Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: FO2ZoYLfZURJADHPkQk7AigFa5TbFN1CAkQ4DQOGw/8=
Subject key identifier: C2:D7:3E:B6:1D:DD:B6:E9:C4:36:1B:7E:2B:1B:C7:1A:6F:00:66:DF
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 019D992B1AF3523F31195781FE1E1C352E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:00:32 +0000
Manifest this update: Fri 17 Apr 2026 02:00:32 +0000
Manifest next update: Sat 18 Apr 2026 02:00:32 +0000
Files and hashes: 1: E8tmA0INxy22SoM9WvAlCkcup0w.roa (hash: AKi53HmlwOtf4zu9MkVwsUBo5imAVEvf0SU5LXyt7lc=)
2: SVq7BlyNQkLWpDpUq5tVEQnjeHA.roa (hash: gor3itqwm2WwxifsDiiJPi35aYFb4fu1rJxZVzNphD8=)
3: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: OAaO6EdsRIzsUs+zpWP1TsVH5F5pXVERTg9RBGR7aAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:1a:f3:52:3f:31:19:57:81:fe:1e:1c:35:2e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Apr 17 02:00:32 2026 GMT
Not After : Apr 18 02:00:32 2026 GMT
Subject: CN=c2d73eb61dddb6e9c4361b7e2b1bc71a6f0066df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:86:a8:e1:3b:fe:af:82:42:79:7c:e7:87:
aa:f5:4f:ed:af:ed:fd:04:08:1f:9d:c8:c8:ad:cc:
8b:f7:d9:43:96:cb:6e:67:fd:1e:57:28:b2:46:78:
c9:27:bf:a9:31:60:1a:50:15:16:a5:45:9e:1d:49:
7d:f1:84:21:6b:90:98:5c:73:f4:72:13:49:d2:74:
f4:54:b2:5b:e8:bd:22:2c:ee:a3:9f:ad:3d:e7:3f:
12:e8:e9:ed:3a:7b:b7:94:67:48:10:4f:0f:54:87:
ad:7b:af:da:a8:04:a3:04:de:1a:6b:1a:3e:7c:77:
2c:1f:35:a2:97:47:da:c7:87:75:4b:38:5b:fe:95:
69:ad:79:19:8a:0e:2b:a7:4a:61:48:1c:9a:65:d7:
65:53:2a:d4:18:f8:3f:f8:be:e7:43:24:b4:61:03:
13:f6:62:69:74:94:18:17:67:ae:ed:c0:db:72:e1:
9e:36:a0:55:8d:5d:87:a6:88:73:c0:75:4d:cc:f0:
d9:cf:70:b0:96:f6:5b:f2:51:67:56:01:8e:99:dd:
c7:d6:49:aa:c8:62:5f:e1:dd:5e:7f:65:57:1f:55:
fe:7a:12:3a:8a:59:bc:f5:ca:fc:8d:c8:a5:6d:f2:
23:1e:c9:4d:a9:43:00:2b:55:66:2d:42:90:4d:5a:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D7:3E:B6:1D:DD:B6:E9:C4:36:1B:7E:2B:1B:C7:1A:6F:00:66:DF
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:34:3d:32:6c:1a:ce:f3:7e:ea:51:16:4c:f8:e5:9d:85:1c:
ce:0f:df:41:e2:f0:04:28:e9:08:a7:80:54:5a:36:d7:3b:6d:
70:c8:0d:cf:30:1c:fd:94:34:d5:26:2f:d1:63:fb:91:ba:38:
90:61:3d:49:ac:4d:c1:7c:97:d2:ea:d4:f5:b4:a2:69:16:53:
8b:75:46:f6:6e:1c:42:88:77:cf:89:c9:6c:91:6b:53:3f:f2:
84:98:1e:ea:ee:90:ee:d4:b9:76:5c:bd:27:29:85:e4:67:b4:
67:e7:8c:ef:21:98:d8:cd:b6:df:2d:28:c8:f6:44:56:8a:1b:
c1:0d:ce:05:65:a3:7c:a8:c5:63:7f:45:01:6a:5b:28:88:19:
4c:64:cc:7f:5d:73:ea:bf:c2:fb:8a:14:40:06:21:4b:32:01:
2d:9b:85:0c:ee:9f:be:61:31:72:a7:9c:da:43:18:c2:0f:61:
4d:f0:01:d2:01:ad:02:af:ad:da:2f:9e:bc:c9:23:d5:85:99:
cc:df:24:cb:2d:fe:0f:01:16:41:03:4a:29:25:e9:24:04:38:
0f:c6:8e:44:79:79:e9:f6:cb:bd:c1:5e:97:ff:25:46:b9:a4:
37:ce:d2:d5:9a:ef:88:e4:e7:4a:bc:82:3f:a6:fd:51:96:d7:
6a:30:b8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:00:59 2026 by rpki-client