Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
File: X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json)
Hash identifier: vQqj2iZcUEccR51I3+i/d6OMzkw8XE4KxSl+oCZnxJI=
Subject key identifier: 35:56:3E:22:26:CF:CB:20:9F:62:F5:42:AA:52:E9:46:62:06:C4:EB
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 01A189E4968A6E2F0A498D5B70CCE64A3D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
Manifest number: 105B
Signing time: Thu 29 Oct 2026 23:00:21 +0000
Manifest this update: Thu 29 Oct 2026 23:00:21 +0000
Manifest next update: Fri 30 Oct 2026 23:00:21 +0000
Files and hashes: 1: 8ZZTeJpDBcDE73u8m41H0-lGPPY.roa (hash: 8m61DCUJ11WDE8bG7zcJxhYtu4vlHHTEEUTPQVhJRkE=)
2: AGHCS-ixsIWB0-lqutli-vvU1Nc.roa (hash: WCE3HATmUblpfjUoorTVGOjh6oDDC4lQMXaVw/0d2O8=)
3: JsMnbrdIaxVJCAfbkanZJmJY8KA.roa (hash: xYEVUlGxhvFP9bF5W7UAg6rvOmBON7mfzaUHb2SYtRQ=)
4: KRefFYXKlIzwgLe6X2u3LKd7yyE.roa (hash: Du136c+HIMkTr5Ejm95v2mfyMSLoNOYcvMzlhfMYQBg=)
5: MR48vFydmr0SsuxdgWTO19IRiHw.roa (hash: mUaEgZFfj65CrRRMW4qrWw5/5psCJW35a20y1tpoOkI=)
6: NrcU88JD63OVBZN-HsA67x9dDHE.roa (hash: HUkDNA6Xh8flgHRqE5N9jUO0pv+vYDw6mEy5GD9/GH8=)
7: OOjjbiEjw5WVY_zDG3MNRgHawWc.roa (hash: 6hSHQjeZPUQqSFTuBckD24PIf8hoBIsHEYoWzKPaWp4=)
8: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: Yde5fUhGClYmxfsv7feTSfZkwiZg9WVdFC46jjNM9xI=)
9: _OEsYiK5KqFB_kzK0ssj0S5CK68.roa (hash: 4Cjt41jfxhqXMuxBGItK34YzzamDJgH6/BTR+mCLnTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:e4:96:8a:6e:2f:0a:49:8d:5b:70:cc:e6:4a:3d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Oct 29 23:00:21 2026 GMT
Not After : Oct 30 23:00:21 2026 GMT
Subject: CN=35563e2226cfcb209f62f542aa52e9466206c4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d3:d0:0d:fa:a1:09:80:86:81:8c:d2:da:76:
41:94:63:db:c3:7f:ba:7b:ee:d0:fe:ce:36:64:ea:
cc:5b:e7:f6:cd:9d:f0:dd:78:63:70:d2:80:40:c9:
f5:a6:79:9b:c0:f4:4f:5a:45:39:18:ef:d2:25:84:
05:c8:42:ae:28:52:e2:20:6c:f7:96:6a:c4:05:ae:
c5:51:8f:13:7f:40:44:1b:d3:db:72:f0:8f:4f:c7:
c0:49:d8:f8:0a:a6:de:e2:f0:05:25:d1:09:e6:4d:
42:69:cb:78:7c:f9:d4:5f:95:6b:c7:5f:86:c7:7f:
f8:77:94:c3:75:3a:fc:26:29:c4:11:c3:86:75:d5:
8d:27:5b:ce:46:dd:77:97:74:3c:72:47:af:a6:5f:
a3:04:09:f6:73:74:f6:5d:ab:b8:58:3f:56:3c:a6:
f8:c6:e7:e5:3c:d8:fa:2b:c4:7b:f2:ae:2b:9f:c7:
ab:c4:95:45:b1:00:3f:59:69:f8:c0:fc:24:69:64:
d4:75:3b:46:32:70:d1:b5:42:f3:a4:0a:23:dd:a9:
fa:b9:b5:9c:74:d6:7f:32:d9:4c:99:17:44:d5:24:
68:67:78:80:da:c2:b9:e2:fd:8c:63:36:bc:51:f5:
c6:47:7c:97:b2:d1:11:f8:78:d6:ad:d5:00:ef:2e:
21:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:56:3E:22:26:CF:CB:20:9F:62:F5:42:AA:52:E9:46:62:06:C4:EB
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:66:94:54:48:1e:6d:87:53:75:6f:ae:27:d7:60:22:f3:34:
9d:82:ac:c7:d2:75:3a:f5:74:9b:e4:68:66:9c:25:2e:44:d0:
f5:b2:92:46:38:e9:94:8e:63:49:60:18:64:1a:5a:2b:4c:f0:
09:c8:0f:87:94:2c:6b:95:c6:5f:91:ea:0e:49:d2:c8:52:5c:
79:6c:40:6b:9b:fd:d3:97:67:89:a9:98:e2:5c:c2:ff:a0:e0:
16:a4:81:88:76:b8:92:59:f7:e4:b3:c4:dd:ec:c4:14:e7:d0:
3c:38:75:23:cf:4f:02:fb:31:84:37:6d:a3:28:fb:44:7f:78:
35:56:b5:06:0e:d1:04:cf:9d:3a:53:f7:a7:54:27:21:1f:8f:
1c:dc:be:a1:1e:42:df:01:2f:6a:57:42:8b:9c:af:39:d3:14:
00:fe:8b:b2:3d:12:11:00:c1:7a:15:f1:87:f3:09:2e:f9:19:
37:81:41:19:fc:c9:24:70:9d:77:86:14:82:3c:e7:5c:93:de:
5c:44:f5:f6:c6:4e:37:85:41:aa:ff:c3:56:84:f2:46:f1:2f:
2e:d4:16:45:35:86:72:01:5e:88:93:e9:54:72:09:a2:c7:6e:
6c:9f:e9:66:34:a3:ed:11:8a:08:fb:57:06:5e:11:eb:6b:9e:
f0:8d:2b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:08:12 2026 by rpki-client