Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
File: XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json)
Hash identifier: OyJh/fGVfITPEV0DC7rxmLXCDOepk0sV2hy6bubnNtk=
Subject key identifier: 91:9A:B5:40:56:6A:E0:8D:45:C1:AF:3B:46:EF:43:5C:87:1F:C9:1C
Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Certificate serial: 019CE222E093D1B61CA2C0436FDAE6BDA4AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
Manifest number: 12C4
Signing time: Thu 12 Mar 2026 13:01:02 +0000
Manifest this update: Thu 12 Mar 2026 13:01:02 +0000
Manifest next update: Fri 13 Mar 2026 13:01:02 +0000
Files and hashes: 1: LlXWpROIqtL6tp6Aj-IFy29MFjs.roa (hash: KdLr/tJ9VzR7ewN9N+GnPwm/+RI9By2q5ZnpA8EcZVY=)
2: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: IRprJXrmHJIvZ5Rrl0lSQTftPQ5qCqDJ5/D/FKlJCac=)
3: YiSRyD3T9EqkxC_vsLTbpd4-1ic.roa (hash: rH3OH+nKD7gxgdOxb/Eod9szmTSLhYFd7UVaSZRZpws=)
4: v5AikuLbt2o2wZFx81AkxLKlbbE.roa (hash: 7KPccZgy5MWb3ejH0HLnxvwj1pO1ZpFKozpP20aOke4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:22:e0:93:d1:b6:1c:a2:c0:43:6f:da:e6:bd:a4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Validity
Not Before: Mar 12 13:01:02 2026 GMT
Not After : Mar 13 13:01:02 2026 GMT
Subject: CN=919ab540566ae08d45c1af3b46ef435c871fc91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:3b:91:c1:b8:66:7b:13:ab:c6:5a:f7:1e:
34:ae:ab:a0:a2:ce:eb:c4:2d:c4:c6:0d:81:18:da:
17:29:1b:0e:be:17:c9:6d:88:9c:52:3b:eb:be:5c:
de:1c:b0:45:87:9c:bb:d1:cc:59:15:09:1f:30:e0:
44:a7:6a:72:56:df:08:3a:b9:72:83:94:a0:a3:29:
f4:bf:22:cd:52:14:27:ef:a6:01:34:85:59:e6:ab:
a5:61:b3:27:22:da:40:55:c2:4b:80:52:e2:53:fb:
61:2d:a5:d3:09:4e:a8:28:e7:fa:18:bb:24:a6:74:
77:74:2c:66:ba:21:e9:3c:6d:1d:a1:3c:d1:b0:7f:
3a:2c:64:4d:14:16:8a:6a:fb:ad:63:1c:b4:ad:1b:
b0:ed:34:9e:27:c7:55:90:95:ac:64:bd:6c:c9:6b:
ae:cb:b9:41:19:6f:3c:e0:3c:52:0b:dd:c7:91:cb:
89:ab:b6:b8:af:e6:e2:d1:34:d5:09:08:f1:b9:1d:
35:66:d7:78:28:0c:8d:87:95:b1:e6:56:6a:fc:40:
fa:0d:31:70:ed:5c:70:07:f8:b8:20:37:b4:81:84:
76:8b:eb:4f:e3:d4:18:06:6b:5b:77:28:e6:6e:7c:
c1:08:06:49:d0:d4:4d:48:f1:94:8b:8e:90:21:e2:
ab:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9A:B5:40:56:6A:E0:8D:45:C1:AF:3B:46:EF:43:5C:87:1F:C9:1C
X509v3 Authority Key Identifier:
keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1c:3f:8c:ca:38:ab:64:4f:68:a9:3b:5b:7a:17:40:8d:24:
6d:21:1f:3c:9d:e9:59:bc:49:8e:e5:51:13:e2:cf:fb:55:5f:
74:2f:ff:24:80:e6:32:3b:45:2f:d2:e9:c6:fe:36:69:5f:61:
26:64:4d:98:96:ad:16:4a:ac:c4:6a:12:72:a6:96:02:13:70:
d4:57:54:8c:2e:71:4a:7c:1f:39:04:1f:27:1f:3d:10:e2:64:
5e:ce:dc:f0:2d:55:09:a2:8d:09:2d:40:cf:9d:2e:17:09:8a:
5a:67:21:d0:97:f8:9e:55:4a:25:dd:59:16:f5:69:4f:38:33:
9a:42:96:31:63:b6:c3:14:ed:e3:2a:d9:11:b3:b9:5c:ba:40:
07:91:f1:d2:46:2a:84:fe:60:7a:48:b7:8c:60:cf:d0:ab:75:
da:fc:08:89:19:f3:d0:7c:c9:97:f7:3d:cd:fc:62:9e:47:52:
01:bc:83:ae:52:d3:67:62:be:59:44:86:d1:c9:d6:eb:a6:55:
94:f3:81:d3:5f:3f:59:67:a3:bc:a2:7e:78:4a:47:62:66:54:
b6:2c:8a:a9:0b:9a:73:27:8e:01:06:51:a6:5d:0e:a8:5e:71:
ca:9c:b1:44:a4:e9:05:dc:34:45:39:5c:97:e9:9b:c1:fa:2a:
37:46:3a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 20:11:10 2026 by rpki-client