Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
File: XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json)
Hash identifier: r/fSunzDnwDjYsEtB8CC9ZSvqyV1HZZKhKqepP7W2o0=
Subject key identifier: 62:9F:69:4A:32:B3:17:14:F7:D0:68:62:C4:F7:02:24:D3:EE:D8:00
Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Certificate serial: 01A08AC30D86B17579D8B74C361990C6B937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
Manifest number: 14A9
Signing time: Thu 10 Sep 2026 10:00:33 +0000
Manifest this update: Thu 10 Sep 2026 10:00:33 +0000
Manifest next update: Fri 11 Sep 2026 10:00:33 +0000
Files and hashes: 1: LlXWpROIqtL6tp6Aj-IFy29MFjs.roa (hash: KdLr/tJ9VzR7ewN9N+GnPwm/+RI9By2q5ZnpA8EcZVY=)
2: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: fC8Z0LOdFKtOp+0r8D9g6TuthOPGJWmA04cOL7Tt2Cc=)
3: YiSRyD3T9EqkxC_vsLTbpd4-1ic.roa (hash: rH3OH+nKD7gxgdOxb/Eod9szmTSLhYFd7UVaSZRZpws=)
4: v5AikuLbt2o2wZFx81AkxLKlbbE.roa (hash: 7KPccZgy5MWb3ejH0HLnxvwj1pO1ZpFKozpP20aOke4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:0d:86:b1:75:79:d8:b7:4c:36:19:90:c6:b9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Validity
Not Before: Sep 10 10:00:33 2026 GMT
Not After : Sep 11 10:00:33 2026 GMT
Subject: CN=629f694a32b31714f7d06862c4f70224d3eed800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c8:04:80:14:3d:d3:07:38:9b:7d:21:79:d2:
9d:0b:18:7f:5a:f7:56:44:b6:06:51:08:64:3a:5b:
8e:54:87:a8:91:b9:cf:58:02:ec:f0:ed:e9:7d:c1:
85:0b:4a:a3:a0:45:1c:09:7f:76:ee:19:d1:41:60:
1e:42:f6:ec:c2:1f:5f:4e:39:26:5b:b2:f9:ac:11:
2d:48:6f:30:d5:9a:0c:86:9b:b9:45:29:db:c4:6e:
00:99:87:1a:91:c8:6a:c6:37:0c:b4:ef:c8:95:db:
8f:56:1e:fe:bb:73:ec:11:c5:8f:76:f3:29:4a:9b:
f6:cc:9d:11:5f:3a:77:2d:16:67:60:97:46:32:97:
2b:c8:46:04:8f:d8:d3:5c:d2:9c:b8:e4:e1:da:ce:
68:a4:09:d9:b7:07:86:3e:4b:40:84:04:58:74:2d:
c5:1e:84:45:15:63:bd:0f:33:65:9b:a2:ae:95:d4:
28:a0:21:c8:33:9d:e3:23:91:78:ed:7a:9e:fd:fd:
b7:42:12:50:02:7e:ff:d1:5f:ba:16:b1:bd:62:f2:
52:41:d3:86:6b:e7:df:dc:12:a8:33:01:4c:35:fa:
cb:2f:6d:04:25:99:4c:5f:b0:2f:60:0a:76:a2:d4:
06:ee:2c:57:fd:8d:12:53:ae:f6:a6:54:eb:31:9d:
51:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9F:69:4A:32:B3:17:14:F7:D0:68:62:C4:F7:02:24:D3:EE:D8:00
X509v3 Authority Key Identifier:
keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8b:aa:67:83:93:f0:3e:bd:55:0e:13:ee:6c:21:08:2b:af:
f5:3b:81:f6:1c:11:6d:10:b6:3f:78:a2:a3:17:88:21:3e:21:
48:8c:44:98:ae:1e:c0:21:52:29:ea:19:c1:9d:c0:e9:e3:2c:
43:2f:40:ca:12:f6:25:47:05:04:2f:e8:08:51:ac:9e:82:f7:
65:91:65:e6:24:19:7c:4d:de:c3:85:af:f9:d6:dc:06:32:9f:
d1:c1:d6:c3:f5:ae:b5:86:1a:c7:1d:fa:eb:e4:e8:6a:8c:7f:
39:a5:a4:c3:ab:d3:00:f1:a8:2e:4c:27:9f:95:ae:b2:e8:e2:
f4:54:c2:bb:40:8f:9d:b6:70:33:b7:32:2a:3d:db:87:5e:53:
b4:1f:49:86:d5:0e:06:83:17:ef:4a:e2:9e:a6:e9:83:28:07:
6c:f7:c2:1a:55:87:7d:fe:62:eb:4e:b3:51:32:fc:35:e7:62:
eb:2f:14:23:d2:0f:be:90:a9:e7:67:dc:f7:2f:9f:3a:a1:49:
9d:15:fa:8c:93:cd:9a:fa:58:15:e1:ab:66:b0:6b:fb:9a:6d:
34:a0:1b:1b:dc:7e:83:2d:81:9b:26:ea:b2:a7:63:45:50:34:
6f:db:0d:8b:a7:92:ec:1b:74:e2:c3:1e:20:30:9f:85:88:ab:
53:25:61:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:21:06 2026 by rpki-client