Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: JzVgv2+dpKshi5HIAEb3HiQJvSU1EiN2rZ87tv6fVL8=
Subject key identifier: 43:9A:60:1B:77:EF:1A:26:9B:DC:03:31:0C:41:5F:17:FF:47:0A:03
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 01A0DB724FB5FC6C1D6A087ABE6709237442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 02:01:36 +0000
Manifest this update: Sat 26 Sep 2026 02:01:36 +0000
Manifest next update: Sun 27 Sep 2026 02:01:36 +0000
Files and hashes: 1: E8tmA0INxy22SoM9WvAlCkcup0w.roa (hash: AKi53HmlwOtf4zu9MkVwsUBo5imAVEvf0SU5LXyt7lc=)
2: SVq7BlyNQkLWpDpUq5tVEQnjeHA.roa (hash: gor3itqwm2WwxifsDiiJPi35aYFb4fu1rJxZVzNphD8=)
3: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: EQqatVtU9cmZYbknTkxCyIoHI337+r6Opj1QVhP6WBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:4f:b5:fc:6c:1d:6a:08:7a:be:67:09:23:74:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Sep 26 02:01:36 2026 GMT
Not After : Sep 27 02:01:36 2026 GMT
Subject: CN=439a601b77ef1a269bdc03310c415f17ff470a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:c6:a0:f0:46:51:c3:81:85:34:b1:b0:d2:
8c:8c:53:7f:48:24:49:68:ef:50:69:bd:f5:3a:e5:
80:02:1b:42:61:3f:e2:00:78:8a:03:4f:c2:4d:77:
b6:41:79:79:f4:70:5d:de:0b:50:88:1d:9e:10:69:
d8:e1:ca:a0:dd:71:2a:d0:b6:ea:66:be:47:0c:71:
35:72:c3:88:85:7b:c1:82:11:19:e7:d6:23:b3:03:
d0:5f:38:24:5f:00:f4:85:87:d7:3d:3b:a3:04:aa:
d3:a4:70:68:66:78:e5:ac:00:66:fe:85:00:2a:78:
ff:51:0a:da:84:f8:34:9b:11:c8:dc:c0:c0:dc:09:
21:86:06:dc:ae:09:c4:e2:98:a7:1c:df:e8:be:e5:
43:6e:83:2a:dc:9a:f7:33:79:43:8a:db:02:bb:ab:
ea:1b:73:2b:82:24:12:5d:d8:4c:18:66:38:8f:f0:
fa:5d:f7:d4:3d:02:c7:58:dc:9c:5c:de:de:d7:6c:
12:57:9f:a2:63:67:2c:b1:86:0d:54:a7:23:08:53:
ec:13:64:6a:5e:c0:f4:50:8e:3f:55:c3:98:f9:d7:
75:7a:48:c4:52:14:bd:29:24:86:4d:6e:f7:54:b6:
c0:48:33:32:b1:41:a2:d6:bc:6d:2f:60:4c:73:ce:
f2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9A:60:1B:77:EF:1A:26:9B:DC:03:31:0C:41:5F:17:FF:47:0A:03
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:07:8e:c2:3f:d3:10:f8:fa:ac:1e:54:df:e2:3e:67:d1:df:
bc:19:d0:52:f3:47:2d:cb:4f:25:73:3c:9b:d0:2b:3d:d4:eb:
84:34:f9:7b:73:9d:5e:3e:54:5e:14:28:9d:c0:13:c5:73:d1:
68:2c:9f:b7:cc:46:9d:0e:9b:df:42:f0:49:f1:bd:e2:a1:b5:
ef:22:f0:fb:df:18:71:68:e5:fe:b5:91:dd:a5:27:1a:51:06:
a5:8d:4b:de:a2:76:b2:47:48:68:0d:df:e3:03:9c:fa:59:b9:
62:6d:0e:98:d6:15:57:d3:f3:1b:f5:31:35:73:3f:d2:bf:3c:
50:ae:bf:f5:3b:7b:c4:57:e9:1b:46:64:a2:e7:6e:89:5e:fa:
3b:ba:64:32:30:d9:b1:32:ab:80:59:97:8d:a0:93:2c:30:8c:
ba:de:02:31:cd:59:87:e6:e7:9c:5e:8d:39:02:ca:ec:a0:32:
14:a8:7c:00:e7:e8:5c:0a:d2:c9:98:1f:00:80:9b:36:f7:29:
55:1c:ac:aa:88:41:8c:25:12:e5:b3:70:60:1e:36:df:6b:9c:
7e:51:25:be:45:eb:b4:4f:e9:0f:2e:35:1b:5b:f5:0b:a5:96:
46:51:07:9f:64:aa:96:34:4b:3c:91:d4:6b:9b:1c:68:5a:6f:
e9:c4:e6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:12:31 2026 by rpki-client