Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
File: x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json)
Hash identifier: qgpmvDSYY1acImVwRLJ84kdERcIH/yO5QybZHW/jagM=
Subject key identifier: 00:1A:37:33:73:D5:50:31:2E:50:DD:87:9C:F6:8D:AF:43:3A:8A:DE
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial: 019D38D2C0664DEDBDDE11ACFD8E52F6BAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
Manifest number: 15A2
Signing time: Sun 29 Mar 2026 09:00:28 +0000
Manifest this update: Sun 29 Mar 2026 09:00:28 +0000
Manifest next update: Mon 30 Mar 2026 09:00:28 +0000
Files and hashes: 1: INecSgDNWHvp6sU-WpJihfiFh4s.roa (hash: PMEEstkE23N+oMl4zNZYpTJcYs3rPhZEK/XuV630Gno=)
2: f25A04rpXtD2_br_jQIVVfQ8etM.roa (hash: iSZljQkRURevE7K28zcSzw6RdndhY9rvXLjgdmSdTqY=)
3: ggUa6LfIuLLVR5P1Qr24VmoyZso.roa (hash: rdmuXEokTMYqrj4xUmy2EZVO5gA++Wv14CxkDlRPOSQ=)
4: gnB4DwAgCjyQcWFzJEdE7GWr73o.roa (hash: HW/BGej/dJUcVDYCwLRVJHa3/FSej9vAGH4VzbSF+To=)
5: tmpjXkdMeErzXzSF-Knv6lEK4MM.roa (hash: 59w580G8bYKyMW9mWYISKVPkaSir7aOf2hHeB7WsN6s=)
6: w_ptOPR66g-2hUDEWzrs74clcAE.roa (hash: 6vuuqzAxRKqIgwnNrTyFV+eVf/OZTeXgi5JQBVeXXCI=)
7: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: KZ0C3b/7Kv9oW0SLIp/GQ9n9UMxqs6TurHSVsyxg14I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c0:66:4d:ed:bd:de:11:ac:fd:8e:52:f6:ba:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Validity
Not Before: Mar 29 09:00:28 2026 GMT
Not After : Mar 30 09:00:28 2026 GMT
Subject: CN=001a373373d550312e50dd879cf68daf433a8ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f9:cc:db:10:37:7a:f9:c0:ba:45:4c:3c:76:
22:6e:14:f5:c0:6d:ed:5b:8f:d0:cd:dc:a4:0c:70:
51:e7:3d:21:5a:69:c9:be:5e:eb:6e:d8:89:00:64:
12:eb:72:a7:08:6d:70:a9:20:ac:24:91:ef:2b:3a:
02:43:55:38:25:aa:82:18:95:33:60:3c:e5:a6:d6:
f8:e8:a5:f0:c8:e2:33:37:dd:f8:04:46:67:f4:87:
30:4b:e9:ba:f0:10:cd:d7:26:bc:06:47:a6:9f:ce:
d6:18:c0:de:8f:ec:8a:de:3a:17:ff:a3:f9:6c:a1:
a3:98:d3:8d:da:ed:43:55:b1:1c:13:0c:3b:ac:ba:
80:2a:00:d1:2f:88:52:46:fe:86:29:6f:50:11:7b:
b4:36:7e:6a:c2:08:76:8a:d7:ff:62:79:4d:b2:8b:
a9:98:54:cd:38:24:f2:22:c9:1e:53:36:5f:c7:0d:
5a:e8:92:fa:58:f0:27:21:6b:89:fa:66:11:2e:ff:
5a:81:88:f8:eb:a5:72:d9:7b:a9:a3:9a:5d:ef:11:
9b:f3:ed:b6:b0:52:45:f5:a1:80:a5:5b:25:99:33:
cd:ee:ca:2e:47:f3:a8:36:d9:d5:1c:58:0f:a5:73:
50:45:53:3a:bc:c8:06:8b:8c:32:ce:17:97:dd:64:
23:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1A:37:33:73:D5:50:31:2E:50:DD:87:9C:F6:8D:AF:43:3A:8A:DE
X509v3 Authority Key Identifier:
keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:29:cf:a8:9e:28:d4:e4:08:b7:34:2e:a3:a9:e1:38:94:cf:
f8:1f:5f:d4:44:65:b5:6a:45:04:ef:0c:5f:8b:56:ec:eb:fe:
b7:72:c2:af:e1:81:bc:c9:b6:f8:f6:44:b3:39:90:43:23:a6:
dd:cc:48:6a:dd:15:9f:1f:18:50:e9:dc:67:f3:fc:0b:ae:67:
39:64:9e:2d:df:0f:d9:fe:be:ed:a4:15:3d:c3:4f:ec:a2:c1:
01:71:ae:22:b6:5c:4b:bd:0b:16:04:6e:bf:52:32:bc:bc:a9:
ca:d7:8c:4a:b6:40:36:e9:0a:a3:6c:1f:18:59:95:87:3f:aa:
bf:34:69:48:c8:d8:c0:00:91:eb:de:92:af:17:10:e1:1d:e9:
f8:72:4e:f6:b2:f2:ec:67:c8:0e:2e:5a:97:80:18:cf:60:66:
95:48:a3:55:e7:e7:ff:41:46:ed:39:4b:c4:86:db:13:63:d9:
1f:c4:f5:dc:b3:c0:ad:2b:81:bd:e6:51:aa:36:42:24:0d:b1:
98:15:e4:6e:c4:23:c7:4f:ab:0c:d9:ba:ba:26:51:4e:d2:b9:
31:82:e7:f5:ea:7b:d1:90:30:c7:1d:16:23:c7:2f:b5:9a:b0:
8a:50:45:7a:e4:81:8c:a3:c6:8b:95:07:1e:c2:3b:54:7f:7f:
a2:e9:a9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:51 2026 by rpki-client