Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
File: XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json)
Hash identifier: Wf3gB9DXomJtS/dEggsZJ/QqKa5rVIUI2qiVLjuDL5w=
Subject key identifier: FF:FE:C5:FE:47:2A:9B:58:C1:54:AC:9C:02:E5:5E:0C:22:AB:91:2A
Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Certificate serial: 019DCDBD5865BB15D30561D5AE8EBDE8859A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
Manifest number: 133E
Signing time: Mon 27 Apr 2026 07:00:31 +0000
Manifest this update: Mon 27 Apr 2026 07:00:31 +0000
Manifest next update: Tue 28 Apr 2026 07:00:31 +0000
Files and hashes: 1: LlXWpROIqtL6tp6Aj-IFy29MFjs.roa (hash: KdLr/tJ9VzR7ewN9N+GnPwm/+RI9By2q5ZnpA8EcZVY=)
2: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: qvb+Zpg8LVMr/zfcRU+NUR84ajTKcCb13UYs6IL+Pcg=)
3: YiSRyD3T9EqkxC_vsLTbpd4-1ic.roa (hash: rH3OH+nKD7gxgdOxb/Eod9szmTSLhYFd7UVaSZRZpws=)
4: v5AikuLbt2o2wZFx81AkxLKlbbE.roa (hash: 7KPccZgy5MWb3ejH0HLnxvwj1pO1ZpFKozpP20aOke4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:58:65:bb:15:d3:05:61:d5:ae:8e:bd:e8:85:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Validity
Not Before: Apr 27 07:00:31 2026 GMT
Not After : Apr 28 07:00:31 2026 GMT
Subject: CN=fffec5fe472a9b58c154ac9c02e55e0c22ab912a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:53:bc:59:69:43:6d:67:c3:b7:57:45:e0:35:
73:49:45:0d:ef:8e:9e:13:41:7d:43:66:b7:e4:c4:
fc:3f:69:5c:9c:35:80:d0:f2:71:fa:26:95:95:7d:
79:f6:40:62:7c:36:8f:5b:43:21:99:d4:92:9f:9e:
ea:ae:a1:94:fb:9d:92:fd:ea:6e:d8:52:50:7c:10:
1d:fc:aa:72:45:04:e7:ef:e9:8f:c3:f2:ec:ca:50:
0c:b0:db:f9:46:01:6a:5a:17:f0:f7:b5:d9:66:79:
68:72:34:a8:e0:a5:f8:f4:7e:cd:ad:99:d8:0f:91:
ec:b4:6d:be:c0:ec:c8:19:2e:50:f9:d5:af:36:dc:
1b:3e:b3:c9:fc:a0:f4:14:33:78:fe:52:a9:28:f5:
3d:17:54:37:a8:10:cc:57:45:9e:a8:98:19:09:e2:
60:03:0a:d9:fa:45:01:6b:4d:1d:55:4c:91:97:1d:
0a:19:d5:ad:56:92:06:92:44:1c:88:f8:7c:99:bd:
57:47:e7:69:be:30:58:fe:ce:7a:03:28:ef:34:b8:
f8:f8:31:b5:fe:f7:1c:06:2a:e5:cb:c0:87:dd:bb:
39:ee:85:1b:2f:4d:8b:db:0a:e2:bc:a8:38:8f:fa:
41:e5:cb:db:82:ba:55:e6:15:86:7b:e8:b2:54:e8:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FE:C5:FE:47:2A:9B:58:C1:54:AC:9C:02:E5:5E:0C:22:AB:91:2A
X509v3 Authority Key Identifier:
keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:43:a3:8c:90:68:23:50:14:79:09:cb:62:70:8a:91:18:6d:
25:4f:2b:a6:dc:6f:e7:58:09:d7:92:d0:f0:da:8c:6f:61:98:
bc:d5:ce:c2:40:be:5d:e5:5a:3a:0b:40:af:98:8f:f4:36:a7:
75:ab:8d:1e:4e:23:c5:e0:c4:00:82:54:71:df:56:61:5f:52:
1a:db:b3:3b:61:dc:d6:29:cf:2e:a3:23:e4:7f:10:06:bb:16:
7d:b2:69:d9:14:03:7a:23:28:26:96:c5:bb:5a:f2:e3:62:b5:
3d:3e:40:17:75:55:28:aa:27:6d:74:79:a9:cf:96:a7:89:89:
07:e2:23:fd:68:01:2a:59:73:82:e6:43:d0:ac:04:5d:55:eb:
4b:84:5b:ee:3f:45:e3:2b:76:d6:ab:8c:ce:0e:69:b3:cd:3d:
ac:53:b6:53:62:1a:86:0f:17:13:cc:8a:ee:ef:d7:dc:b6:5f:
25:13:1a:0d:bd:30:0b:e2:e1:15:17:b4:cf:32:4e:de:6e:62:
7e:83:ba:81:97:c6:c0:43:8c:fb:30:f0:4f:e1:9c:1f:1c:cd:
8c:82:3f:3e:e2:2b:54:82:2e:bf:0b:47:4b:be:f3:99:6a:09:
06:c2:b0:0f:d4:ea:15:46:fe:68:cf:ea:77:ea:1c:b7:f1:85:
48:67:25:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:39:47 2026 by rpki-client