Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: lNIfPxW4KyMHF8HkMac2z3xbkWUKXwImq9NVFyYZ7F8=
Subject key identifier: 93:A9:52:F6:68:BD:47:EB:64:3D:A2:F1:BA:3F:4B:0A:CB:AB:8B:B3
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 01A0201E8DDDE0371F9B69B5D0EC0CA4C154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 1A12
Signing time: Thu 20 Aug 2026 17:01:08 +0000
Manifest this update: Thu 20 Aug 2026 17:01:08 +0000
Manifest next update: Fri 21 Aug 2026 17:01:08 +0000
Files and hashes: 1: E8tmA0INxy22SoM9WvAlCkcup0w.roa (hash: AKi53HmlwOtf4zu9MkVwsUBo5imAVEvf0SU5LXyt7lc=)
2: SVq7BlyNQkLWpDpUq5tVEQnjeHA.roa (hash: gor3itqwm2WwxifsDiiJPi35aYFb4fu1rJxZVzNphD8=)
3: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: O3IBjRlCm/jh5A65eYxUe5R7cmxmUslL1kztanAEBqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:1e:8d:dd:e0:37:1f:9b:69:b5:d0:ec:0c:a4:c1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Aug 20 17:01:08 2026 GMT
Not After : Aug 21 17:01:08 2026 GMT
Subject: CN=93a952f668bd47eb643da2f1ba3f4b0acbab8bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:77:75:71:b7:68:5f:7e:90:d9:2d:49:99:bf:
dc:e0:c4:9d:de:18:c5:b0:c0:17:08:74:bb:9a:c2:
0c:a0:a6:3e:1c:54:67:1d:32:1f:31:1c:50:50:43:
23:b6:83:2f:fc:bc:8a:45:c9:6f:eb:58:ed:3d:25:
27:30:6b:56:40:97:d7:94:37:e5:a2:7e:72:55:fe:
5a:a5:9f:4d:7e:b2:0c:73:24:32:70:71:7a:32:4e:
14:82:7f:51:33:14:83:1f:4c:a7:83:ed:aa:9f:c6:
7c:c4:0c:f7:76:6c:09:c0:6c:15:dd:9f:6e:e2:4c:
86:d3:19:6c:ee:c7:a3:29:59:47:12:0d:46:0a:04:
c2:45:b0:ea:af:c0:7b:2f:4d:55:91:4e:b9:d9:67:
90:3a:ff:6d:a5:85:dd:90:b3:f8:c6:8b:2f:08:80:
6c:ea:44:6e:93:bc:47:cb:43:d7:b3:fa:19:0e:98:
01:08:a1:28:33:6b:f9:14:62:f6:4d:fc:c8:e9:58:
62:e2:96:f0:7b:98:4b:72:64:25:00:36:b5:6a:c6:
99:c7:79:ed:d5:52:e2:07:1a:ed:68:ea:37:a3:5f:
76:e9:a2:69:13:9d:75:f0:d8:cb:d3:5f:d5:6f:8e:
4f:7b:2c:a3:8e:0b:62:f8:18:50:63:26:19:f6:5f:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A9:52:F6:68:BD:47:EB:64:3D:A2:F1:BA:3F:4B:0A:CB:AB:8B:B3
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:05:dd:69:b5:c9:6b:4e:ad:86:9f:ed:72:30:02:4e:32:80:
b1:14:fe:31:12:8f:06:83:51:be:cb:12:2f:cb:2c:65:41:fc:
cb:03:f4:4f:c6:f9:f1:f7:08:29:d6:fb:94:9c:2f:3f:2d:17:
99:1a:98:47:17:0f:40:69:31:91:fb:69:8a:a1:fd:be:c7:f9:
7e:58:06:20:56:d8:ae:81:99:57:73:33:d9:08:74:45:90:57:
61:57:aa:28:5f:c0:c3:a6:94:28:52:b9:56:cc:65:e9:58:3d:
2f:43:93:84:a1:af:52:56:99:33:21:b0:ee:e4:3c:7e:ba:b1:
d7:35:7e:db:9e:61:dd:45:3f:68:f4:c4:d5:d0:3b:95:d4:39:
e8:25:1d:42:5d:e4:9b:c0:73:f4:f8:67:08:6a:27:a4:8a:9f:
28:c8:1f:73:fa:2d:94:bd:d3:80:41:f4:ff:c4:45:37:6a:a6:
14:c1:9b:ab:7b:ba:c5:44:7a:7c:f7:e5:4f:1b:45:3b:74:f8:
e7:1b:83:1a:d2:ea:b1:4a:70:95:67:2f:12:df:28:34:37:8f:
0e:72:54:1d:b6:9c:e1:7d:67:28:6a:9f:22:d3:65:a4:19:a5:
b0:bf:f8:c7:ce:9b:d4:aa:06:d3:06:80:0f:e2:b0:db:c2:75:
72:d0:d4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:20 2026 by rpki-client