Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
File: X3UgMVHTsj7My2T1IPtCVJhgz_A.mft (raw, json)
Hash identifier: 36C6aSq7jxpW6D9/UMFDbqLeW3+srR/L9aDhHCp6HZ4=
Subject key identifier: 83:9F:41:8F:EC:7E:CD:C8:C2:DE:CE:E9:3A:92:32:EC:3B:68:05:60
Authority key identifier: 5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
Certificate issuer: /CN=5f75203151d3b23ecccb64f520fb42549860cff0
Certificate serial: 019CAA21AA36A7D9C37AFA18810AACCD60A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
Manifest number: 12F2
Signing time: Sun 01 Mar 2026 16:00:58 +0000
Manifest this update: Sun 01 Mar 2026 16:00:58 +0000
Manifest next update: Mon 02 Mar 2026 16:00:58 +0000
Files and hashes: 1: X3UgMVHTsj7My2T1IPtCVJhgz_A.crl (hash: Lx6yztPtqrrpOmS7hd9VCHBp9QAwmHswNWLlZlQs5+M=)
2: _bNCiGJxahmWNfuieBMbkzGV9Ow.roa (hash: jgB/46kLWrM8U+ephCXoLnuepJdYT1yvSIychEW3MaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:aa:36:a7:d9:c3:7a:fa:18:81:0a:ac:cd:60:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f75203151d3b23ecccb64f520fb42549860cff0
Validity
Not Before: Mar 1 16:00:58 2026 GMT
Not After : Mar 2 16:00:58 2026 GMT
Subject: CN=839f418fec7ecdc8c2decee93a9232ec3b680560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:dc:ed:6c:1c:fb:60:d6:28:b7:37:14:01:
6b:1f:f9:bf:ea:c0:86:ab:44:9b:5a:70:a7:73:09:
59:f7:81:bd:36:8e:4c:9b:b2:96:93:de:19:98:8d:
c2:be:6d:82:35:18:37:05:c0:b3:69:c6:cb:63:cc:
09:ee:12:fa:6a:47:f8:e8:93:f4:a8:d2:e3:5f:0e:
20:a9:ac:fe:5e:06:d7:9a:cb:9a:24:74:31:a4:62:
12:e6:fd:ad:b7:4d:9a:ea:cf:2f:39:41:eb:63:bf:
2b:c2:9c:dc:54:06:11:ca:04:86:e3:b1:f3:5b:09:
29:a2:36:1a:35:c3:01:cd:8c:c9:45:72:23:6d:65:
6e:74:a0:94:6b:da:cc:a0:e0:10:78:2f:1d:20:1f:
7a:74:50:47:5b:c4:d7:2e:0f:16:98:e8:4e:22:0e:
45:3a:85:79:d0:ca:5f:81:b5:5f:4c:3d:2a:e2:a7:
4d:05:25:ea:a7:be:1d:a3:8a:ea:14:5d:21:45:e0:
1c:96:13:75:2f:0f:33:cc:71:5d:fe:9e:e3:3d:af:
57:d3:30:79:cc:77:aa:d5:53:96:9f:46:76:90:97:
8e:d7:db:79:53:a5:37:6e:15:d2:f1:3c:a3:79:d8:
5e:09:87:ea:47:44:55:d4:f3:af:1c:ea:61:6e:33:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9F:41:8F:EC:7E:CD:C8:C2:DE:CE:E9:3A:92:32:EC:3B:68:05:60
X509v3 Authority Key Identifier:
keyid:5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f5:02:0d:1c:68:3f:61:5e:98:e8:e8:be:31:ef:a5:ae:f4:
8d:58:8b:3e:dc:48:e7:a1:f2:6e:f9:82:c6:2e:1e:85:69:5b:
53:d2:1e:3d:0a:9b:eb:d0:1f:91:cf:92:16:ff:44:42:b4:a9:
db:18:62:6c:e4:3b:12:be:02:05:6a:bf:86:d3:c2:09:27:02:
64:c9:23:90:dc:59:6d:c6:71:ee:f2:ff:bb:bd:9b:8e:99:10:
0f:f0:cc:99:33:fc:94:e0:0c:de:f5:df:a8:22:b0:5a:e2:e0:
09:98:d6:73:fd:f9:ab:5e:85:15:97:a7:5a:14:29:34:b8:92:
a4:a3:22:28:f8:30:03:b4:13:eb:f8:7c:2f:a7:6a:34:c4:67:
ac:ba:88:54:ac:0a:b7:7e:26:6d:c5:46:3d:bd:2e:17:2f:66:
25:50:7b:8e:83:fc:d1:e1:c3:62:93:13:a6:b3:27:7d:97:96:
fa:5a:f0:19:17:a5:86:a5:51:26:88:e3:e0:96:43:fc:fc:03:
06:3a:e4:af:46:4c:10:72:25:5a:fa:f3:de:82:c8:76:7a:7c:
ba:df:64:3d:0a:aa:82:bf:70:d6:f4:78:d9:5a:da:74:b4:f7:
e9:76:2b:d1:36:d8:b5:62:d6:d9:f0:a1:fb:b8:1d:eb:3a:63:
89:e2:cc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:15 2026 by rpki-client