Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
File: XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json)
Hash identifier: 27x/FnPOrM9tewYgUJkHj5nUMElSSRbAj/PSsL9MiAM=
Subject key identifier: 18:5A:A3:EF:A1:BE:98:C1:79:E5:5C:C7:1C:59:3D:EB:FE:69:2B:39
Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Certificate serial: 019CAC0FDF1EDD3A2149260E18EFDE0D05A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
Manifest number: 12A8
Signing time: Mon 02 Mar 2026 01:00:47 +0000
Manifest this update: Mon 02 Mar 2026 01:00:47 +0000
Manifest next update: Tue 03 Mar 2026 01:00:47 +0000
Files and hashes: 1: LlXWpROIqtL6tp6Aj-IFy29MFjs.roa (hash: KdLr/tJ9VzR7ewN9N+GnPwm/+RI9By2q5ZnpA8EcZVY=)
2: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: aATWPiXr0JpWnl531P3+lTtxBZ3p/UShi/ForgpxX+A=)
3: YiSRyD3T9EqkxC_vsLTbpd4-1ic.roa (hash: rH3OH+nKD7gxgdOxb/Eod9szmTSLhYFd7UVaSZRZpws=)
4: v5AikuLbt2o2wZFx81AkxLKlbbE.roa (hash: 7KPccZgy5MWb3ejH0HLnxvwj1pO1ZpFKozpP20aOke4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:df:1e:dd:3a:21:49:26:0e:18:ef:de:0d:05:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Validity
Not Before: Mar 2 01:00:47 2026 GMT
Not After : Mar 3 01:00:47 2026 GMT
Subject: CN=185aa3efa1be98c179e55cc71c593debfe692b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5b:f2:53:7c:87:e6:03:9d:1e:ff:dc:8e:cc:
62:b5:13:01:39:b9:d4:38:98:62:40:b4:f4:e2:46:
31:77:3f:0a:6a:9a:ae:70:a8:b4:e3:7f:68:18:5c:
a0:eb:06:58:d2:d9:8e:11:40:47:d0:de:a2:52:5d:
a4:d8:cc:5c:b6:e7:5f:e0:71:7c:88:1d:05:76:fb:
e5:a7:16:d4:bc:78:ff:1e:fd:9c:b4:bf:59:da:18:
54:a7:5e:62:9b:08:76:b0:85:9b:47:64:7d:2e:39:
68:43:ec:36:17:79:01:ae:9f:3d:dc:ba:c0:3d:03:
63:31:9d:f5:79:b3:c1:e0:2f:73:9a:ce:b8:94:e3:
f2:73:2c:a9:a3:c0:50:ba:60:b1:ba:ad:cc:fa:be:
44:fb:89:ed:a0:9d:7c:6a:8b:cd:6c:1f:bb:50:ca:
fa:95:8c:75:8b:c6:af:c0:50:79:65:e8:36:8f:4a:
dd:0f:ad:5a:fe:02:d1:29:24:be:25:76:b5:e2:a3:
66:c9:a3:11:10:ef:55:d0:19:13:b8:43:2d:24:27:
18:28:80:b0:74:ef:3c:06:d3:9c:a6:d0:8b:8c:31:
6d:fa:f2:0e:e1:b0:ff:e3:76:e0:0a:39:b5:89:29:
26:ed:48:ee:88:35:1b:1d:2c:4c:d1:c3:ca:33:f7:
e2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5A:A3:EF:A1:BE:98:C1:79:E5:5C:C7:1C:59:3D:EB:FE:69:2B:39
X509v3 Authority Key Identifier:
keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c0:42:28:b2:d6:07:b9:c3:e9:f6:3b:20:4a:60:5d:6b:96:
87:eb:fa:91:4a:10:f8:9d:6a:20:64:3b:9a:2a:07:02:a4:c7:
89:0e:b5:f1:d6:0a:66:63:90:7b:5b:78:d3:78:c7:69:25:d5:
af:0d:59:4f:60:43:44:b1:d4:4d:78:1d:77:9e:4e:16:93:87:
83:ee:19:fe:d0:d8:2f:96:b7:08:c4:28:2a:ef:ff:04:9f:59:
d8:d9:78:7c:e8:7d:df:62:ec:75:dd:21:0e:a8:7b:f1:c5:07:
e9:52:96:d0:30:28:d4:a8:b2:27:63:ff:35:78:71:7b:f3:aa:
4d:ef:7f:4b:b8:a9:cf:2e:d5:13:8b:4f:65:d4:8d:e1:4b:0c:
7c:f3:7e:ee:e6:c5:ba:1c:fe:97:4c:3c:62:7a:bf:50:a4:2b:
af:ad:de:40:b8:56:c8:09:06:ad:82:a4:45:39:4b:13:69:f3:
38:9b:eb:df:5c:b5:05:6d:96:96:47:31:b4:4d:45:b5:cc:eb:
8a:47:e0:66:4d:49:03:54:c8:ee:c9:29:6a:ce:20:22:0c:1a:
39:b3:00:3a:53:1d:a8:77:49:29:2d:01:c3:5f:dc:48:2b:25:
f2:51:1d:b7:7c:c0:8d:57:94:90:ab:e6:c6:78:40:53:d0:e2:
87:66:83:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD98e3TohSSYOGO/eDQWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzk5ZmJhOWFhZTlkMmQ2ZmZlNTJhZThjNzRhZTM4ZmM2
YzFhZjEwHhcNMjYwMzAyMDEwMDQ3WhcNMjYwMzAzMDEwMDQ3WjAzMTEwLwYDVQQD
EygxODVhYTNlZmExYmU5OGMxNzllNTVjYzcxYzU5M2RlYmZlNjkyYjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFvyU3yH5gOdHv/cjsxitRMBObnU
OJhiQLT04kYxdz8KapqucKi0439oGFyg6wZY0tmOEUBH0N6iUl2k2Mxctudf4HF8
iB0FdvvlpxbUvHj/Hv2ctL9Z2hhUp15imwh2sIWbR2R9LjloQ+w2F3kBrp893LrA
PQNjMZ31ebPB4C9zms64lOPycyypo8BQumCxuq3M+r5E+4ntoJ18aovNbB+7UMr6
lYx1i8avwFB5Zeg2j0rdD61a/gLRKSS+JXa14qNmyaMREO9V0BkTuEMtJCcYKICw
dO88BtOcptCLjDFt+vIO4bD/43bgCjm1iSkm7UjuiDUbHSxM0cPKM/fiiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhao++hvpjBeeVcxxxZPev+aSs5MB8GA1UdIwQY
MBaAFF45n7qarp0tb/5Srox0rjj8bBrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iOTFkMDUtNmEwMy00MGVkLWE5ODMt
YmQ4MDlkOWRlZGI5LzEvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iOTFkMDUtNmEwMy00MGVkLWE5ODMtYmQ4MDlkOWRlZGI5
LzEvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScBCKLLW
B7nD6fY7IEpgXWuWh+v6kUoQ+J1qIGQ7mioHAqTHiQ618dYKZmOQe1t403jHaSXV
rw1ZT2BDRLHUTXgdd55OFpOHg+4Z/tDYL5a3CMQoKu//BJ9Z2Nl4fOh932Lsdd0h
Dqh78cUH6VKW0DAo1KiyJ2P/NXhxe/OqTe9/S7ipzy7VE4tPZdSN4UsMfPN+7ubF
uhz+l0w8Ynq/UKQrr63eQLhWyAkGrYKkRTlLE2nzOJvr31y1BW2WlkcxtE1Ftczr
ikfgZk1JA1TI7skpas4gIgwaObMAOlMdqHdJKS0Bw1/cSCsl8lEdt3zAjVeUkKvm
xnhAU9Dih2aD8Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:26 2026 by rpki-client