Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: YzKBVCBEZNKpR73VnKfdpkCiWhj7z2V4s2CCJW9N54s=
Subject key identifier: D9:3E:F5:B2:33:88:B5:23:FF:67:B3:8C:42:8B:6E:24:29:C4:CD:26
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 019F9135ED11F1AECCADD7A5C70DFC737E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 23:00:58 +0000
Manifest this update: Thu 23 Jul 2026 23:00:58 +0000
Manifest next update: Fri 24 Jul 2026 23:00:58 +0000
Files and hashes: 1: E8tmA0INxy22SoM9WvAlCkcup0w.roa (hash: AKi53HmlwOtf4zu9MkVwsUBo5imAVEvf0SU5LXyt7lc=)
2: SVq7BlyNQkLWpDpUq5tVEQnjeHA.roa (hash: gor3itqwm2WwxifsDiiJPi35aYFb4fu1rJxZVzNphD8=)
3: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: d7LjH2UcJe+RlTo8LmJ7Z1jYIol9bF2ZjgDJb5MZNzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:ed:11:f1:ae:cc:ad:d7:a5:c7:0d:fc:73:7e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Jul 23 23:00:58 2026 GMT
Not After : Jul 24 23:00:58 2026 GMT
Subject: CN=d93ef5b23388b523ff67b38c428b6e2429c4cd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:34:74:02:42:6e:f1:e0:70:62:d6:df:d7:
66:1e:59:cc:1e:4b:9c:34:4a:63:40:43:9d:fd:55:
78:73:54:8d:cc:e4:8d:d2:3f:ea:84:8d:26:78:3f:
ae:12:be:7c:38:bb:4b:ff:58:e2:2d:33:ff:5e:d6:
63:79:e1:27:2d:ec:f9:db:5c:01:5d:ba:bb:fc:2a:
d6:46:9e:0e:94:75:6f:d0:1c:3c:5c:c4:dd:2e:84:
82:70:a6:fe:24:fa:ed:4c:5a:23:94:a4:3d:02:3e:
ec:37:4c:25:a6:f6:f4:72:57:58:6b:64:64:cb:ba:
03:37:b4:52:05:1f:83:39:cb:0f:6b:d3:d0:cf:c9:
5e:95:63:d2:9a:1c:97:8d:ce:74:00:e7:83:e7:7d:
99:9f:a0:d3:ee:3b:a8:90:a6:52:81:a9:99:07:4a:
d4:f5:eb:a7:1d:6b:89:33:bd:19:b4:3f:a4:3a:a8:
25:04:68:ee:dc:cf:7c:e4:c9:51:c5:cd:ea:a3:d7:
0e:1b:e7:b7:2f:9f:c8:5d:91:50:ef:ed:44:14:ee:
87:2c:19:e3:75:a6:4e:da:fa:1c:2e:e3:5d:8d:ec:
06:dd:72:6b:58:db:66:98:05:77:5b:8b:54:b5:95:
e3:8b:63:be:df:ba:2d:22:b9:cf:41:65:1d:85:0c:
33:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3E:F5:B2:33:88:B5:23:FF:67:B3:8C:42:8B:6E:24:29:C4:CD:26
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:cf:cf:06:73:db:c6:cc:9c:bd:17:34:91:37:ee:da:ef:fb:
0d:04:ed:9a:17:ac:26:8b:18:22:36:fd:7a:46:42:e9:59:de:
2c:26:65:af:4a:60:46:2d:1f:18:ed:02:05:64:3b:90:ec:87:
33:2a:25:82:3e:79:a5:52:69:05:75:b3:74:2a:78:eb:15:83:
5f:ff:1d:7d:02:96:66:58:4e:11:90:35:fb:70:f9:0e:02:27:
e9:30:0c:cd:19:ce:1e:91:66:f4:54:e2:d8:f1:86:d6:87:08:
a7:d7:f6:0e:66:04:0b:c8:d7:d2:2a:22:8c:26:3d:41:e4:63:
50:a5:4b:51:a0:97:b7:85:b2:fa:b1:43:c3:d9:f2:84:02:2c:
7e:f6:70:18:82:0f:c2:82:00:8e:59:e0:6c:96:c2:39:9a:b0:
9a:88:ee:7c:7e:5d:c6:8a:76:83:8b:f9:9f:b2:03:93:c7:8e:
55:6e:0d:eb:b2:6f:b4:d8:8b:21:ff:3a:29:79:c4:ec:c2:05:
19:9d:e2:e6:0c:c4:65:86:24:19:19:51:f7:72:56:7c:d5:43:
a1:42:ed:6b:43:80:62:b8:e9:f1:8f:e9:7f:d5:e1:ae:4a:17:
58:ab:99:0d:f6:88:ea:54:a3:4f:e2:6e:f9:df:53:d3:ce:88:
cb:72:00:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:47:41 2026 by rpki-client