Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: q8UePIVhXDTf7VQtoe2FpaGKmKVIQ1ppMMpzS6iyy9Q=
Subject key identifier: F7:2C:36:72:39:97:6E:18:4C:37:8C:07:D8:6D:77:49:6A:BC:C9:12
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 01A0D5A6A33EC82F74ADF79159B5C175AEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 23:01:02 +0000
Manifest this update: Thu 24 Sep 2026 23:01:02 +0000
Manifest next update: Fri 25 Sep 2026 23:01:02 +0000
Files and hashes: 1: E8tmA0INxy22SoM9WvAlCkcup0w.roa (hash: AKi53HmlwOtf4zu9MkVwsUBo5imAVEvf0SU5LXyt7lc=)
2: SVq7BlyNQkLWpDpUq5tVEQnjeHA.roa (hash: gor3itqwm2WwxifsDiiJPi35aYFb4fu1rJxZVzNphD8=)
3: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: S9XqkM7LHFfmb9rELUiGDli9A+4JZt3RxqZogMADCiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:a3:3e:c8:2f:74:ad:f7:91:59:b5:c1:75:ae:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Sep 24 23:01:02 2026 GMT
Not After : Sep 25 23:01:02 2026 GMT
Subject: CN=f72c367239976e184c378c07d86d77496abcc912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1a:c7:2a:2e:e8:bb:ea:45:b6:78:3a:64:c8:
50:9e:75:48:be:9b:70:d1:04:02:b5:aa:5a:20:f6:
59:b9:85:ac:ae:6c:cf:57:e8:a5:42:a3:63:34:56:
24:c1:cd:57:6e:a2:fb:52:16:61:4d:c9:df:2a:97:
9b:b1:e5:b6:04:f9:5b:d1:0a:69:c3:8e:f4:74:24:
e3:16:0d:28:1d:f3:bd:ff:45:44:e4:5e:06:6b:42:
f5:16:cf:7d:46:7c:15:83:a1:c2:0e:b1:35:a1:b4:
4c:1b:16:ea:c7:22:a3:69:c5:34:0e:08:5a:76:93:
de:0f:8c:3a:bb:0f:c5:12:19:87:7f:13:fa:04:c0:
62:6c:c9:96:2f:29:76:25:16:f9:0f:85:af:8a:fb:
39:70:be:db:38:c0:c6:4a:7d:49:5b:bc:35:9f:2a:
4e:31:31:46:cf:12:32:fe:59:b6:24:5e:8c:0b:9e:
17:dd:9d:a8:79:73:0c:a2:63:e7:51:be:7b:d7:a4:
dc:48:81:fb:0f:e6:ad:6d:11:04:f6:7e:5e:ac:b9:
11:3b:ee:ec:bf:cb:0f:df:e2:96:fb:27:9e:be:66:
aa:f7:0c:d3:c0:db:5e:12:e8:1e:04:36:5d:9d:34:
9a:aa:5d:20:35:de:bb:17:af:a3:5b:87:a1:26:a7:
5d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2C:36:72:39:97:6E:18:4C:37:8C:07:D8:6D:77:49:6A:BC:C9:12
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c2:a0:40:a2:25:8a:1a:93:f6:d4:a5:01:03:a3:a5:db:43:
9f:fe:29:60:15:ab:c1:90:dc:0e:8f:45:38:8e:bf:6b:78:66:
2a:cb:a4:bb:a9:8c:88:d0:e6:0c:65:43:09:0f:3b:1c:d2:45:
7c:3b:dc:d3:15:80:eb:09:eb:e0:b4:29:26:f9:65:f7:05:38:
69:dd:fd:53:63:60:2c:7d:42:ed:b1:f5:19:2d:0d:84:de:2e:
31:c1:25:21:ed:4b:08:8d:13:18:b8:c0:32:7c:e6:5e:4d:8d:
e9:a8:a3:00:67:01:1e:61:99:47:bf:9a:f8:28:2c:b7:22:31:
eb:ae:39:31:48:ca:4a:e4:5d:4a:14:eb:d5:90:09:76:21:2f:
ba:cb:43:e9:91:bd:b6:cf:55:2c:c3:31:47:d6:fa:33:90:39:
8e:25:05:f4:bf:0c:40:50:bc:32:ba:d2:7b:3c:68:ea:d4:7f:
da:bd:af:40:a0:94:bf:c3:8d:0d:0b:b8:eb:70:22:b4:16:b5:
81:04:54:f9:cb:75:dd:91:fa:1d:9c:b8:de:41:4c:59:83:8a:
96:70:f1:59:e1:b4:de:95:a0:f1:04:71:71:d7:5b:c9:15:c4:
5e:6f:b6:19:3c:9b:fe:15:aa:08:9e:d0:af:11:57:09:87:1e:
e7:2a:d7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:14:04 2026 by rpki-client