Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: WcC3Cp3s9fx/YH3wHkfDjeFDISieAH7EavagFLDV4yY=
Subject key identifier: 98:33:5C:34:6B:6D:35:05:3C:CD:E5:10:49:3B:41:4B:BE:A7:54:AC
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 01A1599DB50AED43C31192D3918F11A6A521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 1927
Signing time: Tue 20 Oct 2026 14:01:10 +0000
Manifest this update: Tue 20 Oct 2026 14:01:10 +0000
Manifest next update: Wed 21 Oct 2026 14:01:10 +0000
Files and hashes: 1: BSd1DfMbSh6BJ7RqQQ57J6iIn54.roa (hash: Hf/PRSH8627ldiT+c/R6Jxk5Uw2/lYafueoJm0baWdM=)
2: MG306zVy_XnsDe9avuTP6OQlaR4.roa (hash: eZ9MpR2ZT4wF57S821zouXormxfdjIGPXoURlUDpr+M=)
3: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: COxfvlsgcx7WmUj+SPq8Y1+sYS+Z+KkV5TKVfysOXN0=)
4: yA4t8VFR5w-UawfByzFjfg16sDc.roa (hash: mhRBFfLSkDyDoFbm3ZHCraYe+ogc6AsTxV7YQZpdaT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:9d:b5:0a:ed:43:c3:11:92:d3:91:8f:11:a6:a5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Oct 20 14:01:10 2026 GMT
Not After : Oct 21 14:01:10 2026 GMT
Subject: CN=98335c346b6d35053ccde510493b414bbea754ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:e9:0a:48:26:31:93:24:80:6f:fd:0f:c8:
96:42:35:dc:5f:cc:68:ab:06:ca:48:02:00:2f:60:
c2:07:5f:e1:f3:ff:f7:c6:38:d1:7e:1c:70:2d:74:
f8:d8:c9:d4:3f:96:4c:4a:f3:d3:a3:dc:3a:89:06:
33:38:6e:6a:d8:fb:61:6b:11:b9:33:7c:69:6a:44:
58:24:29:cd:e2:35:a4:e0:ab:b9:6b:67:bd:c8:83:
c5:cd:b0:58:77:57:b5:56:94:2c:82:70:cc:f7:09:
df:0f:cf:f9:16:59:0d:ef:0c:da:35:ae:b6:1c:49:
3f:6e:20:f7:29:94:4e:bc:ae:67:ca:51:3d:9a:13:
71:ae:ae:0e:5b:f6:4f:31:b1:a4:47:4c:dd:49:40:
27:7d:a5:ab:09:09:3d:46:59:92:2b:6c:a2:7c:81:
66:41:8e:44:3b:b2:7c:72:67:6f:4a:e4:b2:7e:88:
96:1e:52:20:9f:d6:44:0d:1d:17:06:1a:fc:09:19:
bc:1e:c8:0b:50:1d:ee:af:b7:ae:1f:a1:f0:dc:45:
81:79:ba:34:fe:fc:17:86:96:5c:2c:e0:7f:58:b9:
ab:fc:80:66:7a:e8:90:05:cd:62:ee:81:a1:96:cd:
3f:4a:18:a8:e6:fd:ca:7d:f3:89:da:2e:01:35:26:
05:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:33:5C:34:6B:6D:35:05:3C:CD:E5:10:49:3B:41:4B:BE:A7:54:AC
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:41:dd:37:37:b6:1a:86:37:04:b8:b0:4d:cc:0e:49:01:c0:
b4:e1:b6:af:42:ad:60:8d:d2:b4:8f:bf:58:0e:5c:4b:6a:d6:
37:f3:83:5b:3f:c2:cd:fb:cd:88:34:1b:df:30:87:3f:ef:18:
91:9b:54:68:a9:60:d8:31:29:5c:01:f7:49:51:12:33:a5:4d:
0b:fa:5b:b6:ca:06:02:7b:d9:09:82:8d:24:4f:bb:1c:7c:99:
db:d1:f4:53:81:3f:93:09:12:bd:df:fb:d3:1b:59:a1:46:0b:
b4:f6:a0:59:5b:77:6f:fe:7b:80:d3:ea:26:3e:8a:bc:b0:b6:
ad:b2:3b:c3:99:14:f7:76:d5:12:ab:f3:59:85:7d:56:2a:d1:
9e:7f:43:1c:0b:37:05:4c:e0:c8:de:67:b6:88:60:24:6c:f1:
e4:72:c5:a6:37:b6:c9:ad:7c:a2:db:3b:20:10:81:7f:ca:c8:
80:95:0b:ab:a1:d0:5a:19:12:2d:94:d3:87:0b:27:e3:ae:a9:
43:7c:ff:b5:31:a8:22:af:85:0f:f7:f8:7b:81:67:e5:67:82:
ed:00:62:4d:9f:74:e6:1b:b2:bc:34:14:e7:02:03:89:49:5f:
18:51:32:72:28:10:5f:6c:98:60:b5:03:58:fa:98:af:d1:b9:
a3:fb:92:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:47:30 2026 by rpki-client