Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: o7kMWQpBPGDUjIdkuqsNXyd5rQSX+zjhx0yH/YgjjxA=
Subject key identifier: C4:F8:AE:D1:08:4F:93:69:CB:AC:DE:D5:30:F8:07:B0:DB:A3:5C:D8
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 01A113735EE3605EC46F2B1E9952A0CF6307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 1A90
Signing time: Tue 06 Oct 2026 23:01:30 +0000
Manifest this update: Tue 06 Oct 2026 23:01:30 +0000
Manifest next update: Wed 07 Oct 2026 23:01:30 +0000
Files and hashes: 1: E8tmA0INxy22SoM9WvAlCkcup0w.roa (hash: AKi53HmlwOtf4zu9MkVwsUBo5imAVEvf0SU5LXyt7lc=)
2: SVq7BlyNQkLWpDpUq5tVEQnjeHA.roa (hash: gor3itqwm2WwxifsDiiJPi35aYFb4fu1rJxZVzNphD8=)
3: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: 7gW0HHFkfwwEv86AbgjZPEHIKlT+Pekbh7kisw8g+j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:73:5e:e3:60:5e:c4:6f:2b:1e:99:52:a0:cf:63:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Oct 6 23:01:30 2026 GMT
Not After : Oct 7 23:01:30 2026 GMT
Subject: CN=c4f8aed1084f9369cbacded530f807b0dba35cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9d:75:de:21:52:1b:95:cf:17:1a:0c:5e:8d:
c3:72:b9:31:b4:a1:cd:3f:c0:c7:03:0a:4f:2f:5e:
73:3c:35:a3:9c:bb:78:79:74:b0:0d:ea:22:d8:c7:
c0:a8:cb:dc:ba:95:8e:c3:b7:15:9a:a9:07:56:97:
9c:88:f1:96:d2:6f:cf:55:d6:52:13:dd:0a:57:3b:
d4:cb:e3:72:79:09:cc:af:28:7e:f1:3f:9e:d2:04:
0d:47:1a:28:7a:c3:ba:0b:98:ed:8b:44:a8:28:28:
e9:38:03:23:72:dd:3e:6d:0f:e3:48:b8:96:e5:ed:
89:62:f9:36:67:0d:82:d9:12:29:ce:6f:16:7a:55:
4e:69:fa:ee:b4:9c:37:26:50:24:30:42:2b:b3:31:
8e:70:f3:1f:44:e0:b0:ee:14:58:47:d5:a2:ed:8a:
93:c9:90:06:16:12:e4:e9:7c:f4:4d:6b:6e:e0:5f:
6f:84:af:3f:64:35:23:78:68:05:2b:64:95:df:ca:
0b:ea:6f:0a:6c:5a:21:18:28:57:aa:b3:52:f2:58:
fc:2e:6f:3a:22:f8:53:ba:00:64:eb:65:1a:a5:e4:
c9:8b:df:e3:b6:32:c2:ca:72:98:37:02:9b:36:af:
ee:e0:69:48:75:e9:fc:e2:28:40:49:98:1f:5f:35:
66:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F8:AE:D1:08:4F:93:69:CB:AC:DE:D5:30:F8:07:B0:DB:A3:5C:D8
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f4:a7:85:1c:af:b9:03:8c:48:81:67:87:d5:c6:8f:66:6a:
17:36:a0:de:8d:3e:18:ca:06:4e:1b:28:31:93:fa:71:ad:10:
e5:b9:c8:4c:fb:e8:a6:18:28:78:0d:fa:6c:a9:94:0b:d1:9a:
ef:cc:e5:ba:dc:f7:ee:db:c3:e1:8e:c7:42:b6:fe:45:58:6c:
41:f7:15:21:c7:30:75:12:44:aa:86:2e:15:09:85:ae:0b:d7:
b7:2e:ef:6b:7a:a2:21:16:a6:0f:36:95:c2:8a:ce:89:2a:76:
74:8c:cf:19:07:8f:11:34:06:48:54:65:62:43:cc:fd:98:5a:
44:53:71:3a:95:45:e9:bd:ce:ab:a1:a5:a5:45:a9:6a:d2:36:
ba:9c:85:72:01:df:27:81:08:cc:23:de:62:c6:45:ba:4e:a3:
1d:8b:4f:6e:a7:fd:ee:8e:76:81:a2:78:8d:57:ed:11:52:2f:
77:60:f5:11:34:b7:19:a6:8a:a3:7c:ba:2a:d0:64:dc:ac:5a:
7d:9b:f8:a9:da:e6:8c:a2:e6:6c:d2:6e:7a:c0:34:a1:75:1c:
14:bd:bb:31:d7:54:eb:6f:dd:ed:92:31:53:ac:b1:bc:5d:36:
4a:b5:3b:82:e2:b0:49:3b:91:f2:fb:a7:82:f7:16:2f:2c:fa:
87:49:51:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:27:12 2026 by rpki-client