Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: EMYvEb5ln+y9AFL7JEdySliOL0ZrpQXg7xUZvoUatig=
Subject key identifier: EB:FB:2A:66:76:A3:4D:E6:E7:40:2E:FA:DC:FD:D8:12:77:DD:B2:FD
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 019E205A996213F92EFEBA12CFC61FB15063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 08:01:08 +0000
Manifest this update: Wed 13 May 2026 08:01:08 +0000
Manifest next update: Thu 14 May 2026 08:01:08 +0000
Files and hashes: 1: E8tmA0INxy22SoM9WvAlCkcup0w.roa (hash: AKi53HmlwOtf4zu9MkVwsUBo5imAVEvf0SU5LXyt7lc=)
2: SVq7BlyNQkLWpDpUq5tVEQnjeHA.roa (hash: gor3itqwm2WwxifsDiiJPi35aYFb4fu1rJxZVzNphD8=)
3: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: MFVlSQkCfbutaaDy81cIq326MOyceFIMSfLA0q/0EPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:99:62:13:f9:2e:fe:ba:12:cf:c6:1f:b1:50:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: May 13 08:01:08 2026 GMT
Not After : May 14 08:01:08 2026 GMT
Subject: CN=ebfb2a6676a34de6e7402efadcfdd81277ddb2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:b3:d8:11:cf:66:fe:34:c5:df:59:35:96:
84:f4:f6:0e:f0:7a:57:8a:6f:27:eb:56:69:8e:7c:
04:98:f2:1e:d3:46:fc:cb:2e:40:3e:b1:0f:fe:ce:
49:64:99:de:e8:f1:98:37:7e:ab:72:04:a6:a4:13:
fd:1c:4c:04:b6:83:49:ba:a8:11:f5:79:9a:34:60:
91:dd:57:48:78:79:29:db:d3:33:26:a9:b4:4f:6b:
59:37:14:04:1b:e5:97:e4:0d:33:1a:14:66:a0:4c:
68:4b:b8:44:da:c2:de:ea:52:fe:24:fa:bb:35:37:
b2:59:fb:a0:29:a7:43:ce:70:3d:c6:59:b5:f2:05:
79:9f:a3:3e:2c:61:f7:54:fe:9a:1a:a2:b9:c1:76:
90:35:b3:ad:5f:43:0b:77:d8:3f:87:48:a4:49:01:
18:eb:1b:97:9a:75:b2:f7:e2:0e:21:a0:21:f6:91:
7b:b8:9f:bf:71:52:2f:67:67:d2:cb:97:04:a9:76:
23:63:1c:16:5e:4e:85:46:6e:fd:e1:59:cb:6c:50:
50:3b:90:93:9e:03:3c:2d:b4:88:4c:60:55:e3:40:
85:aa:4c:58:97:35:dd:95:dd:81:26:6e:57:ed:15:
54:0c:9e:26:4b:68:d3:24:c4:74:fd:5c:e8:32:af:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FB:2A:66:76:A3:4D:E6:E7:40:2E:FA:DC:FD:D8:12:77:DD:B2:FD
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:84:bf:ee:46:6e:46:20:5f:e5:c2:f2:59:20:c8:45:e1:5f:
7c:09:72:2c:57:99:e2:9f:25:86:02:bc:3c:f7:ea:63:37:36:
2d:05:2d:e4:86:2b:28:3e:fc:ae:43:be:7c:4e:64:37:64:81:
ef:6a:2d:ba:64:cc:fa:29:aa:25:3d:09:5d:ce:cf:db:af:07:
6d:24:78:a0:ab:a7:78:a7:78:d9:a9:4a:0a:8f:d0:b3:e0:37:
1f:0d:4d:fc:e8:16:bb:56:29:75:bd:0b:df:d7:4c:e4:6a:36:
bc:e1:cf:79:53:a5:84:79:cd:7a:e9:37:9c:55:8c:6d:14:44:
43:cc:bc:2d:44:de:ed:ac:f7:b8:19:24:c4:ca:71:e9:69:04:
f9:2e:be:28:a9:08:d1:a3:3f:d8:bb:fc:3d:a5:e2:a8:dc:fc:
6e:1a:b4:44:5f:66:2d:4b:15:d6:7b:de:da:89:1a:90:55:81:
cc:9d:38:6d:ee:8f:e3:a4:53:71:f1:88:1b:c9:e1:3f:3e:cf:
f4:d4:08:f0:87:de:4a:f6:8d:9e:22:70:8a:19:1c:a8:83:10:
b3:d6:cd:9f:15:3c:54:0a:0b:2f:9e:2e:51:30:bb:41:95:fe:
53:be:5e:32:32:50:42:3b:e3:d5:b7:69:7d:c8:82:1e:77:f6:
66:4e:70:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:29 2026 by rpki-client