.roa (hash: mUaEgZFfj65CrRRMW4qrWw5/5psCJW35a20y1tpoOkI=)
5: OOjjbiEjw5WVY_zDG3MNRgHawWc.roa (hash: 6hSHQjeZPUQqSFTuBckD24PIf8hoBIsHEYoWzKPaWp4=)
6: Uv7GAQ_UlMBXFGvxutIi16HxUTg.roa (hash: CsEeDd1h6WkVmrp/M5Z/7OMRR7HqcBmhfSum5Jl9L2E=)
7: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: tISMWn7ciUQ/Ftg4Ec19G2Gq7L7vzes9fDbCmCDzYr0=)
8: _GfFqUw5mWGbjc_mCBWnNfju97k.roa (hash: 2siq+SOSG2tsLvn2PAlvw4ivV0pVSjLxvVW1AegSSYg=)
9: wYvIMqVJD5kGsVB7Odk1zqw9PLE.roa (hash: lv2FW5IzYlo7gJNIKly5LsLWJkSxo+G8ybKR+UJH+Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:ec:9f:47:2b:54:c5:26:dc:ea:f3:d7:1d:13:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Jun 13 15:00:46 2026 GMT
Not After : Jun 14 15:00:46 2026 GMT
Subject: CN=8066b2775a5d8e6f3401ee8d1371dd1081f6db1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:62:8f:08:77:a8:95:41:e0:88:b9:a9:e3:
ee:f2:ac:cd:25:96:09:69:15:95:9a:58:60:50:8c:
68:3a:90:44:05:4d:50:52:50:09:46:88:37:eb:51:
fc:c2:42:51:fa:89:1f:56:18:9b:fd:c8:f0:e4:13:
be:c6:e4:51:c4:a0:75:b2:70:d7:9b:fc:80:a9:63:
48:e6:78:6f:81:3d:32:e2:9f:f7:c4:1e:8a:f9:24:
d8:39:2b:39:4d:99:b1:b7:31:7c:f7:94:f1:18:56:
b7:d6:b3:00:78:5b:77:26:d8:4d:61:16:36:4d:8a:
0c:2c:ef:5c:9c:71:5d:7a:4b:f2:21:8c:63:17:3c:
10:3b:23:50:4f:89:2c:38:30:b4:6d:a7:8e:5d:7d:
7c:a8:d8:a3:b3:cc:6e:04:dc:6d:ec:69:87:14:3d:
79:01:56:0c:b8:94:0e:a7:41:a5:45:c7:25:91:18:
ad:04:f0:7e:1e:43:ab:7f:51:8f:5f:f0:f1:42:ed:
ea:b5:1e:0c:d1:62:1e:36:c9:b8:55:65:06:64:f5:
b2:7d:03:21:b0:b6:54:11:bc:80:47:53:da:c7:d7:
aa:29:ef:27:01:e6:82:a1:c3:8c:3e:fe:83:c8:9e:
7f:0f:4b:61:5f:f6:e5:f9:ca:c9:99:b6:15:91:2a:
3a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:66:B2:77:5A:5D:8E:6F:34:01:EE:8D:13:71:DD:10:81:F6:DB:1D
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:84:9f:51:94:5a:de:ab:19:aa:e4:02:be:ad:99:48:aa:dd:
5b:78:a2:dd:75:90:cc:c2:6e:90:fb:ec:d7:4c:bf:d2:3a:44:
78:85:ba:52:b7:50:c2:07:af:7b:96:61:03:47:c4:e0:04:bc:
93:94:ea:86:52:50:d8:37:ed:1b:fb:2a:b0:d7:1a:23:b2:34:
7d:86:25:33:80:fb:72:e3:bb:1d:c9:5e:36:03:66:0c:d7:c2:
b3:1e:0b:46:08:07:fb:10:25:97:17:f2:e0:86:6c:4d:99:b8:
d7:39:4c:a7:97:f4:ed:23:34:96:a2:99:f2:a2:f6:b6:02:58:
7b:8c:b0:25:e5:59:7b:d0:f7:b6:d5:57:d4:c3:42:c8:9c:86:
70:35:5d:38:57:84:43:e3:5e:5b:de:74:e1:32:6c:e3:3b:71:
9c:24:7f:cf:c7:f5:fc:78:4a:11:59:e4:c5:09:ae:c6:db:12:
65:ca:c2:4a:6d:1b:be:9d:10:02:b5:a2:f8:d7:e5:dc:61:ef:
a4:75:ee:fc:64:41:9a:b7:a1:0d:98:36:fe:e7:77:e2:1f:a8:
9a:3d:56:47:53:29:2f:a9:fc:83:46:c8:87:5a:84:14:a1:72:
6c:85:73:31:5f:d2:04:f4:fa:5c:87:b2:38:19:83:0e:cf:e7:
58:cc:90:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:56 2026 by rpki-client