Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
File: x5d6en0rE11ac3kcp889mtpYj2s.mft (raw, json)
Hash identifier: DQv06Js0ylg6/snzHOVN1fh4Sh+ytqESrYkKg5tyb8A=
Subject key identifier: D3:82:5C:1A:5E:D7:11:F3:D7:B2:66:1B:75:28:17:C2:FA:F0:C9:D1
Authority key identifier: C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
Certificate issuer: /CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Certificate serial: 019D39414D80686B664146B21223E3336452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:01:13 +0000
Manifest this update: Sun 29 Mar 2026 11:01:13 +0000
Manifest next update: Mon 30 Mar 2026 11:01:13 +0000
Files and hashes: 1: obbIRXSf7o8eyn8AX9K_sXlcOOA.roa (hash: ju/bIy7nXAPL/xatGDGkzr+qevUa2q9qUxQ/kQdO+6k=)
2: x5d6en0rE11ac3kcp889mtpYj2s.crl (hash: H3DsBRL18gjVf4g1yTwst6VJz//PvVezbN6imi+iMFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:4d:80:68:6b:66:41:46:b2:12:23:e3:33:64:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Validity
Not Before: Mar 29 11:01:13 2026 GMT
Not After : Mar 30 11:01:13 2026 GMT
Subject: CN=d3825c1a5ed711f3d7b2661b752817c2faf0c9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:99:87:f7:bb:b9:5f:aa:20:d7:bf:4a:04:
6f:77:08:1b:6f:92:fa:c0:81:d5:b9:7e:ab:dc:c9:
8e:a0:05:c6:4b:d9:eb:46:1a:0c:33:2b:0e:b9:72:
76:30:58:aa:3f:39:54:6c:af:78:b7:86:cb:e3:fe:
b4:99:d1:99:e5:3d:17:c0:3c:79:b1:32:cb:94:96:
43:b3:ac:57:0a:fe:4a:9c:7e:f2:31:31:8e:84:3e:
19:ea:71:c5:3a:a9:2f:a4:16:0f:a2:ca:c0:74:bc:
9c:aa:ab:64:bf:98:d3:fa:00:c1:77:71:d2:19:2e:
4e:3d:3f:56:f0:c6:2b:6f:f6:c6:a1:af:b8:a1:d4:
b7:c1:69:9d:ca:54:fd:25:5a:a8:80:c6:65:1f:fa:
90:f9:6e:e1:c3:79:b1:ae:27:8d:da:c5:3d:e5:23:
88:2d:37:47:53:c9:f2:06:d7:6d:88:da:72:10:fa:
d5:ca:72:a2:b2:5d:38:41:6f:10:eb:a7:92:36:e8:
5e:10:01:3a:db:ff:ba:68:db:1a:84:89:b0:81:25:
3e:3e:2c:e2:a2:0f:a6:cf:fe:63:38:dd:a7:7b:07:
f5:d1:b1:72:2c:e0:35:d3:e8:2d:4e:7e:12:4c:20:
bc:08:e9:6b:05:b6:17:ff:9a:09:0c:93:b5:ea:66:
58:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:82:5C:1A:5E:D7:11:F3:D7:B2:66:1B:75:28:17:C2:FA:F0:C9:D1
X509v3 Authority Key Identifier:
keyid:C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:99:9f:ea:6b:2f:0f:98:68:0f:dd:55:ea:c0:2c:66:8f:20:
b4:0c:0c:84:40:1b:32:d0:13:d0:9a:2e:57:0b:48:33:be:8e:
bd:be:2e:e5:18:35:3d:dc:1f:97:2c:32:26:a9:45:46:d6:7c:
03:2e:bd:0c:f0:2e:37:2f:39:77:54:bc:98:fd:45:fe:53:05:
fb:a7:1e:55:ca:f1:95:5c:c6:43:6e:b9:d0:42:06:4a:35:35:
6d:50:00:fa:18:f4:fe:80:6f:1d:ec:1e:bf:f6:01:29:aa:af:
d9:cc:fc:a5:4a:14:16:1d:43:ac:fc:73:42:63:bc:84:75:b1:
9d:8a:94:37:43:7e:f5:b0:2f:5b:97:05:27:27:01:ec:8b:02:
05:5c:6f:09:d1:b3:07:88:b5:21:5f:02:20:f5:dd:b5:95:85:
cb:2b:fa:e0:6a:d6:aa:54:ed:2e:4e:1d:dc:8f:f4:e4:98:c3:
bc:6b:13:60:81:d7:57:d8:99:ac:8d:00:7a:db:67:f6:7d:48:
13:3a:fa:33:b3:57:d4:5d:7f:c4:df:88:57:42:03:13:00:6c:
81:0a:1c:10:d1:32:58:14:99:2e:b5:9a:36:26:00:61:53:c8:
a4:23:a2:d8:9e:0a:2b:4d:25:5c:fe:01:7e:19:73:ac:03:6d:
31:94:59:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QU2AaGtmQUayEiPjM2RSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3OTc3YTdhN2QyYjEzNWQ1YTczNzkxY2E3Y2YzZDlhZGE1
ODhmNmIwHhcNMjYwMzI5MTEwMTEzWhcNMjYwMzMwMTEwMTEzWjAzMTEwLwYDVQQD
EyhkMzgyNWMxYTVlZDcxMWYzZDdiMjY2MWI3NTI4MTdjMmZhZjBjOWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvSZh/e7uV+qINe/SgRvdwgbb5L6
wIHVuX6r3MmOoAXGS9nrRhoMMysOuXJ2MFiqPzlUbK94t4bL4/60mdGZ5T0XwDx5
sTLLlJZDs6xXCv5KnH7yMTGOhD4Z6nHFOqkvpBYPosrAdLycqqtkv5jT+gDBd3HS
GS5OPT9W8MYrb/bGoa+4odS3wWmdylT9JVqogMZlH/qQ+W7hw3mxrieN2sU95SOI
LTdHU8nyBtdtiNpyEPrVynKisl04QW8Q66eSNuheEAE62/+6aNsahImwgSU+Pizi
og+mz/5jON2newf10bFyLOA10+gtTn4STCC8COlrBbYX/5oJDJO16mZYoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOCXBpe1xHz17JmG3UoF8L68MnRMB8GA1UdIwQY
MBaAFMeXenp9KxNdWnN5HKfPPZraWI9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDVkNmVuMHJFMTFhYzNrY3A4ODltdHBZajJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85NjY4YjYtMzA3My00YzdiLWExNWQt
NGE5Y2NlNjBiZGI4LzEveDVkNmVuMHJFMTFhYzNrY3A4ODltdHBZajJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85NjY4YjYtMzA3My00YzdiLWExNWQtNGE5Y2NlNjBiZGI4
LzEveDVkNmVuMHJFMTFhYzNrY3A4ODltdHBZajJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJmf6msv
D5hoD91V6sAsZo8gtAwMhEAbMtAT0JouVwtIM76Ovb4u5Rg1PdwflywyJqlFRtZ8
Ay69DPAuNy85d1S8mP1F/lMF+6ceVcrxlVzGQ2650EIGSjU1bVAA+hj0/oBvHewe
v/YBKaqv2cz8pUoUFh1DrPxzQmO8hHWxnYqUN0N+9bAvW5cFJycB7IsCBVxvCdGz
B4i1IV8CIPXdtZWFyyv64GrWqlTtLk4d3I/05JjDvGsTYIHXV9iZrI0Aettn9n1I
Ezr6M7NX1F1/xN+IV0IDEwBsgQocENEyWBSZLrWaNiYAYVPIpCOi2J4KK00lXP4B
fhlzrANtMZRZhg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:05 2026 by rpki-client