Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
File: X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json)
Hash identifier: FDCp9GQYB45cdkn/s9Drg/sSGlZgpWa0G7u1j8nQmVc=
Subject key identifier: D8:18:A2:39:A5:9A:5E:18:82:4A:06:6F:07:2F:01:E3:37:FB:F5:5A
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 01A0702844BBA8C418FF8824FAD0F3B419DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
Manifest number: 0FC0
Signing time: Sat 05 Sep 2026 06:01:22 +0000
Manifest this update: Sat 05 Sep 2026 06:01:22 +0000
Manifest next update: Sun 06 Sep 2026 06:01:22 +0000
Files and hashes: 1: 1-5Pgda6HIJ1A50ORC-s21IuXoKI.roa (hash: G3EoBYlK+6iAK1+dHCsC16Icl5M1ev7HNUR0XeGO+Q0=)
2: 3D1cLIqJM9j2TiDk4FKtoH3bACY.roa (hash: 9wyJBuDfbj2/qxzFzPQPUFVR/sga3QbA+VZr0ZYglIg=)
3: DVjlzf9-odFEmzfa3WbgW4SKOHc.roa (hash: G99ptyhMQXh4T7sxQFOQiD1Ft8xrRXqhmTKs+Lr/jf8=)
4: MR48vFydmr0SsuxdgWTO19IRiHw.roa (hash: mUaEgZFfj65CrRRMW4qrWw5/5psCJW35a20y1tpoOkI=)
5: OOjjbiEjw5WVY_zDG3MNRgHawWc.roa (hash: 6hSHQjeZPUQqSFTuBckD24PIf8hoBIsHEYoWzKPaWp4=)
6: Uv7GAQ_UlMBXFGvxutIi16HxUTg.roa (hash: CsEeDd1h6WkVmrp/M5Z/7OMRR7HqcBmhfSum5Jl9L2E=)
7: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: IXzAbN1i+AQKtLpvwAYY8YFvdHHMuNUQl3estnIaZPI=)
8: _GfFqUw5mWGbjc_mCBWnNfju97k.roa (hash: 2siq+SOSG2tsLvn2PAlvw4ivV0pVSjLxvVW1AegSSYg=)
9: wYvIMqVJD5kGsVB7Odk1zqw9PLE.roa (hash: lv2FW5IzYlo7gJNIKly5LsLWJkSxo+G8ybKR+UJH+Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:28:44:bb:a8:c4:18:ff:88:24:fa:d0:f3:b4:19:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Sep 5 06:01:22 2026 GMT
Not After : Sep 6 06:01:22 2026 GMT
Subject: CN=d818a239a59a5e18824a066f072f01e337fbf55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bc:44:bb:34:34:74:cd:b1:7a:5c:79:3b:18:
d4:82:86:2d:50:37:60:ec:4b:c4:24:73:56:f5:7d:
35:f4:75:27:5b:6e:ff:72:7e:9d:07:60:c5:cb:2b:
1a:1c:c1:a7:4d:73:26:ef:d8:0b:ca:21:0f:90:c6:
57:5f:cc:5d:d3:36:a6:84:0d:b6:2e:72:d0:ab:e0:
28:72:eb:35:c1:4b:e9:bd:62:2d:da:6e:e3:36:78:
f2:8c:d8:95:8c:a5:7d:0a:48:2e:09:71:ac:78:85:
37:82:41:3e:37:f6:72:59:fd:7d:ef:fa:0d:0f:a7:
44:64:96:7a:1d:2b:35:15:54:f1:a0:e9:5f:fb:85:
f6:b6:c3:49:c0:66:ed:95:52:2c:66:05:ee:99:9d:
f8:e9:ae:47:bb:98:de:b9:d6:cc:05:83:bf:a1:b0:
0f:11:d0:89:a3:50:c6:6e:cb:7c:80:ae:f4:09:ca:
0f:cb:7f:69:7d:df:a9:a4:b1:38:fd:7c:df:0a:e3:
d7:25:c4:f6:e6:6b:83:95:ab:34:4e:0b:e8:37:77:
39:03:29:84:e2:1e:e5:98:2e:6c:c6:e1:d1:7d:d7:
3b:86:e5:68:b5:f3:3c:33:d0:2e:7f:cd:4c:e1:af:
38:97:65:55:c1:62:e0:63:e4:ee:9c:15:33:95:43:
d0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:18:A2:39:A5:9A:5E:18:82:4A:06:6F:07:2F:01:E3:37:FB:F5:5A
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:86:ba:be:bc:6e:c4:81:d0:28:77:21:82:15:bd:33:3d:a0:
a0:14:78:6e:87:10:40:36:79:94:c0:fb:0f:ee:df:f4:ab:84:
6e:5f:ba:73:87:cc:04:cf:14:f4:6e:14:96:08:aa:19:1a:37:
be:78:6c:bb:b8:51:62:99:ec:37:39:f9:8f:64:8b:9b:50:e5:
fd:bf:57:2c:84:3f:df:bc:16:ed:c5:ad:26:c2:4d:39:46:5c:
2b:c3:0f:f9:3c:13:9e:cd:b5:11:75:e7:a9:ce:c0:ed:3d:fd:
cb:f4:04:28:da:d9:43:f3:04:d3:da:3f:92:bb:43:00:37:17:
ef:43:76:ca:b0:39:ba:d5:88:ae:4c:6b:42:76:ce:72:32:05:
aa:20:62:20:d1:c7:1b:b1:c5:2c:32:4d:33:d2:06:96:ab:27:
27:d4:df:74:81:22:52:5a:80:fc:05:55:63:84:77:11:e7:40:
0b:97:14:18:1c:2a:26:4c:b6:4b:b0:0c:fa:6e:ce:5e:49:09:
ab:53:f4:96:71:fe:35:cd:ef:b2:87:93:4b:ac:f5:6d:26:81:
dd:62:70:8b:bb:5f:b6:41:93:b8:de:b5:4e:95:07:1a:d9:2e:
b0:e4:9b:29:d9:63:2c:b9:2c:e5:a5:7c:38:c3:85:f9:0c:40:
c0:96:f3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 15:57:38 2026 by rpki-client