Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
File: X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json)
Hash identifier: BMvwNoPqnFHBd9cp+FspGHaGl5fPD4Uztk5sfy4kwmo=
Subject key identifier: CF:17:2C:A2:D3:03:0F:9C:14:8A:35:85:5D:BA:11:A3:8B:41:7E:97
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 019D97E255A01CEDBCFB13B620B07EFD931D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
Manifest number: 0E46
Signing time: Thu 16 Apr 2026 20:01:25 +0000
Manifest this update: Thu 16 Apr 2026 20:01:25 +0000
Manifest next update: Fri 17 Apr 2026 20:01:25 +0000
Files and hashes: 1: 1OR7MiBYrBCTFUeXZt8nxO3fT1w.roa (hash: O61r2RIUvERzmLaBVoDYNHK7kM7U4nIi+QM0eXMDPoU=)
2: 3D1cLIqJM9j2TiDk4FKtoH3bACY.roa (hash: 9wyJBuDfbj2/qxzFzPQPUFVR/sga3QbA+VZr0ZYglIg=)
3: 5lLzlOSe2EMzTCpU7J1Pn4O1Qb8.roa (hash: yloQb3FNDE4bgwNWi1qn6U4HxV6wapprJyRxX2uAb+o=)
4: DVjlzf9-odFEmzfa3WbgW4SKOHc.roa (hash: G99ptyhMQXh4T7sxQFOQiD1Ft8xrRXqhmTKs+Lr/jf8=)
5: OOjjbiEjw5WVY_zDG3MNRgHawWc.roa (hash: 6hSHQjeZPUQqSFTuBckD24PIf8hoBIsHEYoWzKPaWp4=)
6: Uv7GAQ_UlMBXFGvxutIi16HxUTg.roa (hash: CsEeDd1h6WkVmrp/M5Z/7OMRR7HqcBmhfSum5Jl9L2E=)
7: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: OfcyAomyLEJ4mU/FvBH8sSaBeqPTaviagGM7nFL/UV0=)
8: _GfFqUw5mWGbjc_mCBWnNfju97k.roa (hash: 2siq+SOSG2tsLvn2PAlvw4ivV0pVSjLxvVW1AegSSYg=)
9: wYvIMqVJD5kGsVB7Odk1zqw9PLE.roa (hash: lv2FW5IzYlo7gJNIKly5LsLWJkSxo+G8ybKR+UJH+Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:55:a0:1c:ed:bc:fb:13:b6:20:b0:7e:fd:93:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Apr 16 20:01:25 2026 GMT
Not After : Apr 17 20:01:25 2026 GMT
Subject: CN=cf172ca2d3030f9c148a35855dba11a38b417e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:70:c7:6c:c8:c2:e5:0c:12:81:4c:96:2b:
a9:e4:db:05:b9:a3:b6:74:73:2f:82:e0:62:ff:f2:
07:a0:42:a4:7a:4c:ad:d9:2f:68:5a:b0:f8:10:ed:
9d:92:35:6f:da:07:6b:19:dc:59:4a:48:e3:da:a5:
e2:45:09:d8:bc:14:40:02:10:bd:d1:2d:f4:41:7f:
af:97:7b:b4:79:ca:7c:98:29:09:c5:dc:8e:d0:a8:
54:95:c4:20:fe:9b:af:03:c5:94:1e:23:0b:88:b3:
5a:ad:ea:f8:0d:56:59:31:51:7d:b7:b7:63:54:17:
ac:46:48:d3:94:9b:bb:6a:8a:13:e5:77:db:b6:a2:
43:82:ef:6c:e2:af:00:97:09:95:57:14:08:75:a5:
fe:cc:57:08:bb:14:f3:e0:c0:ca:1d:c1:69:ee:e2:
fd:3c:15:08:b0:35:d4:41:89:19:9f:8f:80:06:0d:
7c:b9:c5:a1:1b:f6:d4:5b:19:3d:f7:2e:63:a5:54:
be:9f:3f:c1:91:23:81:ec:4f:34:7a:6f:81:b6:d2:
b6:39:d0:22:83:57:16:dd:8f:50:a6:11:98:5e:82:
a6:81:0b:88:df:d5:1e:4a:d7:84:d4:a2:74:37:60:
06:fd:90:d6:e3:db:f3:4d:3c:73:c8:75:01:04:27:
06:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:17:2C:A2:D3:03:0F:9C:14:8A:35:85:5D:BA:11:A3:8B:41:7E:97
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:58:2a:bc:46:e4:2d:48:ab:29:90:ea:00:57:c8:35:97:e7:
d7:b4:e0:36:fd:f1:87:2d:e1:04:a0:52:fb:d2:3a:ee:99:6a:
97:53:fe:e2:0f:b1:25:d1:22:71:62:43:89:d4:bc:8b:04:ba:
96:05:11:a1:36:24:12:3c:2e:59:19:25:0d:9c:bb:d9:07:95:
40:95:2f:c2:66:97:f7:c4:a2:29:75:a3:24:86:9e:a2:4e:93:
1a:1d:b5:75:69:5a:3b:8b:95:ee:73:73:bb:19:99:63:84:b1:
07:ce:bd:44:22:ed:f4:9e:00:d4:0d:ea:37:c8:f3:0e:35:6e:
b8:3b:78:a0:7e:48:1f:e5:21:42:e9:26:31:e5:c2:f9:5d:b8:
1a:1f:1f:44:37:d3:52:10:23:47:f5:d9:79:40:25:84:a6:1d:
1b:b3:bc:ee:e6:a7:c8:44:86:8c:c5:53:80:58:00:ab:66:78:
43:55:c7:6b:4c:fe:3b:c1:c9:b1:ce:77:2a:9b:4d:bf:86:6e:
29:9d:a5:15:1f:a7:89:75:c6:7f:34:1b:61:46:8e:77:dc:9a:
46:98:38:42:3e:67:74:bd:d5:6f:4a:d6:50:68:4f:0f:2b:97:
92:4a:0e:0d:60:b1:c3:5a:b8:b3:a7:89:16:51:aa:07:3e:d7:
b7:89:a6:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4lWgHO28+xO2ILB+/ZMdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4
MWEyOWYwHhcNMjYwNDE2MjAwMTI1WhcNMjYwNDE3MjAwMTI1WjAzMTEwLwYDVQQD
EyhjZjE3MmNhMmQzMDMwZjljMTQ4YTM1ODU1ZGJhMTFhMzhiNDE3ZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLFwx2zIwuUMEoFMliup5NsFuaO2
dHMvguBi//IHoEKkekyt2S9oWrD4EO2dkjVv2gdrGdxZSkjj2qXiRQnYvBRAAhC9
0S30QX+vl3u0ecp8mCkJxdyO0KhUlcQg/puvA8WUHiMLiLNarer4DVZZMVF9t7dj
VBesRkjTlJu7aooT5XfbtqJDgu9s4q8AlwmVVxQIdaX+zFcIuxTz4MDKHcFp7uL9
PBUIsDXUQYkZn4+ABg18ucWhG/bUWxk99y5jpVS+nz/BkSOB7E80em+BttK2OdAi
g1cW3Y9QphGYXoKmgQuI39UeSteE1KJ0N2AG/ZDW49vzTTxzyHUBBCcGwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8XLKLTAw+cFIo1hV26EaOLQX6XMB8GA1UdIwQY
MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt
Mzc1NzUzOWMyYWM5LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5
LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlgqvEbk
LUirKZDqAFfINZfn17TgNv3xhy3hBKBS+9I67plql1P+4g+xJdEicWJDidS8iwS6
lgURoTYkEjwuWRklDZy72QeVQJUvwmaX98SiKXWjJIaeok6TGh21dWlaO4uV7nNz
uxmZY4SxB869RCLt9J4A1A3qN8jzDjVuuDt4oH5IH+UhQukmMeXC+V24Gh8fRDfT
UhAjR/XZeUAlhKYdG7O87uanyESGjMVTgFgAq2Z4Q1XHa0z+O8HJsc53KptNv4Zu
KZ2lFR+niXXGfzQbYUaOd9yaRpg4Qj5ndL3Vb0rWUGhPDyuXkkoODWCxw1q4s6eJ
FlGqBz7Xt4mmow==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:51 2026 by rpki-client