Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
File: sVXa3bhxudalPNa0f3diUIN_d3Q.mft (raw, json)
Hash identifier: pwHOhBLFQ+QhRDa44/fwXrh0MjA80bAaf9CEyvKkoJY=
Subject key identifier: 7A:7D:F0:DF:5D:0A:2C:D9:F0:AB:1C:DF:91:87:AE:7C:D2:D0:0F:32
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 019D37C10DE69EC36CD89B1F70BFB5736734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
Manifest number: 131C
Signing time: Sun 29 Mar 2026 04:01:32 +0000
Manifest this update: Sun 29 Mar 2026 04:01:32 +0000
Manifest next update: Mon 30 Mar 2026 04:01:32 +0000
Files and hashes: 1: 41LKwPw-LLlX1iRyv05q0eGVxQA.roa (hash: /hldaDmFUq5ScLzS5Do9OQvpCy6tJ6Mldta+rPoVSBs=)
2: QdmtMonnxjCquFhjrcUo8qpZ9bk.roa (hash: wbBSWKojB7pH/vu01mc7MlC/g/OxHu6eJE6dc+J3abI=)
3: _IvJfFzGHlNib8r-PrbygGaf9ME.roa (hash: ujiDP9ug2z8JoHMVWVWd8NY4OblKHkwk6gW1+3Pknes=)
4: hwb1wfdjBP0ICPiTwRCIVMoWbas.roa (hash: T7sc8nDqr0XEZ0UNMsL5qIQPmcfivrMuFXOo3aEkX1I=)
5: sVXa3bhxudalPNa0f3diUIN_d3Q.crl (hash: Yh80Q8wmCNx1Lz+jx4XIia6Vi3v8F+DpI1u9IYA95I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:0d:e6:9e:c3:6c:d8:9b:1f:70:bf:b5:73:67:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Mar 29 04:01:32 2026 GMT
Not After : Mar 30 04:01:32 2026 GMT
Subject: CN=7a7df0df5d0a2cd9f0ab1cdf9187ae7cd2d00f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:63:86:d2:51:51:dc:6d:41:cb:4e:e0:63:
78:70:2f:0f:1c:d6:73:a0:aa:a2:e9:86:21:23:64:
77:35:87:f5:ac:67:9d:31:09:6f:0b:a2:45:9d:05:
1b:0c:b9:6d:44:1e:be:22:17:79:37:db:2e:fb:af:
3d:58:c5:4d:5b:8d:ad:9f:06:72:9d:8c:23:a9:19:
24:ba:0b:b3:59:e9:8f:72:75:65:84:d8:63:bf:fb:
a6:2a:57:47:d6:09:d0:78:5c:e5:c7:8b:45:b1:88:
7c:0d:2a:f2:00:9c:65:7e:13:18:de:6f:57:7c:e9:
19:9d:e4:7d:ea:35:eb:82:c0:ac:95:08:40:3e:94:
c9:14:1a:ce:4a:71:42:81:ea:66:cc:d6:07:c1:2c:
75:58:8c:4b:e2:1a:5e:e5:8d:50:b3:17:c3:4d:5c:
ea:d3:3f:d8:be:40:69:4e:66:00:f7:a6:b1:72:1d:
99:b6:ac:39:18:a5:45:05:25:4b:e2:ac:45:ad:4c:
5e:af:5e:c9:8e:d4:3f:84:3f:ba:a9:29:68:d9:1d:
8a:2e:26:50:98:05:d6:63:69:a4:fa:d5:26:6c:31:
d7:47:d3:43:5a:f3:fb:44:82:75:f5:43:24:02:66:
47:3c:39:74:ed:ec:b9:2e:9a:f4:cd:21:d1:a3:1b:
19:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7D:F0:DF:5D:0A:2C:D9:F0:AB:1C:DF:91:87:AE:7C:D2:D0:0F:32
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0c:f5:7f:29:3f:ce:ca:76:ea:58:be:e8:6c:62:b3:ae:a6:
8b:78:b3:00:18:34:ef:53:a5:bf:01:3b:75:f8:9c:a3:72:e2:
61:1f:39:ce:27:ab:51:ad:a2:60:5c:d0:e4:4f:10:57:3d:32:
48:81:ec:30:8d:b6:c9:8f:68:83:56:3a:3d:dc:eb:36:13:20:
f7:3e:43:b5:26:08:85:14:f0:4b:1d:d8:4b:4c:dc:85:14:cb:
21:3e:3c:7e:93:a0:e5:6b:75:3e:3c:5b:c1:76:11:97:5d:c8:
4e:d4:6a:1f:b4:8f:08:b8:de:33:29:df:56:35:6f:88:30:95:
5a:bf:1b:cd:45:5f:f2:49:c4:de:8c:d6:45:d6:eb:c2:77:a0:
11:62:d4:0e:c7:2a:a0:b1:fc:90:c1:e4:56:6f:15:df:b1:6a:
aa:d9:bf:c5:f8:d9:16:76:c8:b0:d9:3f:f7:6d:11:6f:c6:89:
bd:55:bf:06:a2:28:ab:77:15:0d:2c:9e:03:b6:6b:3c:25:ef:
91:cd:3c:da:c4:33:06:7b:7b:0d:60:5e:6c:e0:5e:c0:a3:a1:
52:fc:74:ea:9a:d6:79:f7:e5:2d:fc:7f:94:6a:3b:56:07:a2:
6e:29:28:72:d2:5c:e8:6c:0a:fe:1b:5a:12:44:87:6e:e3:d9:
21:1b:ea:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:51 2026 by rpki-client