Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier: WexK19DekTXTK/+8fZX3WGcMFKCTPe2BXhH5SUOTOfU=
Subject key identifier: 00:68:28:5B:16:53:8D:E9:37:37:1D:21:89:2A:F4:DB:AC:37:BF:8D
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 019D390A1108C9B4A2D62E7A2E70581E3458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number: 05F1
Signing time: Sun 29 Mar 2026 10:00:53 +0000
Manifest this update: Sun 29 Mar 2026 10:00:53 +0000
Manifest next update: Mon 30 Mar 2026 10:00:53 +0000
Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: +phDAlR4A+Xt/5vBmV9yVq74WzafNj5mY3HsrLO9ZrU=)
2: NnFd_WEgwW5v_Q4XnzqgHc73AUU.roa (hash: qPnnpRuZWwT2D2tSbOOn+WEnPUGhmP0A1leKPzarn0s=)
3: aJGaWlz_CFVJ2Nm0gy1yUmZTtS0.roa (hash: vHZJo0+5vZ38Mb8o++2KXKDyHid1BpZNVh84OdWoQD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:11:08:c9:b4:a2:d6:2e:7a:2e:70:58:1e:34:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: Mar 29 10:00:53 2026 GMT
Not After : Mar 30 10:00:53 2026 GMT
Subject: CN=0068285b16538de937371d21892af4dbac37bf8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:17:79:4c:8d:b6:e1:4e:87:1a:71:98:6f:
3f:86:a4:0c:1e:a9:fc:d7:20:58:2b:6f:57:46:83:
68:c7:6d:b1:30:53:9b:c6:cc:51:af:ab:14:a8:9d:
8d:2c:6b:be:b2:ef:0b:98:0b:31:73:aa:50:8b:b4:
88:c3:6a:9f:bc:88:65:10:26:ef:7d:c1:f0:c9:87:
9f:bd:66:19:d6:40:7d:46:1c:80:94:67:bb:9f:66:
bf:bf:b5:c5:cf:1b:70:4f:e3:ce:13:cc:ff:57:27:
17:cc:f7:cd:64:35:8d:23:cd:08:19:d6:d7:ed:8e:
f8:ae:17:15:23:9d:7d:8d:71:37:a3:73:a2:33:c2:
07:19:0e:0b:4c:17:24:7b:ff:a9:57:ce:73:5b:98:
51:4c:c1:67:9d:9c:32:b8:4a:36:55:dc:17:15:10:
19:15:b5:d1:91:55:19:1e:4c:90:34:5a:79:1f:01:
3b:b3:35:1d:ce:e2:27:4a:47:2b:60:13:2c:a0:63:
e7:e5:45:0b:97:a9:17:16:e7:32:6e:ef:67:22:75:
a4:5f:fa:44:81:63:86:27:0c:a2:e9:40:68:e8:ff:
76:00:86:d3:f8:99:a5:67:11:7a:bf:ea:23:72:7e:
55:80:54:68:7d:63:57:10:d9:99:a3:00:a6:97:61:
a1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:68:28:5B:16:53:8D:E9:37:37:1D:21:89:2A:F4:DB:AC:37:BF:8D
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:33:2e:9b:04:38:79:94:96:31:60:40:cc:e7:3d:cf:eb:44:
cb:97:50:88:e5:cc:42:07:bc:20:98:e7:10:77:f5:de:27:1f:
62:fd:32:aa:91:3b:7f:1d:81:e4:ca:08:1c:e7:f7:4a:6c:a2:
bf:78:dd:03:a8:15:df:ea:4f:55:7d:6d:c6:68:e1:67:99:d5:
5f:54:ba:da:87:ca:f7:fc:20:a4:63:df:5d:a3:a2:d2:e8:d9:
61:2e:11:bf:95:5e:dd:09:9f:06:50:b8:f6:26:39:57:6b:0c:
ba:51:b0:1d:23:ad:30:71:f6:9a:71:b7:54:15:9c:7a:0a:8b:
85:9c:52:65:8d:f4:4c:67:d9:a0:df:c8:ca:17:9f:54:b1:3d:
18:ac:a8:88:e4:43:88:45:4f:c5:5e:d3:26:c4:31:5f:9f:21:
b3:4c:7c:b6:76:5f:f4:0e:ef:75:a9:89:e6:9e:ae:75:9c:89:
40:90:71:81:6e:b9:dd:c6:1e:7c:67:e2:d0:91:6e:45:5c:5b:
d0:3f:e5:c7:96:97:53:bd:d3:6b:d6:8a:36:41:a5:db:a0:91:
3d:dc:d9:a5:7a:3a:ef:55:49:41:82:5b:26:50:0f:90:9d:b3:
b6:00:5e:20:2b:15:95:c2:e3:e5:60:cd:93:a8:4b:e7:38:c4:
e0:7e:57:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:36 2026 by rpki-client