Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: ODQ54opVToVq2kALdHscPd5e/mruKJTiC8jhiP2H2jo=
Subject key identifier: CD:0E:2D:6F:A0:5B:80:75:A0:5A:4B:06:30:1F:13:EF:BF:00:47:E1
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 019DEE253E97570EB9392D46818F181B02C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 18EF
Signing time: Sun 03 May 2026 14:01:51 +0000
Manifest this update: Sun 03 May 2026 14:01:51 +0000
Manifest next update: Mon 04 May 2026 14:01:51 +0000
Files and hashes: 1: E8tmA0INxy22SoM9WvAlCkcup0w.roa (hash: AKi53HmlwOtf4zu9MkVwsUBo5imAVEvf0SU5LXyt7lc=)
2: SVq7BlyNQkLWpDpUq5tVEQnjeHA.roa (hash: gor3itqwm2WwxifsDiiJPi35aYFb4fu1rJxZVzNphD8=)
3: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: EYlEfYbzgRtPawsG8QS4nxd6TJaKMwy+WuSWCKs0yc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ee:25:3e:97:57:0e:b9:39:2d:46:81:8f:18:1b:02:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: May 3 14:01:51 2026 GMT
Not After : May 4 14:01:51 2026 GMT
Subject: CN=cd0e2d6fa05b8075a05a4b06301f13efbf0047e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:28:9f:42:28:ed:b0:fe:72:d7:41:a2:95:
a5:01:2d:55:7c:1a:48:95:b8:b1:df:dd:31:f7:89:
5d:7e:ed:20:01:dd:ec:82:14:90:17:b6:e9:fb:a5:
55:96:a2:f2:03:7f:de:3a:6f:ea:dd:9f:59:92:cd:
53:33:cc:27:97:42:d4:0b:23:f5:f6:c8:f3:db:16:
ed:ba:41:69:db:4a:05:ce:1a:37:43:b7:e8:1b:06:
2f:af:fe:3d:56:b5:e9:41:a7:0f:0a:03:1c:12:69:
33:3f:fc:17:cd:5f:19:98:93:b8:1e:46:be:77:2f:
ac:b4:dc:5d:c7:69:bf:a4:4c:dc:19:3c:7b:45:cd:
3e:76:35:0a:0b:63:22:b7:ce:c0:5e:41:ba:40:9d:
5d:84:50:a2:2e:55:3a:82:09:61:22:a8:b5:f3:41:
66:5c:01:9e:e8:89:86:20:38:51:c2:a6:ed:bb:ae:
70:d6:e6:cc:e8:34:f1:ab:2a:e5:f0:30:b8:59:11:
14:ae:52:d2:3d:2e:99:f6:ff:cd:31:a4:75:fa:f2:
d1:90:3b:35:2a:42:99:62:23:ec:93:77:16:61:e0:
07:25:62:e2:79:5b:73:d3:82:99:c6:3a:45:75:2d:
51:5f:7d:98:a8:57:84:a8:de:f2:61:08:2d:6d:cd:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0E:2D:6F:A0:5B:80:75:A0:5A:4B:06:30:1F:13:EF:BF:00:47:E1
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:be:f6:cc:e5:b1:c6:2b:bb:73:1a:2c:df:5c:a5:15:d2:0f:
9d:5c:66:17:d1:c1:b2:3e:5c:90:a4:e1:c9:09:f1:6b:b5:36:
8b:f8:83:41:40:6a:3d:68:90:8d:22:ac:f0:55:12:40:e5:b4:
7c:e9:c6:3a:52:00:d9:b0:69:36:a9:3a:d7:b2:8d:4c:86:ad:
4f:83:9a:8f:19:e4:be:44:19:fc:f6:05:7a:3f:f1:a8:e6:91:
1d:f7:7b:66:bf:78:26:44:7e:c5:e6:f9:31:d3:0e:12:17:c0:
72:9e:26:5e:33:b6:b9:ff:32:52:fe:76:15:eb:e2:1b:b9:5b:
b2:49:fc:d9:bc:69:a8:70:f4:00:ac:a9:43:76:71:fe:5f:e3:
1e:29:d9:de:41:35:55:89:e0:e9:46:cf:dc:3c:c5:25:85:87:
b8:a6:53:4e:e3:3a:62:a6:af:b6:07:20:4c:c4:e8:ef:44:37:
25:6c:60:a5:a2:8d:98:a0:3f:a5:ec:b9:f7:8e:45:f5:2f:ce:
d0:05:1e:5f:e5:bd:7a:81:27:32:c1:66:62:eb:74:59:4a:ca:
c4:96:19:91:55:9d:41:c0:73:3c:ac:d3:d7:8b:e3:01:8b:c9:
83:97:1b:51:4b:72:62:e4:78:10:9b:91:18:70:85:ca:57:3b:
40:2d:6b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:35:06 2026 by rpki-client