Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
File: X39wJQCCw-BW8_5Si9d7BuIOQHw.mft (raw, json)
Hash identifier: W4lUlEaUhVnuiiTrRBkkQEGCsDWPuiiqYFeGAUT2krU=
Subject key identifier: D9:04:B3:01:9A:42:BA:8D:C4:62:D8:F8:2E:DF:DE:91:83:E8:1B:88
Authority key identifier: 5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C
Certificate issuer: /CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
Certificate serial: 019D3865B8019E35D62460A244E403DA461D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
Manifest number: 0135
Signing time: Sun 29 Mar 2026 07:01:23 +0000
Manifest this update: Sun 29 Mar 2026 07:01:23 +0000
Manifest next update: Mon 30 Mar 2026 07:01:23 +0000
Files and hashes: 1: 6PCZUJB3ipwVXLiyKcyJrFQu4wQ.roa (hash: m4ynyhKu4YCsiRrg6pHmEytuHr7lJuhn9fuEsyhPlJc=)
2: BOpDj9O5HVfOitBF2luTW4iqfg8.roa (hash: rJJylU5TJKs4KdXAQOEGLtGPNJZVDTHP3mloiSNNuu8=)
3: X39wJQCCw-BW8_5Si9d7BuIOQHw.crl (hash: v30GV0ebC9bLmrGeDBsUxP6j9o7smjidzpz/iie4LCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b8:01:9e:35:d6:24:60:a2:44:e4:03:da:46:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
Validity
Not Before: Mar 29 07:01:23 2026 GMT
Not After : Mar 30 07:01:23 2026 GMT
Subject: CN=d904b3019a42ba8dc462d8f82edfde9183e81b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:a9:05:5c:cc:22:28:d2:12:02:87:fe:ef:
71:4e:dd:7d:af:f8:6f:47:ac:82:e5:6e:7a:fa:a7:
85:37:68:2c:49:de:9a:ab:ec:4b:39:60:5b:6c:e5:
c3:04:cc:9e:5b:5f:cc:13:0d:84:c2:bc:fc:64:fd:
1c:44:69:32:09:5d:55:9b:fc:7f:ce:f1:0a:7b:58:
2d:b2:a5:22:8e:1e:26:df:57:60:8c:52:81:22:83:
92:6e:a3:32:b6:21:c0:a1:dc:ad:af:e0:aa:b9:49:
70:1e:dd:2e:25:9f:c8:4e:6a:de:7a:d8:02:e2:59:
3a:58:a0:7a:08:f6:39:0d:1f:00:e8:4e:9a:d7:17:
1f:80:fb:16:ca:94:4c:85:bf:65:64:56:15:2d:91:
35:7d:bf:f2:6b:74:85:35:24:80:ed:3a:89:64:ed:
5b:62:6f:6a:15:7d:34:1a:66:42:31:b8:b5:c3:7b:
fa:e6:38:c6:82:13:22:ee:55:96:3c:ad:ab:46:70:
d4:26:66:71:e8:38:f6:67:44:1a:20:5a:96:41:5b:
fe:87:31:c8:7f:43:50:c9:e8:e2:73:ff:27:0b:ed:
16:36:68:e1:8c:02:26:ac:e6:16:e1:0c:77:80:af:
6d:ea:72:93:9b:24:9e:04:61:81:44:1b:48:be:db:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:04:B3:01:9A:42:BA:8D:C4:62:D8:F8:2E:DF:DE:91:83:E8:1B:88
X509v3 Authority Key Identifier:
keyid:5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b8:91:24:b1:cf:76:dc:53:14:c6:e5:8a:13:0a:bd:02:6d:
0d:c6:a1:2b:b3:c4:e4:ac:8d:ce:72:a7:f4:6f:0c:f1:53:41:
04:07:7e:25:b5:67:ff:1a:2f:bb:d1:79:36:cd:b4:d7:be:28:
38:d3:85:84:22:19:af:6d:15:93:da:59:1a:75:97:2a:8b:43:
c1:29:fb:44:32:53:43:75:41:a4:b2:b4:ab:ba:b7:c7:a7:9b:
81:f7:6b:c6:3d:df:71:8f:9d:62:02:56:cc:bd:d3:8f:c9:5e:
3e:60:6d:37:f4:6e:f2:27:92:a4:a2:a0:4b:d9:8b:8a:b4:6d:
9d:05:12:47:ba:07:ac:d8:0b:1b:4c:8c:d5:10:bf:1e:36:37:
61:0e:94:d4:d5:51:7b:d4:ec:2d:35:00:5c:b1:3d:c9:d1:b1:
ac:e9:26:62:d5:77:d9:64:05:18:d5:bc:a6:42:11:48:6f:bb:
a2:41:d5:71:1f:72:22:10:61:f9:d3:5a:f6:e9:c4:f6:24:88:
78:fe:9f:58:88:ed:74:7d:81:ee:c5:63:e1:ae:e9:0e:ba:c7:
25:d2:9d:eb:4d:d1:39:e1:7b:2f:7a:dc:75:a7:d2:05:d3:19:
72:f0:e7:7a:06:c7:d2:c5:97:0a:c4:89:9b:a3:c6:d9:bf:fe:
fd:c9:ae:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:56 2026 by rpki-client