Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: cFYvW+UMlJWyJLB+z5KPcp16rclllLbDwbLB/j1uP1s=
Subject key identifier: 07:E1:97:2A:44:D5:91:ED:CD:AE:E5:A2:FE:F7:4C:DD:07:F1:D4:E7
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 019D394159E1C769737ACE962998D688C1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 1704
Signing time: Sun 29 Mar 2026 11:01:17 +0000
Manifest this update: Sun 29 Mar 2026 11:01:17 +0000
Manifest next update: Mon 30 Mar 2026 11:01:17 +0000
Files and hashes: 1: BSd1DfMbSh6BJ7RqQQ57J6iIn54.roa (hash: Hf/PRSH8627ldiT+c/R6Jxk5Uw2/lYafueoJm0baWdM=)
2: MG306zVy_XnsDe9avuTP6OQlaR4.roa (hash: eZ9MpR2ZT4wF57S821zouXormxfdjIGPXoURlUDpr+M=)
3: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: LnANUf0tO+zMUdaEHnp/iVxUERUi6DR3i7nlPlzmE7E=)
4: yA4t8VFR5w-UawfByzFjfg16sDc.roa (hash: mhRBFfLSkDyDoFbm3ZHCraYe+ogc6AsTxV7YQZpdaT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:59:e1:c7:69:73:7a:ce:96:29:98:d6:88:c1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Mar 29 11:01:17 2026 GMT
Not After : Mar 30 11:01:17 2026 GMT
Subject: CN=07e1972a44d591edcdaee5a2fef74cdd07f1d4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:20:3a:84:9a:b6:d1:23:34:58:ea:61:0c:a9:
dd:17:73:b6:37:7a:33:c0:6b:94:b9:64:f5:8d:61:
24:9f:3e:54:36:16:c7:72:f7:01:78:43:0f:90:e4:
74:8a:0e:86:35:a6:35:37:fa:c0:7b:a3:c9:7f:7a:
16:b6:06:9e:7e:06:9f:47:88:e5:74:41:4c:a1:1f:
5f:fa:96:5a:7d:56:a9:9f:39:89:86:ee:02:b8:ad:
3f:ca:7b:ae:a6:a5:b1:9d:4e:56:7a:b6:5d:ca:c5:
44:c3:3c:26:1c:65:19:a4:30:03:c3:a5:8f:4e:22:
62:cb:30:89:13:20:03:45:ad:39:05:b7:f9:3a:74:
f0:91:1d:4a:99:cc:e4:27:82:6e:d1:5b:ab:69:32:
2e:24:02:71:bb:ff:09:67:ca:09:c5:12:72:06:f3:
5d:2c:7c:4a:55:48:7d:3b:5c:4e:63:b5:73:e6:e2:
e4:26:78:a0:fb:26:41:6e:dc:29:f2:8c:b4:ab:9b:
ab:c7:4b:63:40:7b:e5:fd:a9:94:d4:91:98:cb:90:
0d:29:85:33:9f:5e:09:ea:f8:7a:ed:87:fc:d6:dd:
e5:9b:e2:ad:5c:9e:8e:0c:90:b0:ac:24:b4:6f:ab:
b0:a1:df:11:61:ea:fa:09:76:c3:e4:28:5b:de:c3:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E1:97:2A:44:D5:91:ED:CD:AE:E5:A2:FE:F7:4C:DD:07:F1:D4:E7
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:41:d7:e0:59:97:bd:1a:a5:e2:86:33:76:69:c7:2b:85:28:
6a:4e:03:2a:2c:09:a2:73:53:a5:19:c8:bb:19:7b:47:e4:2e:
4d:bb:09:fa:df:5f:c3:2e:10:93:15:2a:6f:df:9d:f2:67:a4:
05:8c:3a:3b:ff:cb:a8:fb:15:32:47:9f:38:c3:98:06:0c:99:
f7:38:b0:56:42:08:22:93:33:8a:0a:f1:5c:36:6b:ee:f1:de:
9d:91:ca:a9:4d:8e:1c:8f:f8:ca:dd:0e:57:96:e1:cd:10:f7:
0c:2a:2a:14:0a:68:2a:4d:be:2b:a9:51:9c:f3:ea:ed:5d:4b:
59:65:25:91:c4:31:b7:53:00:33:06:2b:68:60:99:93:ef:0f:
f6:ee:78:d0:82:07:a1:17:a3:c9:31:7f:73:96:64:29:93:7f:
b0:01:6d:65:f1:97:9a:e8:a4:f8:88:92:6b:76:7e:02:e2:06:
49:54:e3:1c:05:01:32:6f:e3:b7:36:bb:c8:ca:86:ed:22:ba:
87:9f:22:70:03:8a:30:b0:77:d4:13:79:d3:de:8b:5e:c2:5a:
1e:fb:fd:c5:24:6a:1c:27:80:15:94:02:8e:20:4e:aa:19:72:
e5:9e:97:3c:c2:f5:93:26:b2:5c:fc:58:74:41:10:7a:4c:74:
af:1a:1d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:00 2026 by rpki-client