Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: IdAVcbj5o6XhImZlNxyYn1WVDvfpjZGXIRIWMPbeR4I=
Subject key identifier: 3E:AA:11:B9:F1:34:49:B1:74:27:C6:8C:82:BB:37:27:34:64:0B:88
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 019F1A1EFC93CA8CDFA88205C330338CB817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 17FD
Signing time: Tue 30 Jun 2026 20:01:06 +0000
Manifest this update: Tue 30 Jun 2026 20:01:06 +0000
Manifest next update: Wed 01 Jul 2026 20:01:06 +0000
Files and hashes: 1: BSd1DfMbSh6BJ7RqQQ57J6iIn54.roa (hash: Hf/PRSH8627ldiT+c/R6Jxk5Uw2/lYafueoJm0baWdM=)
2: MG306zVy_XnsDe9avuTP6OQlaR4.roa (hash: eZ9MpR2ZT4wF57S821zouXormxfdjIGPXoURlUDpr+M=)
3: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: j77ZiNKWsW8/wklhlx5lRUIRpw++XAwlULcxEWYw7C4=)
4: yA4t8VFR5w-UawfByzFjfg16sDc.roa (hash: mhRBFfLSkDyDoFbm3ZHCraYe+ogc6AsTxV7YQZpdaT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1e:fc:93:ca:8c:df:a8:82:05:c3:30:33:8c:b8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Jun 30 20:01:06 2026 GMT
Not After : Jul 1 20:01:06 2026 GMT
Subject: CN=3eaa11b9f13449b17427c68c82bb372734640b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:51:de:77:0b:58:e2:ee:98:1c:ed:b4:a1:4e:
b3:25:e0:f2:33:2b:28:68:f3:81:d5:cd:59:95:99:
a8:a5:94:5b:68:b9:af:16:98:02:a5:21:7c:23:19:
31:15:3d:f8:ef:52:da:a8:03:34:3c:30:84:6f:f3:
31:b8:61:d0:b9:29:a9:31:43:4a:69:4a:3f:34:b4:
38:44:2e:6d:d7:69:d2:0c:ec:2a:0a:55:4c:4a:64:
35:f3:af:f9:37:fe:c4:88:9f:73:f7:05:5c:49:6f:
53:64:68:01:b4:7a:43:71:2f:86:9f:69:dd:37:7d:
10:33:12:d9:7c:5f:b7:37:56:0b:a8:22:ba:fb:e2:
9e:24:20:3c:f4:6b:e8:5a:2d:fe:4e:fd:c5:40:59:
c6:46:bf:57:58:0e:01:dd:55:26:c4:d2:9d:6a:3f:
d8:54:8d:e3:87:f9:d3:ea:20:68:19:ad:19:2d:ed:
ba:8d:80:3d:1b:d7:24:82:22:4f:8e:a1:22:c0:aa:
fd:b1:f0:b9:c0:e6:f7:13:6c:21:a3:1a:97:73:cc:
b4:12:04:e3:39:3b:18:91:06:cb:a5:bc:de:c7:d9:
ea:0f:c3:15:33:80:ee:7d:4c:92:c5:51:a0:1b:bc:
6a:63:6d:28:c0:57:91:a7:5c:ee:31:c4:a4:17:53:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AA:11:B9:F1:34:49:B1:74:27:C6:8C:82:BB:37:27:34:64:0B:88
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fc:8c:cd:ce:be:b3:99:93:a9:84:65:f5:7e:19:68:b1:9a:
46:d6:67:a9:1c:0c:fa:f6:3f:15:e5:bc:25:31:94:02:1a:4b:
e6:6b:42:63:53:07:cd:d0:34:41:bf:76:e9:79:0d:78:55:f7:
90:ac:25:d1:96:31:c1:c5:e1:36:a8:75:57:bf:1c:f9:16:e1:
78:6e:39:9f:14:53:dd:84:60:dd:37:a5:83:a4:14:38:30:43:
bf:08:70:0f:c9:ec:9b:35:74:0a:0b:b2:ad:56:0d:4b:f4:eb:
73:4a:be:86:ef:fe:2b:9a:85:0f:9b:72:d8:ff:92:78:3c:d3:
52:e7:15:58:1c:9d:fa:92:e6:2d:f2:f2:ee:38:96:2a:be:e3:
db:3e:c8:18:63:0d:9c:d2:9a:87:db:ba:d7:e3:e9:3b:68:9e:
73:e6:1f:b6:1f:bd:6f:a3:e8:d0:d9:b1:56:f8:0e:a9:e2:1a:
6b:3b:9d:26:87:b9:2b:c1:dc:04:18:0c:58:82:25:e7:6f:fd:
57:3a:fc:85:5e:61:9e:1e:98:f3:7e:47:e2:c5:91:e6:0a:d3:
43:bb:6d:14:71:35:39:bb:cb:ac:cb:1e:16:bf:00:92:46:e7:
ef:81:c1:94:d0:48:1f:c1:8a:c2:37:7e:e8:c4:23:38:41:80:
f9:a2:79:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:18:00 2026 by rpki-client