Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
File: XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json)
Hash identifier: Xb/AULEgUQ8kWRWj8k2PMFh/PoUJBqXp9GfWGPUOnUo=
Subject key identifier: C2:2F:FD:4D:1B:21:E1:6D:2B:4B:23:C1:4A:52:8D:84:9B:72:86:33
Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Certificate serial: 01A189ADFECCB5CCDA0A9B041339167FB91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
Manifest number: 152D
Signing time: Thu 29 Oct 2026 22:00:43 +0000
Manifest this update: Thu 29 Oct 2026 22:00:43 +0000
Manifest next update: Fri 30 Oct 2026 22:00:43 +0000
Files and hashes: 1: LlXWpROIqtL6tp6Aj-IFy29MFjs.roa (hash: KdLr/tJ9VzR7ewN9N+GnPwm/+RI9By2q5ZnpA8EcZVY=)
2: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: gpmDQkS6iE3Tht+/Q9WiUcONHdBflmYrv0ecwV7lOZk=)
3: YiSRyD3T9EqkxC_vsLTbpd4-1ic.roa (hash: rH3OH+nKD7gxgdOxb/Eod9szmTSLhYFd7UVaSZRZpws=)
4: v5AikuLbt2o2wZFx81AkxLKlbbE.roa (hash: 7KPccZgy5MWb3ejH0HLnxvwj1pO1ZpFKozpP20aOke4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:ad:fe:cc:b5:cc:da:0a:9b:04:13:39:16:7f:b9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Validity
Not Before: Oct 29 22:00:43 2026 GMT
Not After : Oct 30 22:00:43 2026 GMT
Subject: CN=c22ffd4d1b21e16d2b4b23c14a528d849b728633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:29:00:29:bc:0f:a0:e5:4f:ff:a6:5d:40:
71:f3:f1:2f:bf:4a:2d:3c:59:9a:a8:47:19:f9:db:
c6:83:a0:9a:b0:21:c1:51:b7:10:a3:64:c1:2d:8b:
93:14:60:91:dc:58:15:68:20:3b:6c:99:b3:6f:cf:
0e:07:71:68:22:00:df:0e:5b:45:e5:31:2a:7b:01:
20:75:69:64:58:78:f9:79:70:d8:aa:63:8c:6b:72:
ac:2d:7e:fa:63:ea:35:2a:a2:ff:ed:a1:81:27:ce:
ea:d9:f7:ef:6d:2a:ec:4a:f9:4e:17:24:98:77:58:
1a:0b:56:e4:58:4e:d0:20:50:8b:2f:9e:5b:2f:f1:
39:33:24:3c:78:e1:5f:7a:c1:e6:46:e3:68:f0:c9:
8d:7b:be:1d:99:7c:13:16:f8:9a:40:0e:bf:0e:e2:
bb:51:b7:35:6c:c8:dd:d5:17:91:64:ea:fd:bd:72:
03:6c:ee:66:86:5c:e4:e8:6a:5d:d6:0c:a3:4b:63:
ba:05:f9:15:bc:13:ea:01:21:e6:93:23:10:ee:d5:
95:26:62:26:3e:46:1d:46:ad:01:e4:64:bb:3f:a3:
ac:46:34:ea:b1:9c:ff:01:03:ff:db:41:fc:ec:35:
8c:ee:24:56:56:aa:63:ef:30:00:00:77:cd:5c:44:
55:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2F:FD:4D:1B:21:E1:6D:2B:4B:23:C1:4A:52:8D:84:9B:72:86:33
X509v3 Authority Key Identifier:
keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ce:fd:21:5a:ba:07:4f:fd:bf:9a:3c:0a:a4:10:bb:08:2e:
4b:65:75:73:bb:c3:49:36:36:c9:c1:e6:81:6f:83:66:1f:f0:
d3:37:ba:fc:de:0f:7d:be:55:fc:f7:3a:db:e4:cf:c0:ab:cd:
d4:27:7b:09:0c:28:e5:6c:ed:08:6f:e9:37:07:45:79:57:ea:
26:9b:18:ff:61:0d:0e:00:06:3b:ed:58:0a:5c:7b:7e:22:d7:
44:0d:23:79:88:43:8c:82:98:a4:bc:d5:39:5d:e5:18:4b:4f:
8e:8b:30:3e:87:e0:d3:bf:54:a2:d9:2a:3f:84:7f:1b:f9:fc:
dc:1f:41:ae:d9:ec:e4:35:94:cf:7b:8a:7c:7f:28:7f:3e:19:
11:f1:bd:03:6b:2d:47:79:3e:4d:1c:fc:46:25:38:66:4a:25:
24:2b:b6:f6:23:50:27:c3:7c:55:8c:c1:b5:10:c4:c6:14:27:
92:f4:0e:fd:d2:8b:b7:de:84:a4:f5:ed:3c:d9:c6:48:bf:50:
32:00:a5:4b:ef:d7:71:98:e6:7e:fd:c6:98:5e:e8:42:84:16:
7d:2c:f9:9d:e0:21:3b:99:e0:78:36:55:cb:aa:b3:e1:68:84:
6f:bb:8e:02:db:06:84:3e:e4:6a:73:ee:58:66:40:7b:f0:86:
af:57:4f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:46:59 2026 by rpki-client