Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
File: X3UgMVHTsj7My2T1IPtCVJhgz_A.mft (raw, json)
Hash identifier: DIQV0I8ayLigesYCeQb44ICV4mjRnOlOXaKkV8PHmRM=
Subject key identifier: 41:18:A9:CE:84:2E:3E:5C:D3:6D:CA:CF:6C:36:49:82:CD:A2:CD:0F
Authority key identifier: 5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
Certificate issuer: /CN=5f75203151d3b23ecccb64f520fb42549860cff0
Certificate serial: 019D3909A9191D1560AAE6DDB01AA0CC70AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
Manifest number: 133C
Signing time: Sun 29 Mar 2026 10:00:27 +0000
Manifest this update: Sun 29 Mar 2026 10:00:27 +0000
Manifest next update: Mon 30 Mar 2026 10:00:27 +0000
Files and hashes: 1: X3UgMVHTsj7My2T1IPtCVJhgz_A.crl (hash: VF/1G5hJP2f1UMpeUwn9DbdU48FQfqcTTistYts+kYY=)
2: _bNCiGJxahmWNfuieBMbkzGV9Ow.roa (hash: jgB/46kLWrM8U+ephCXoLnuepJdYT1yvSIychEW3MaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a9:19:1d:15:60:aa:e6:dd:b0:1a:a0:cc:70:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f75203151d3b23ecccb64f520fb42549860cff0
Validity
Not Before: Mar 29 10:00:27 2026 GMT
Not After : Mar 30 10:00:27 2026 GMT
Subject: CN=4118a9ce842e3e5cd36dcacf6c364982cda2cd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:da:f6:9c:a9:53:fb:6f:41:61:3b:7f:dd:
5c:2a:fb:8e:92:13:5d:3a:40:09:e8:5e:75:48:c2:
a4:44:7e:0e:0c:94:fd:4b:37:3a:9b:42:5e:a5:15:
b0:66:83:e1:46:81:92:de:d1:8b:a8:a1:c3:50:18:
4e:0a:f7:c1:01:13:2f:e5:ae:de:1a:db:27:7c:38:
56:f2:bd:46:ca:94:de:b4:1f:b2:90:d3:85:15:4e:
69:f3:f9:50:a7:0a:7b:f3:f7:68:f8:60:25:c0:cf:
e5:20:0e:a0:aa:3d:79:3b:7a:50:88:78:ee:0b:81:
76:74:c2:a2:cf:15:03:7c:53:6a:1f:09:b7:08:56:
26:6c:25:9d:f5:d3:9d:db:d3:02:eb:af:c2:7f:b4:
7d:2f:6b:33:6d:5a:d1:c5:78:2f:0b:67:15:82:26:
99:24:c8:71:79:04:da:95:af:e8:ca:47:df:b3:0d:
b6:74:cb:95:dc:a6:cb:70:f2:af:f0:d9:07:16:3a:
99:cd:f2:28:59:33:e6:79:b2:de:d3:fc:d3:e3:61:
5f:73:dd:3e:6c:01:e3:f8:98:b6:31:d4:cf:13:a0:
cd:e9:23:09:ce:f2:bf:09:1f:6c:3d:45:65:72:76:
d3:cf:a4:83:6f:ed:10:14:b2:29:24:6b:21:7f:5f:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:18:A9:CE:84:2E:3E:5C:D3:6D:CA:CF:6C:36:49:82:CD:A2:CD:0F
X509v3 Authority Key Identifier:
keyid:5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:6c:df:d4:f1:5c:ad:67:2e:8c:01:79:de:ae:53:8e:bb:ca:
bf:1f:b0:ec:a4:6a:16:c2:7e:be:b2:47:e3:88:13:1a:a8:8c:
1e:a7:ca:c3:34:7a:86:48:22:05:e3:32:8b:2d:a2:4f:55:91:
33:8d:65:78:a0:4b:17:7d:6f:8e:29:d4:8f:db:da:bc:43:1c:
f2:05:cb:83:a6:37:69:88:a5:ce:c2:cb:6d:0b:04:16:34:ec:
bb:f2:f0:24:59:2a:98:99:93:98:9f:5c:dd:dd:b6:e6:30:f3:
71:ef:88:bc:d2:14:8e:15:d9:5d:14:a8:d6:b0:a1:d3:da:92:
18:fd:d6:c9:8e:fe:36:b5:12:b8:7a:10:e2:39:9e:6a:d2:13:
be:be:85:ad:90:a9:1a:cf:17:1f:6d:83:84:99:49:cb:c6:fd:
3e:a8:66:85:71:33:79:e3:f5:c7:c3:e4:0d:27:07:f4:e9:08:
39:f2:d0:ff:34:0c:fc:d7:28:3e:31:55:9c:b6:1d:39:86:39:
9b:67:72:dc:01:6a:e5:28:ad:e8:29:55:bc:22:70:bf:3e:0b:
8f:ce:f1:47:0c:ca:35:7b:2f:e9:fa:a4:a9:9c:3c:0f:6f:3b:
d0:6e:5c:c0:47:37:f0:0b:6e:43:9a:c4:f4:a7:08:70:a2:1e:
96:fa:fb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:54:38 2026 by rpki-client