Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
File: XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json)
Hash identifier: FcKmbgaCDY5UVj4tICdMK0S9KX0ByZbjnwPrZgtLYRg=
Subject key identifier: 4D:11:B8:A3:E9:68:1F:F1:E8:E6:BB:E9:76:B6:14:CC:34:BA:D4:BD
Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Certificate serial: 019EB76A5026D8837ACB9B0F770C061DC623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
Manifest number: 13B7
Signing time: Thu 11 Jun 2026 16:00:58 +0000
Manifest this update: Thu 11 Jun 2026 16:00:58 +0000
Manifest next update: Fri 12 Jun 2026 16:00:58 +0000
Files and hashes: 1: LlXWpROIqtL6tp6Aj-IFy29MFjs.roa (hash: KdLr/tJ9VzR7ewN9N+GnPwm/+RI9By2q5ZnpA8EcZVY=)
2: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: 4wvi62EfNwl4RQ43kxpW5JbG3I0Ul/mwFPcpF+uxTtc=)
3: YiSRyD3T9EqkxC_vsLTbpd4-1ic.roa (hash: rH3OH+nKD7gxgdOxb/Eod9szmTSLhYFd7UVaSZRZpws=)
4: v5AikuLbt2o2wZFx81AkxLKlbbE.roa (hash: 7KPccZgy5MWb3ejH0HLnxvwj1pO1ZpFKozpP20aOke4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:50:26:d8:83:7a:cb:9b:0f:77:0c:06:1d:c6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Validity
Not Before: Jun 11 16:00:58 2026 GMT
Not After : Jun 12 16:00:58 2026 GMT
Subject: CN=4d11b8a3e9681ff1e8e6bbe976b614cc34bad4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ac:da:3b:6f:60:15:96:d9:aa:c2:d1:73:40:
68:0a:8d:89:3e:01:33:75:60:ed:e3:e9:1f:57:81:
38:e5:72:49:fc:26:a8:df:9d:72:1f:48:bf:5f:04:
3e:82:b7:0c:b1:9f:57:ea:31:50:18:7c:92:0b:67:
36:3e:df:e4:08:65:01:2d:87:e4:e6:f0:d6:b0:2d:
1c:4d:a6:e8:a3:c9:56:8e:bd:ce:ad:22:bf:4e:62:
88:c7:b2:41:6e:02:57:50:cd:c9:4d:65:45:0b:5b:
35:57:0a:6a:26:0f:00:8f:ad:af:b5:ca:78:1c:54:
3f:e8:80:5a:63:7e:50:4d:87:bf:07:7e:ce:fc:83:
17:3c:99:e7:55:47:9b:b8:42:c5:2b:72:0c:34:4c:
21:0b:33:fd:55:5c:55:dd:ba:d6:2e:45:34:a4:01:
7a:78:e9:c1:9b:a3:ed:f5:12:e2:9a:4f:3c:40:ca:
e6:27:a6:60:9d:b0:24:e3:33:f4:ae:b8:59:72:1f:
05:b0:d1:14:47:a5:4c:2c:46:22:f5:43:12:45:89:
15:52:a1:a3:80:1e:a1:38:a3:71:51:6a:7c:cf:4f:
4f:72:4e:82:8e:c2:7a:49:ad:a0:96:c4:13:89:57:
c3:33:73:6a:44:39:c7:74:3c:63:9b:7a:96:9a:f5:
9f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:11:B8:A3:E9:68:1F:F1:E8:E6:BB:E9:76:B6:14:CC:34:BA:D4:BD
X509v3 Authority Key Identifier:
keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ce:85:a1:d8:8f:bb:24:61:80:95:98:2f:63:26:4f:0d:14:
a6:57:d7:6d:73:94:aa:ce:77:6d:c7:41:f7:41:c5:e9:fc:00:
d0:3d:98:e5:44:ea:e1:63:5e:a3:8b:05:d2:13:af:8c:9e:54:
01:b0:dc:ae:68:55:a2:5b:18:b4:33:79:2a:d3:c9:f9:57:aa:
ce:06:6a:e4:d7:c4:f8:da:b2:b0:eb:90:aa:28:39:a6:8a:23:
00:bf:23:35:fb:45:d1:4f:be:8e:82:6d:65:bc:03:87:07:59:
2c:a7:46:db:bc:58:8d:43:8a:a7:4e:6e:be:eb:c1:6b:2f:3b:
0d:de:e4:3b:fc:c3:fa:97:ff:44:ca:cc:93:c3:c1:ef:f2:e8:
bb:7b:83:94:06:46:dd:79:cf:c7:39:92:b1:9b:2c:0d:66:f4:
8f:8a:44:ca:9f:e5:fe:d1:55:26:2e:4c:dd:e3:c9:9e:11:84:
6e:59:8a:96:f7:2e:2c:9b:45:f4:46:99:3d:bf:09:93:fa:76:
fb:ba:9e:43:78:86:71:8e:cc:51:bf:46:c8:0a:ba:30:28:86:
9d:0f:38:f5:73:c6:36:4f:08:56:12:98:59:95:57:f5:43:91:
7c:e1:f1:1c:7a:66:26:89:fa:6f:ce:35:bb:f0:33:b3:74:c5:
d3:a7:ed:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:32:40 2026 by rpki-client