Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: 0pcKAInZSL1OxsiSCnykmhWg2+EjGHAYc8bj27ZMS4o=
Subject key identifier: 38:F2:93:81:48:ED:5A:B6:80:7B:84:3A:95:E0:F9:FB:38:51:F1:B7
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 019EFA944197CBADD56A3E922EC0C43BBEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 197A
Signing time: Wed 24 Jun 2026 17:01:20 +0000
Manifest this update: Wed 24 Jun 2026 17:01:20 +0000
Manifest next update: Thu 25 Jun 2026 17:01:20 +0000
Files and hashes: 1: E8tmA0INxy22SoM9WvAlCkcup0w.roa (hash: AKi53HmlwOtf4zu9MkVwsUBo5imAVEvf0SU5LXyt7lc=)
2: SVq7BlyNQkLWpDpUq5tVEQnjeHA.roa (hash: gor3itqwm2WwxifsDiiJPi35aYFb4fu1rJxZVzNphD8=)
3: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: OAt+Vxc3mvWvyTRw9By10CGOOFwwN/kpedyCuMjKALM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:94:41:97:cb:ad:d5:6a:3e:92:2e:c0:c4:3b:be:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Jun 24 17:01:20 2026 GMT
Not After : Jun 25 17:01:20 2026 GMT
Subject: CN=38f2938148ed5ab6807b843a95e0f9fb3851f1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0b:ab:e5:67:fc:c7:85:9b:27:98:70:1d:7a:
14:8f:cd:a1:e5:15:70:88:af:0f:84:c3:80:81:16:
6c:8f:b8:44:4c:e7:a8:ae:19:af:8d:7d:34:c5:a8:
3b:bf:e6:20:09:7c:92:43:73:a2:90:f5:f0:84:ae:
da:c9:44:1a:0e:c4:dd:62:60:e1:81:93:42:cf:4f:
60:9d:72:58:38:97:14:f8:ec:5a:9d:8d:7e:b4:73:
93:f4:2f:03:cc:b6:e5:7b:12:96:fd:29:0d:5d:5c:
93:cb:55:97:af:9e:bf:4e:8d:82:73:e1:d4:a0:4e:
30:81:e6:1b:1f:91:ca:84:e5:2d:c4:ed:e7:60:27:
f4:8c:8c:1b:cc:ec:aa:73:1f:20:0a:30:56:f3:47:
ce:8f:25:62:73:f5:92:ae:ec:73:fd:6c:f6:7a:d7:
a9:b2:c8:ae:04:26:3b:36:80:fb:38:d8:d5:db:7c:
bf:6a:45:d4:c3:f7:8d:55:bd:22:e8:8f:62:23:cd:
74:1c:97:57:94:33:54:40:80:a5:7b:d4:10:33:64:
65:5d:64:fd:66:0c:82:7a:1c:93:cc:40:f2:51:1b:
32:33:f7:aa:fc:16:6f:a2:92:a9:7e:b3:0a:2c:06:
26:17:ff:a2:26:e9:7f:97:30:d0:16:15:99:34:66:
54:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F2:93:81:48:ED:5A:B6:80:7B:84:3A:95:E0:F9:FB:38:51:F1:B7
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ae:cf:0a:ae:3c:a7:66:aa:a5:bc:bb:d5:e7:ee:75:bc:28:
cd:2a:7f:d2:fa:81:63:66:4b:5d:0e:0f:0a:bc:39:fa:ca:cf:
40:a0:d6:6e:32:67:da:cb:ec:f4:12:09:3d:e3:da:f8:01:b8:
0c:6f:7d:69:d7:b4:1d:c2:ca:06:3f:1d:c3:9d:68:34:2b:8d:
bd:73:03:3b:a9:52:f4:83:b8:7a:bc:cc:8d:4a:ac:8f:86:5b:
49:64:43:7c:7e:5d:68:d0:6d:23:d8:05:47:c6:ab:5c:4c:50:
d5:b2:09:6f:ad:81:94:20:5c:66:ce:5b:bd:67:67:94:84:8b:
11:b0:1e:c7:33:2d:00:33:63:42:74:e5:30:7f:56:b9:c2:1d:
37:35:da:f4:44:53:9c:b4:8d:90:65:2e:91:d8:f0:fd:70:45:
84:02:50:55:0f:df:6c:fb:e5:5f:40:8d:7c:d0:6f:86:ec:39:
e3:e3:d0:99:db:67:23:93:2a:13:7f:c9:45:23:94:9b:e8:d2:
6e:d1:e8:51:c2:0f:20:8d:38:de:60:f9:94:87:41:e3:32:ac:
65:1f:e9:e0:74:28:81:3f:ed:16:2d:e3:0f:2b:9b:80:66:09:
9c:ad:ca:12:66:e5:f9:80:92:68:f0:89:a7:40:3f:56:22:72:
b2:ba:51:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:22:02 2026 by rpki-client