Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
File: XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft (raw, json)
Hash identifier: O8atXM2QRzBAncDyY0mlH7XXG4g4hvlg9vu0S3I29KA=
Subject key identifier: 82:67:32:3C:1B:C7:CD:91:85:B7:8D:61:D0:BC:85:53:24:51:B7:7C
Authority key identifier: 5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
Certificate issuer: /CN=5d41d330dc8c7293e729451db2646383838e3f8c
Certificate serial: 019D6386698FC13D4708BD61B582DB5FEDC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
Manifest number: 97
Signing time: Mon 06 Apr 2026 16:00:46 +0000
Manifest this update: Mon 06 Apr 2026 16:00:46 +0000
Manifest next update: Tue 07 Apr 2026 16:00:46 +0000
Files and hashes: 1: PDKY0YNxgfL-wdtHC7OMqbGRy6Q.asa (hash: 4mulaDEjjaiJyNExN4M0awWM7+bcCqHjl7wFr6Imm1M=)
2: XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl (hash: CaAZTzsTqIWdJ7QCDsOwRk8HNDUNbLbLxM6RYPmGqLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Apr 2026 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:63:86:69:8f:c1:3d:47:08:bd:61:b5:82:db:5f:ed:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d41d330dc8c7293e729451db2646383838e3f8c
Validity
Not Before: Apr 6 16:00:46 2026 GMT
Not After : Apr 7 16:00:46 2026 GMT
Subject: CN=8267323c1bc7cd9185b78d61d0bc85532451b77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:f3:37:88:6f:08:6a:3c:6b:d1:fa:2e:89:
91:90:5c:b3:5d:41:75:84:7c:95:42:e4:ae:45:15:
9c:e5:d1:4c:64:6f:1b:48:36:eb:a9:f2:5c:30:f9:
39:7d:c4:74:ac:ce:a7:06:1a:c6:c2:a3:77:d1:fb:
a6:6f:3c:f0:bb:89:55:d7:17:4f:81:55:0b:81:4a:
9e:4d:06:4e:12:bc:88:b4:34:2a:b1:b4:4c:a2:c8:
49:97:77:2f:d1:b7:62:6c:db:db:da:c1:62:5d:7b:
d5:a6:82:ef:b2:8c:10:d5:47:ba:d7:93:bb:e3:75:
f8:e5:81:0f:ba:ba:9d:c6:cd:a4:48:13:01:e3:fc:
9f:7c:2d:c9:b5:d4:d4:ba:43:81:f4:c0:4f:7b:75:
1f:7f:36:a9:7a:d3:3a:09:5c:d8:18:27:41:d7:15:
d0:94:b1:8c:f2:2a:78:0c:38:08:aa:39:66:8c:75:
05:59:14:23:f9:82:e5:57:85:3c:96:67:e3:45:b0:
80:68:36:da:df:00:79:bd:76:2b:09:88:d0:d3:4d:
fc:85:67:45:65:ac:bc:e6:87:3f:ce:a3:d1:23:2a:
c3:d0:6c:3a:69:c2:63:01:1d:bb:61:c5:a9:45:95:
2a:eb:42:c6:c6:24:64:dc:d4:fc:cc:86:00:c1:cd:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:67:32:3C:1B:C7:CD:91:85:B7:8D:61:D0:BC:85:53:24:51:B7:7C
X509v3 Authority Key Identifier:
keyid:5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a8:61:94:fa:31:ca:56:ab:ca:c3:8f:16:ed:20:93:6c:0a:
54:b2:e4:39:e1:f1:0e:d0:cb:e5:11:a1:c1:80:9b:a6:27:ff:
9c:78:17:54:6c:29:54:9c:31:00:82:22:64:82:56:3f:99:16:
23:40:c9:b3:db:98:45:d3:71:07:da:10:15:d9:1c:e9:06:6f:
fe:bd:00:1e:7e:3e:a9:9f:ba:06:87:c1:3c:d2:40:cc:fb:83:
88:fc:dd:bf:56:ce:ac:f1:8c:6a:88:29:7e:bc:37:48:8d:9b:
ec:cb:8c:d2:d1:56:6f:a3:f7:db:fb:ea:a3:0d:4f:4f:eb:ea:
6e:84:b1:5a:f0:e1:87:6c:ec:a1:32:27:37:e0:8f:5c:85:93:
64:84:bb:d7:fc:c5:a2:8d:a1:4e:02:84:43:3e:16:10:de:c9:
13:b7:58:98:c0:90:80:0b:e2:bf:a2:f8:d6:9c:a9:2b:98:ef:
ac:b5:51:db:ee:72:c0:16:54:55:c7:44:cd:bb:47:42:36:06:
fb:7d:40:16:19:d3:92:7d:74:12:0e:36:0b:17:2f:7f:84:3a:
15:17:52:e4:c2:b6:8a:a6:9b:ae:fd:8b:5b:09:f5:4c:73:7c:
fe:7a:2e:ac:71:16:19:8b:64:b2:45:a2:d2:af:6d:15:88:d8:
30:bd:b3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 20:51:36 2026 by rpki-client