Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
File: X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json)
Hash identifier: dwSL/gmaH4S/1KK3A/fij98sehNv7eFC0BdbYIu6/iw=
Subject key identifier: 68:76:C8:1E:EF:7B:3C:B1:DF:6E:85:AA:8E:9A:82:98:36:99:55:94
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 019CAC472EE0C442AC853CE99959C85290FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
Manifest number: 0DCC
Signing time: Mon 02 Mar 2026 02:01:12 +0000
Manifest this update: Mon 02 Mar 2026 02:01:12 +0000
Manifest next update: Tue 03 Mar 2026 02:01:12 +0000
Files and hashes: 1: 1OR7MiBYrBCTFUeXZt8nxO3fT1w.roa (hash: O61r2RIUvERzmLaBVoDYNHK7kM7U4nIi+QM0eXMDPoU=)
2: 3D1cLIqJM9j2TiDk4FKtoH3bACY.roa (hash: 9wyJBuDfbj2/qxzFzPQPUFVR/sga3QbA+VZr0ZYglIg=)
3: 5lLzlOSe2EMzTCpU7J1Pn4O1Qb8.roa (hash: yloQb3FNDE4bgwNWi1qn6U4HxV6wapprJyRxX2uAb+o=)
4: DVjlzf9-odFEmzfa3WbgW4SKOHc.roa (hash: G99ptyhMQXh4T7sxQFOQiD1Ft8xrRXqhmTKs+Lr/jf8=)
5: OOjjbiEjw5WVY_zDG3MNRgHawWc.roa (hash: 6hSHQjeZPUQqSFTuBckD24PIf8hoBIsHEYoWzKPaWp4=)
6: Uv7GAQ_UlMBXFGvxutIi16HxUTg.roa (hash: CsEeDd1h6WkVmrp/M5Z/7OMRR7HqcBmhfSum5Jl9L2E=)
7: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: r1pdViid/E2WiTYJaoAKZtvhV4BLg8yBv6oxNPLyaj0=)
8: _GfFqUw5mWGbjc_mCBWnNfju97k.roa (hash: 2siq+SOSG2tsLvn2PAlvw4ivV0pVSjLxvVW1AegSSYg=)
9: wYvIMqVJD5kGsVB7Odk1zqw9PLE.roa (hash: lv2FW5IzYlo7gJNIKly5LsLWJkSxo+G8ybKR+UJH+Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:2e:e0:c4:42:ac:85:3c:e9:99:59:c8:52:90:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Mar 2 02:01:12 2026 GMT
Not After : Mar 3 02:01:12 2026 GMT
Subject: CN=6876c81eef7b3cb1df6e85aa8e9a829836995594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:5f:28:d2:3e:23:51:db:09:b7:23:80:93:
86:99:c2:6e:2c:66:df:c2:be:95:6f:cf:59:19:ce:
2a:ee:12:14:ed:ad:65:3c:43:86:66:6a:19:50:16:
39:31:bc:80:59:70:75:10:1e:29:23:9f:de:3b:18:
e0:b8:74:ae:c7:dd:3f:5c:fa:f2:b9:25:e7:ff:b1:
97:23:46:58:ec:dd:12:eb:13:a0:50:a8:ac:d3:8f:
a5:fc:8a:a9:cd:6f:16:5a:c9:59:21:91:71:52:92:
4f:af:2b:de:f8:2e:5e:15:07:06:f9:4b:b4:ce:d3:
f8:5f:a9:9b:34:e4:68:f9:60:5b:ac:a9:f4:73:f0:
37:50:93:31:2c:02:1b:75:a8:11:d1:2b:b1:46:27:
62:ec:df:12:63:5d:be:1d:04:85:44:22:8e:70:50:
25:c7:8b:51:7c:6f:2a:fb:b9:bb:a5:9a:32:c7:6b:
e0:e1:a9:da:e6:35:34:38:dc:89:fd:37:65:eb:06:
70:31:39:02:4e:4f:b4:64:50:2f:0b:10:e8:32:9f:
d2:43:55:77:ad:2c:b1:1f:ac:ee:31:ea:38:59:af:
59:72:59:00:ce:ee:f9:18:c8:41:35:fa:4e:8d:e3:
ff:45:1b:d6:0f:44:a5:c3:da:9e:18:3f:5c:3f:5c:
75:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:76:C8:1E:EF:7B:3C:B1:DF:6E:85:AA:8E:9A:82:98:36:99:55:94
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a7:74:2a:cc:15:9d:4c:09:73:30:fa:b6:82:97:df:a6:01:
32:cd:6c:01:85:5c:57:c4:a5:2a:c9:ce:86:4a:a4:5e:cb:df:
d4:7c:47:f0:0a:ed:53:f4:b9:f6:20:c4:ae:ce:6a:33:e9:ec:
c6:18:ec:a3:46:fe:fc:cf:06:89:f3:84:22:7d:13:d4:3b:a0:
2e:00:3d:e6:3c:f4:35:0f:12:07:be:bb:9d:22:43:c6:df:54:
46:b5:08:52:b6:a5:c4:a8:2a:4d:1b:83:80:53:72:9f:6a:1e:
b6:94:70:7e:2c:b4:e5:44:73:f6:3f:70:11:af:c0:3b:bc:6b:
55:54:54:8b:be:a8:74:75:a8:c1:85:62:34:c4:00:44:fb:f2:
1e:bf:ed:24:65:26:b0:b0:94:f1:fd:22:dd:d3:bb:f3:d7:16:
b8:18:d6:17:bc:e4:92:17:a4:6c:72:e8:e7:88:60:0b:97:9d:
a4:06:d7:a4:ab:42:65:2f:4c:6e:34:38:47:92:76:6e:7b:66:
c0:35:f4:2c:31:48:b4:c8:54:37:ee:8c:65:ee:13:94:95:92:
49:41:66:37:ab:2d:a7:2e:8b:39:39:25:8a:ce:31:19:63:c0:
ef:4b:1b:8d:74:ba:2e:cc:14:1a:c6:e3:b8:dc:28:d3:92:9b:
e3:39:1e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:28 2026 by rpki-client