Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: ltXo40x3o34aRei1S4o9ywQIw0Sg7n5EFGBiVBKPqBw=
Subject key identifier: A2:F2:83:1D:E0:52:E1:DB:40:E0:33:AF:98:9B:A7:44:E5:02:F0:17
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 019D0477DD092377496AA7250334B94C7574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 1876
Signing time: Thu 19 Mar 2026 05:00:57 +0000
Manifest this update: Thu 19 Mar 2026 05:00:57 +0000
Manifest next update: Fri 20 Mar 2026 05:00:57 +0000
Files and hashes: 1: E8tmA0INxy22SoM9WvAlCkcup0w.roa (hash: AKi53HmlwOtf4zu9MkVwsUBo5imAVEvf0SU5LXyt7lc=)
2: SVq7BlyNQkLWpDpUq5tVEQnjeHA.roa (hash: gor3itqwm2WwxifsDiiJPi35aYFb4fu1rJxZVzNphD8=)
3: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: ZPXYc4ZK4/vCJv+9yWYTLWBiiriGhJhkYN6RyVj3N7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:77:dd:09:23:77:49:6a:a7:25:03:34:b9:4c:75:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Mar 19 05:00:57 2026 GMT
Not After : Mar 20 05:00:57 2026 GMT
Subject: CN=a2f2831de052e1db40e033af989ba744e502f017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:3e:8b:b4:25:e3:6d:8f:2e:9b:55:a5:20:
94:c2:cd:7a:0f:a2:af:d6:12:3f:07:6c:69:e6:d3:
b0:af:c5:e5:1d:b0:64:82:a9:b3:cc:8d:c1:80:11:
bf:7c:5d:fb:b9:dc:8d:ea:f8:bc:12:b1:13:82:22:
72:1f:e1:e5:ef:ee:8a:58:46:64:19:af:3f:28:a0:
1d:92:83:ae:e8:d5:fa:51:da:c1:45:86:12:d5:b9:
4b:4d:48:a2:ef:27:85:9b:c4:e7:46:82:28:67:65:
20:b7:6e:82:62:dd:6b:31:45:8d:40:c5:30:fd:5d:
d5:c6:8e:33:d3:bd:af:a4:9c:cb:d0:f3:70:e8:96:
19:82:f7:26:b0:6a:15:ed:18:09:8f:11:d3:bc:7b:
2d:50:12:9c:2d:b0:f1:2e:9c:7a:ac:51:1b:ed:59:
bb:e9:42:ae:33:c0:c3:e4:96:80:8a:ea:a1:98:21:
1e:78:56:bd:52:70:2f:46:64:88:a3:92:65:84:ff:
69:2d:cd:f4:0b:58:d9:f8:cc:a4:79:60:6b:85:38:
55:28:2e:43:96:c7:2a:81:09:45:0b:91:98:bb:9f:
04:84:79:00:bb:54:00:67:3e:82:ce:a6:7e:00:6c:
93:ab:4a:a4:29:9f:02:83:60:e6:e5:ec:f5:b3:74:
dd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F2:83:1D:E0:52:E1:DB:40:E0:33:AF:98:9B:A7:44:E5:02:F0:17
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e7:9f:fc:13:80:84:07:d5:55:1e:1f:7c:26:54:17:07:bf:
34:9f:3d:56:87:cd:43:cb:5d:7a:5d:fd:66:1b:a2:cb:31:c1:
9d:c7:4d:6e:5b:63:01:c9:13:2b:59:5a:fe:b5:43:cd:70:b3:
e7:b2:f2:90:83:7a:b6:8b:30:88:31:3f:a8:6e:cb:50:a2:93:
3b:53:41:78:aa:6a:9d:c2:c5:a7:56:fa:d1:82:6d:bd:11:63:
77:51:ba:0f:5c:1d:9d:0c:83:5f:c3:f2:84:57:85:20:12:a7:
7b:e7:35:bb:05:44:88:dc:b9:ba:19:d9:2d:a5:ef:66:df:6e:
76:dc:ee:2d:df:6d:f1:94:1d:9e:dc:6b:d9:4f:9b:38:ea:b7:
7e:2d:b0:7f:d3:13:52:43:10:da:77:31:be:db:1c:77:2c:7c:
c6:02:c4:8c:51:0e:d6:11:f2:77:25:07:96:cd:05:f5:1d:25:
e5:9c:73:df:8b:83:9d:a3:d8:0f:75:24:ec:41:a7:61:8d:4a:
41:86:c4:dc:55:fe:21:d6:a9:11:71:27:f5:7d:e8:ac:c9:f3:
a4:e8:b4:e2:9d:37:49:45:51:2d:06:14:ef:e9:aa:8d:21:63:
94:07:31:c5:50:c7:83:c9:05:5b:24:81:2e:68:8c:fb:d9:d6:
85:1a:b0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:04:27 2026 by rpki-client