Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: dCpJjhdeHNi4CB8oqeHqOxLvSOLMjKwD6PDaeZU5M/w=
Subject key identifier: BA:65:51:54:33:65:11:47:C7:7D:F2:2A:B1:A5:F8:94:A6:DC:86:BF
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 019FAA50D7B26AD9018CA259001A7C5194FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 20:00:52 +0000
Manifest this update: Tue 28 Jul 2026 20:00:52 +0000
Manifest next update: Wed 29 Jul 2026 20:00:52 +0000
Files and hashes: 1: E8tmA0INxy22SoM9WvAlCkcup0w.roa (hash: AKi53HmlwOtf4zu9MkVwsUBo5imAVEvf0SU5LXyt7lc=)
2: SVq7BlyNQkLWpDpUq5tVEQnjeHA.roa (hash: gor3itqwm2WwxifsDiiJPi35aYFb4fu1rJxZVzNphD8=)
3: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: VFJ3B48YE/T8YEeRLtZxm4n9OtPPnxnek+YsGh3TDLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:d7:b2:6a:d9:01:8c:a2:59:00:1a:7c:51:94:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Jul 28 20:00:52 2026 GMT
Not After : Jul 29 20:00:52 2026 GMT
Subject: CN=ba65515433651147c77df22ab1a5f894a6dc86bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:ad:52:4e:1b:f1:41:aa:13:e7:18:07:6f:
72:7b:f0:cc:99:11:9d:b4:cd:1e:b4:09:8e:50:55:
85:d5:61:53:b6:97:20:ee:3c:f7:23:4b:59:51:33:
83:df:99:c8:55:93:bb:6f:fa:70:62:2a:7f:bc:9e:
44:ac:47:61:33:c9:d7:78:d5:ce:b0:79:d8:62:5c:
64:29:e8:59:02:be:4d:a5:e3:b0:98:93:94:44:85:
64:91:89:c3:a4:1d:d7:96:37:dd:fd:ae:7d:44:4f:
2e:8f:26:bc:74:97:76:c9:7c:21:66:86:e2:17:01:
59:53:18:aa:0d:a6:6c:41:8e:a6:3a:2b:da:8e:f1:
a9:8d:47:67:71:f9:6e:57:2a:b4:33:d5:48:db:82:
af:cd:63:ac:30:3d:1b:da:57:c9:76:5a:94:ab:f9:
4b:71:5e:a0:0b:a8:ec:03:e5:7e:a1:13:e4:21:ab:
c3:ab:0d:8b:b4:8d:a9:9b:c0:8e:c2:00:07:19:07:
40:df:3d:fb:6a:e5:f9:3f:31:8f:a5:ea:78:23:72:
27:4c:9c:71:b0:ae:1a:c0:a6:0e:e0:e1:45:ec:b5:
00:f5:21:56:25:d0:77:fb:b3:0c:e9:d6:75:97:5f:
94:6b:bd:83:99:cb:cb:c1:d9:1f:97:e5:76:2f:ed:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:65:51:54:33:65:11:47:C7:7D:F2:2A:B1:A5:F8:94:A6:DC:86:BF
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:78:b9:b2:e0:d7:22:41:85:a1:2c:e8:32:95:46:ad:75:e3:
5e:ea:fe:11:e8:67:a2:7f:5e:f1:34:d5:dc:08:0e:16:f0:98:
4f:43:14:71:49:df:5e:44:85:89:99:2e:1a:d3:84:c5:86:90:
d6:aa:71:2d:08:08:6f:93:87:86:f3:a0:c4:aa:b5:02:df:cb:
37:7e:5c:0b:a0:eb:b6:c2:ea:61:f9:b7:ac:0a:0a:21:d4:d7:
e7:57:97:f4:e0:b2:8f:a9:ee:8d:79:3b:0e:5c:53:35:3f:1a:
7a:83:18:d3:88:8a:5b:77:47:a6:cc:22:27:d8:4b:12:8c:2e:
8b:fd:11:5c:5f:ec:74:b9:22:3d:fd:a8:16:23:73:f8:e0:60:
d6:0a:ac:31:59:2f:50:62:20:84:0e:33:42:30:18:11:d7:39:
a1:dc:68:6f:3a:4e:43:d0:1b:ae:ed:ad:de:06:4d:09:ef:d7:
94:91:9f:0d:cb:78:2a:5c:7a:67:82:31:b6:ca:eb:7e:80:31:
d6:9c:f2:38:ad:df:74:a7:e4:19:a7:26:2a:50:6d:90:1a:29:
2c:49:e0:06:33:a9:8a:bf:02:5b:6a:a2:11:99:89:91:d8:b8:
1a:2f:69:f4:f2:7d:a9:9f:b3:1a:97:53:9e:c8:ce:96:a9:84:
1f:3f:32:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:13:07 2026 by rpki-client