Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
File: XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json)
Hash identifier: mDymrxIT8gY2bicFu6tBU5br/otPJWa85VmUX4bag+U=
Subject key identifier: B9:1F:41:4B:0A:48:67:10:B1:8C:03:E4:95:F4:B8:63:16:28:F6:FC
Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Certificate serial: 019D99992E500F03A3FD728BA63DD7EA42C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
Manifest number: 1323
Signing time: Fri 17 Apr 2026 04:00:46 +0000
Manifest this update: Fri 17 Apr 2026 04:00:46 +0000
Manifest next update: Sat 18 Apr 2026 04:00:46 +0000
Files and hashes: 1: LlXWpROIqtL6tp6Aj-IFy29MFjs.roa (hash: KdLr/tJ9VzR7ewN9N+GnPwm/+RI9By2q5ZnpA8EcZVY=)
2: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: ZF9df+XnGPuqH2judyai/GebnJVkv4eCKzjPPP+vIyg=)
3: YiSRyD3T9EqkxC_vsLTbpd4-1ic.roa (hash: rH3OH+nKD7gxgdOxb/Eod9szmTSLhYFd7UVaSZRZpws=)
4: v5AikuLbt2o2wZFx81AkxLKlbbE.roa (hash: 7KPccZgy5MWb3ejH0HLnxvwj1pO1ZpFKozpP20aOke4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:2e:50:0f:03:a3:fd:72:8b:a6:3d:d7:ea:42:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Validity
Not Before: Apr 17 04:00:46 2026 GMT
Not After : Apr 18 04:00:46 2026 GMT
Subject: CN=b91f414b0a486710b18c03e495f4b8631628f6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:f5:d6:58:1c:13:da:c2:2e:6f:9e:ac:8c:
52:8d:6e:ba:11:e6:6e:ae:18:44:73:d8:44:4c:4f:
cc:4e:48:11:7e:05:b5:39:ae:21:65:e4:76:af:10:
ee:9d:17:5a:27:0c:d8:2f:a9:c7:95:d7:94:3a:2c:
78:3f:6b:7a:92:ec:1e:0d:4d:90:2d:22:c2:dd:ec:
60:2a:d2:52:d5:e1:d4:cb:1e:be:00:f4:39:60:f1:
75:89:36:c2:63:56:6d:3e:e8:0b:72:a9:95:27:a4:
99:fb:64:74:c5:d2:d9:e6:ae:23:0b:80:22:95:09:
64:35:12:c8:2f:74:30:c6:27:8d:93:28:07:77:6a:
4c:b8:6b:62:f9:fd:e3:f1:51:67:c9:ca:8a:61:a8:
e8:db:4f:67:87:b6:d3:6a:15:82:0e:5e:56:33:04:
ab:98:bf:48:23:40:5c:e6:53:dd:45:1c:ba:55:9f:
99:54:79:4b:a2:57:ff:03:cd:bb:7e:68:67:b4:bf:
b2:4e:88:a4:7d:b8:5c:8a:4a:1b:b8:dc:4b:c0:7e:
58:ac:6c:df:c6:39:72:a9:57:a2:94:19:ae:b3:91:
44:10:5c:13:ae:e1:c7:50:1d:94:9f:a7:6d:42:b6:
e7:92:9a:16:6c:76:fb:96:f9:a0:e5:59:7b:0b:e5:
8d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1F:41:4B:0A:48:67:10:B1:8C:03:E4:95:F4:B8:63:16:28:F6:FC
X509v3 Authority Key Identifier:
keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ad:be:cf:9c:a1:a8:0e:d3:1a:67:36:12:00:3c:9b:16:76:
5b:ea:c4:82:f3:0f:44:4c:a1:82:0d:0d:bb:15:d9:f9:21:1d:
ab:62:7f:05:b9:15:6d:63:ea:3e:0c:5c:05:92:04:e6:27:0c:
f3:08:83:e7:e8:af:d5:d2:a5:aa:20:58:65:c8:2b:f4:b0:38:
13:d1:6c:c7:66:8d:61:37:b6:c2:a3:5b:eb:80:b4:29:b7:71:
f4:50:47:a1:91:25:39:2b:56:7c:31:45:95:01:5e:c9:4d:02:
28:b4:f4:21:d9:5f:ea:df:e7:d4:56:68:9e:4c:4d:88:05:ee:
95:e3:1f:c1:38:26:80:36:7c:da:ed:cd:40:c6:32:d0:fe:af:
f6:7d:1b:4d:73:41:31:0f:4b:d0:2f:c8:15:ab:1a:6a:24:76:
24:ff:87:72:26:2e:07:93:03:b6:b7:93:4c:58:46:e4:fc:68:
68:12:95:ed:87:02:19:fc:b1:dc:fd:ce:45:6b:42:69:68:c7:
6c:2a:31:fd:df:65:ce:ce:c8:72:54:c8:dd:e0:ba:d6:b1:f8:
8c:1b:cd:10:75:be:8a:84:66:06:6c:53:12:c6:28:69:fd:aa:
31:fb:d7:80:99:57:ac:a5:e7:38:09:93:59:ef:06:9a:ca:8b:
47:41:b8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:48:31 2026 by rpki-client