Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: HmwOOoH8UcbupTPoF4kjGsYGPXOLdIEpTL5Qo4tKyOU=
Subject key identifier: E1:F3:06:32:FC:AA:A6:F2:A5:4C:47:2F:25:9E:A8:D7:5F:94:DA:56
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 019D292949FC2D753A8A827EB3CC2B16B0A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 08:01:04 +0000
Manifest this update: Thu 26 Mar 2026 08:01:04 +0000
Manifest next update: Fri 27 Mar 2026 08:01:04 +0000
Files and hashes: 1: E8tmA0INxy22SoM9WvAlCkcup0w.roa (hash: AKi53HmlwOtf4zu9MkVwsUBo5imAVEvf0SU5LXyt7lc=)
2: SVq7BlyNQkLWpDpUq5tVEQnjeHA.roa (hash: gor3itqwm2WwxifsDiiJPi35aYFb4fu1rJxZVzNphD8=)
3: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: Tm3HAjGrSK+Dpxrl9aM31fnnnwtrrENYlycbcaUiUjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:49:fc:2d:75:3a:8a:82:7e:b3:cc:2b:16:b0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Mar 26 08:01:04 2026 GMT
Not After : Mar 27 08:01:04 2026 GMT
Subject: CN=e1f30632fcaaa6f2a54c472f259ea8d75f94da56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:2d:06:b7:0d:e7:f6:e9:bc:7f:db:20:72:
fd:1a:a1:b6:82:71:45:8d:88:2a:ae:f2:d7:63:51:
39:57:62:36:fa:71:ce:1a:39:20:67:94:30:91:85:
f7:88:8f:62:24:bd:14:c9:1f:f5:ea:8f:69:27:cc:
ac:6d:ef:2c:c2:bc:69:7d:43:dc:a0:95:7a:5d:cf:
a5:d2:8e:2d:c0:48:a2:09:29:df:3f:cc:ce:5f:6b:
9e:d1:60:51:73:32:39:41:b9:60:e8:dd:5a:cc:a5:
35:8b:98:6d:e8:8c:3e:63:26:cb:22:b4:26:4c:bd:
c5:2d:45:e9:87:a7:8e:91:9d:1e:4b:1c:f7:6a:2f:
8c:4a:33:98:4e:66:a6:f7:29:41:dc:60:2e:f8:37:
c6:62:d5:39:3d:00:97:e6:7d:2b:77:78:40:d0:58:
c3:5f:ed:7c:c4:74:3e:02:b8:fe:30:69:eb:08:c5:
d9:f2:23:eb:49:8a:a9:44:e3:58:f0:fc:e7:4c:47:
d3:df:de:a9:bd:b7:02:ca:23:e9:60:0d:c9:18:f4:
f3:03:bd:7a:57:36:22:b2:71:17:33:48:dd:12:c4:
ec:fa:00:65:fa:46:df:72:73:f5:8a:e8:81:0c:78:
84:a5:ac:a0:f8:5f:bd:df:49:df:92:63:a7:aa:87:
ec:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F3:06:32:FC:AA:A6:F2:A5:4C:47:2F:25:9E:A8:D7:5F:94:DA:56
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:09:54:f2:7c:12:ef:e0:2c:6c:5a:2b:4c:e8:9e:ec:1b:80:
dc:fd:8d:ec:9e:90:49:ee:a9:e1:3f:45:3f:f8:bb:c4:f9:f8:
0a:e0:a5:67:f7:fe:b1:ac:cf:3f:9e:87:82:10:b9:f8:78:d8:
5f:a6:b9:6f:e4:29:be:44:08:e3:2a:b7:91:c2:85:92:96:92:
49:34:87:11:c9:76:cc:35:52:c3:1a:94:a3:a2:1c:c1:97:8f:
d0:24:a0:d4:09:01:85:da:b6:be:2b:29:8f:23:3d:7b:80:e2:
b2:98:42:fb:9e:c8:1e:d6:84:ec:f8:0f:5f:da:68:65:7b:71:
3d:d0:cf:1b:e5:67:9d:f8:29:24:75:f0:21:8e:a9:1d:aa:df:
19:9c:45:2e:a4:34:3f:8c:d2:21:55:99:1f:62:63:75:7c:6d:
43:28:37:b8:31:eb:8a:63:bc:95:91:6d:b0:63:7a:28:0a:06:
93:a6:8b:47:33:4b:18:a6:a0:8e:ae:ca:7a:5d:3c:9c:cb:be:
7b:53:30:a0:3a:1c:2d:37:33:f8:90:d0:ca:a3:50:63:11:bf:
55:83:c0:b2:01:17:0e:db:84:50:37:29:c7:4b:98:9a:ad:26:
37:c0:9f:d5:e5:81:20:a4:d0:8d:de:42:c8:9c:a1:fc:b3:f8:
3e:3c:12:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:58:34 2026 by rpki-client