Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: HbSfofVrz1FpqC96i/TZdQ7lG8W8YFFq7Im4lIkcsIM=
Subject key identifier: FD:66:F6:18:AF:E9:15:03:4E:67:D1:91:91:AC:41:49:75:1A:2E:39
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 01A0BE7930AF50022B0B608855C4AA052F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 1A64
Signing time: Sun 20 Sep 2026 11:00:08 +0000
Manifest this update: Sun 20 Sep 2026 11:00:08 +0000
Manifest next update: Mon 21 Sep 2026 11:00:08 +0000
Files and hashes: 1: E8tmA0INxy22SoM9WvAlCkcup0w.roa (hash: AKi53HmlwOtf4zu9MkVwsUBo5imAVEvf0SU5LXyt7lc=)
2: SVq7BlyNQkLWpDpUq5tVEQnjeHA.roa (hash: gor3itqwm2WwxifsDiiJPi35aYFb4fu1rJxZVzNphD8=)
3: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: xNTp0iYWdu0JeMz2jgcMP3YdTUiIKVXQJQjraTRVenk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:79:30:af:50:02:2b:0b:60:88:55:c4:aa:05:2f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Sep 20 11:00:08 2026 GMT
Not After : Sep 21 11:00:08 2026 GMT
Subject: CN=fd66f618afe915034e67d19191ac4149751a2e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:c3:b8:d4:b6:87:37:48:b2:45:e2:35:32:
45:13:ae:21:bd:4f:e3:0a:e0:6d:60:9f:fb:e1:e3:
a8:37:cd:39:a1:bb:5b:76:e9:40:8e:b2:df:63:04:
4c:64:63:1b:c9:be:50:fe:e8:72:42:80:29:20:7a:
e3:32:64:82:33:8e:0f:0b:46:c8:cb:90:1b:4f:40:
45:c1:1d:a4:33:74:ad:01:48:37:f8:91:9a:44:3f:
9c:82:bf:bb:55:3b:ca:53:d0:61:33:cc:cd:b9:98:
ec:7a:6c:e9:9d:2a:66:2d:db:c8:32:c3:99:cc:1d:
62:1e:6b:04:7c:2e:44:c3:66:15:10:9d:e2:b3:5a:
ba:18:22:86:32:77:f0:01:1b:54:e3:83:4a:ce:bf:
58:ef:62:a1:7f:fd:46:ef:97:4b:f2:d2:57:43:b1:
c7:a8:88:c4:9c:0b:77:17:70:27:e5:bc:29:7d:10:
7a:63:dc:b4:fc:57:83:8e:36:59:ad:7c:5d:de:90:
94:f2:fe:b9:f4:d9:c5:a3:a2:81:22:21:4d:77:0c:
98:c6:6b:97:c9:7b:4a:29:f3:8a:2b:dc:97:e5:9c:
ce:f0:f6:51:d8:82:ce:35:69:5e:83:95:43:56:f6:
80:df:e9:21:d9:6b:af:23:d9:01:d9:07:6a:62:6b:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:66:F6:18:AF:E9:15:03:4E:67:D1:91:91:AC:41:49:75:1A:2E:39
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:56:51:c0:f0:9c:36:7e:7b:d3:50:6f:77:44:8a:43:5f:bd:
2f:cb:0a:ff:b4:e1:0b:27:ae:5c:8e:82:5e:c7:c2:07:3c:6a:
37:28:a5:23:2f:82:ad:d2:ea:b0:c9:df:a4:2c:b9:22:82:88:
be:e7:cc:7f:9e:c9:75:0a:17:63:e8:29:b4:60:54:aa:c8:fd:
fa:52:16:ba:2a:5f:53:6e:5d:4e:e3:04:95:c8:6e:bb:41:d8:
28:d6:d1:06:8f:76:70:e8:91:fb:5c:19:31:2d:af:21:a6:0c:
24:20:3d:8b:1d:92:68:33:1f:e0:3b:70:52:6f:5e:18:27:09:
a6:ac:fc:99:d0:3c:d2:fc:9a:a3:dd:48:33:13:2a:a7:04:20:
38:10:76:54:7e:4c:55:77:2d:23:ed:40:b0:21:68:cc:42:4b:
0a:bf:90:0d:e7:63:39:de:c1:f2:50:9f:11:61:01:35:a4:29:
cf:18:04:36:4e:0c:14:3d:1c:fc:d8:1d:3d:f1:8d:93:d7:cc:
38:ab:e0:aa:24:70:5d:ec:04:9c:12:cd:87:6c:63:06:64:33:
fc:f5:e6:5a:43:f6:bf:5d:74:01:45:21:24:d6:dc:2b:ee:c9:
4b:ee:11:00:22:22:37:d0:52:2b:15:ea:c5:88:45:d6:c5:41:
69:66:87:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:26:40 2026 by rpki-client