Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: e5j6sxkO/vZ5LM/nqf8/oHVPHhhj9UWJCcnraHnADLA=
Subject key identifier: 57:40:0F:BD:78:A7:F6:DA:77:40:1F:EC:AD:D2:A1:73:DC:49:6F:88
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 019EBEB6494517C5E102AE0410E7ED40ADD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 02:01:17 +0000
Manifest this update: Sat 13 Jun 2026 02:01:17 +0000
Manifest next update: Sun 14 Jun 2026 02:01:17 +0000
Files and hashes: 1: E8tmA0INxy22SoM9WvAlCkcup0w.roa (hash: AKi53HmlwOtf4zu9MkVwsUBo5imAVEvf0SU5LXyt7lc=)
2: SVq7BlyNQkLWpDpUq5tVEQnjeHA.roa (hash: gor3itqwm2WwxifsDiiJPi35aYFb4fu1rJxZVzNphD8=)
3: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: FIIUSy3X48khq92Ni461vr27zvycFxl5fvX4PkQY2Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:49:45:17:c5:e1:02:ae:04:10:e7:ed:40:ad:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Jun 13 02:01:17 2026 GMT
Not After : Jun 14 02:01:17 2026 GMT
Subject: CN=57400fbd78a7f6da77401fecadd2a173dc496f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:24:53:01:7d:4a:c0:07:fd:e2:31:b7:46:
57:1c:f6:8f:cc:38:df:b6:a3:b3:90:ed:b0:b6:57:
14:2d:b4:b1:c1:92:af:fb:0d:f2:6a:70:57:99:86:
ee:36:ea:7a:58:98:bc:a6:66:e7:32:4e:e7:7f:1b:
58:b2:80:e5:c3:ff:7a:c3:a5:22:3c:83:85:32:a2:
9a:78:b2:4c:0f:de:35:11:14:e1:52:d5:1d:79:22:
80:7a:e1:65:9a:b8:47:85:44:66:36:f5:9c:5b:23:
cb:69:81:94:23:3d:4e:d7:4f:86:1e:ab:47:38:4e:
fb:ee:7d:69:18:fa:e8:bd:6b:a7:dd:6c:5b:1a:b5:
5c:58:eb:ca:6d:81:c0:d6:de:fe:4c:ad:51:ab:51:
c3:c5:6a:81:f9:66:ac:b9:11:e9:4e:0c:84:c6:b0:
69:63:09:56:01:22:30:75:5f:df:40:d2:cd:8e:77:
1a:c3:27:b5:ce:dd:28:3e:fe:2a:4b:9f:11:61:6e:
52:63:ba:d1:1f:89:ca:02:b5:7b:dc:bd:b7:43:e4:
b8:56:82:81:04:7a:bd:39:24:bb:a9:f1:bd:a9:09:
79:b2:82:41:49:fd:d1:8c:47:f8:72:20:c8:d9:b1:
6b:14:80:b1:2d:d0:06:1f:29:31:ab:65:87:b2:8d:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:40:0F:BD:78:A7:F6:DA:77:40:1F:EC:AD:D2:A1:73:DC:49:6F:88
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e6:0c:d1:23:52:8e:ea:89:28:eb:38:ea:bf:99:88:f6:5b:
b7:98:b2:a9:6a:60:9c:8e:b0:21:c4:98:f6:d7:d6:49:15:46:
03:34:4d:7b:d3:99:45:de:8f:a8:ab:3b:ee:fd:7b:25:0b:00:
d5:e0:d4:b2:a8:c1:eb:7a:6e:3f:02:a5:46:2c:9e:23:10:7e:
11:9a:3a:c4:22:aa:90:b7:12:f0:27:7e:e7:29:fc:3f:14:da:
38:f3:ce:1f:2e:c8:62:eb:75:0c:94:5a:13:4a:dd:b6:12:96:
8d:f2:d8:6e:6e:33:62:92:38:68:e2:de:4c:eb:1e:5e:7e:cb:
99:93:ff:c4:d5:43:ee:fe:75:88:ed:23:e3:1a:39:32:ff:e5:
96:53:17:d3:67:46:ac:df:0f:e5:4b:97:af:24:f0:f7:ca:10:
a2:ed:be:4e:d0:ed:4c:30:98:29:7d:6f:be:0c:3d:b5:09:7c:
5f:13:c6:9d:33:ed:f8:4c:01:bc:e1:31:0b:bc:a4:33:9e:de:
ce:aa:eb:8f:3a:2a:51:52:0c:b8:f4:ed:31:5b:04:5e:c6:64:
7f:08:89:95:0a:1c:01:5b:7e:8a:1f:5f:71:0f:39:d8:dd:a1:
49:e2:36:4c:a8:9b:e3:5f:13:6c:c0:cf:b3:c5:8b:fe:f7:7c:
89:7d:6c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:23:57 2026 by rpki-client