Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: DVHZTSvmWtjwOp1QZPAsTfXGR4yWnQW6P8Xxg/Tgx+0=
Subject key identifier: DE:10:38:F5:07:0C:70:59:E8:48:E9:AA:FA:56:99:2B:FB:4D:35:F9
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 019FAAF52D21281EAC98F9C296C664FFD746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 1848
Signing time: Tue 28 Jul 2026 23:00:22 +0000
Manifest this update: Tue 28 Jul 2026 23:00:22 +0000
Manifest next update: Wed 29 Jul 2026 23:00:22 +0000
Files and hashes: 1: BSd1DfMbSh6BJ7RqQQ57J6iIn54.roa (hash: Hf/PRSH8627ldiT+c/R6Jxk5Uw2/lYafueoJm0baWdM=)
2: MG306zVy_XnsDe9avuTP6OQlaR4.roa (hash: eZ9MpR2ZT4wF57S821zouXormxfdjIGPXoURlUDpr+M=)
3: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: MDMRe5O81xnR/4MlPMuedmkvLtj/WhA0H/eLY8cLWq0=)
4: yA4t8VFR5w-UawfByzFjfg16sDc.roa (hash: mhRBFfLSkDyDoFbm3ZHCraYe+ogc6AsTxV7YQZpdaT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:2d:21:28:1e:ac:98:f9:c2:96:c6:64:ff:d7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Jul 28 23:00:22 2026 GMT
Not After : Jul 29 23:00:22 2026 GMT
Subject: CN=de1038f5070c7059e848e9aafa56992bfb4d35f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:14:a5:6c:26:27:a8:26:f0:74:7c:86:40:
ac:45:d9:a5:b4:d6:2c:b0:0e:38:47:84:61:42:bc:
59:c4:56:4e:6d:c2:74:b6:ce:8d:49:f5:b0:ab:11:
ad:1b:30:06:5f:66:03:15:75:78:90:b7:96:57:72:
7f:09:5a:97:90:97:b6:11:16:21:ab:b8:5d:66:52:
e7:d1:7f:7c:95:c7:43:99:02:5b:fc:b3:c1:60:52:
bd:97:5c:fa:ce:93:52:c1:95:b9:24:12:cf:c8:e3:
74:08:b3:7e:2a:4f:12:3e:9e:1d:a9:2d:8a:9e:ab:
c3:55:5f:bf:4c:bb:36:ce:e5:e3:77:49:da:de:fd:
ad:da:28:5a:5a:11:e1:3f:1f:c0:ec:fe:1f:09:17:
99:5b:56:bf:2c:e3:85:84:81:dd:84:25:b1:d3:3b:
f1:34:94:4b:d5:17:8e:35:96:9a:67:3f:55:83:ac:
1b:61:18:60:aa:37:76:42:91:a5:3b:f4:aa:d4:4e:
ad:12:4d:a9:be:29:12:b5:04:57:15:7a:2e:a0:7c:
9c:52:d4:f1:7b:19:24:87:34:1f:52:c8:67:3c:25:
53:00:66:6d:40:39:2d:cb:a3:66:79:d2:53:a7:e2:
82:b0:f1:62:ab:c4:9a:8e:75:8b:30:98:dd:02:37:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:10:38:F5:07:0C:70:59:E8:48:E9:AA:FA:56:99:2B:FB:4D:35:F9
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ff:47:81:44:96:ab:74:42:5d:82:da:9b:e9:39:a0:e3:50:
3f:5b:ac:39:cf:56:22:26:fa:55:02:3a:3f:29:f2:d1:2f:74:
4d:60:51:45:e1:42:9c:f6:21:2f:ff:89:05:4f:31:78:45:21:
10:5d:60:04:f9:14:7e:65:ed:52:48:02:ff:c6:fc:d3:ec:1d:
18:e8:57:3c:99:fe:e7:c7:d7:aa:97:1d:c5:66:c9:95:f7:b5:
9d:49:00:bb:10:e1:0a:50:d0:f3:cb:3f:0b:39:3e:8c:5d:fa:
da:91:f7:e8:47:a3:28:fc:53:3c:75:d8:ba:78:74:f9:69:5f:
af:88:55:8a:d5:f4:bd:e5:3b:33:65:0e:2f:bc:1e:44:88:6a:
1c:0b:0e:72:cf:ad:9e:f2:3a:82:64:e2:3b:20:fa:1e:a5:2b:
6d:c7:2f:fd:eb:d5:ae:25:95:e7:72:c3:13:d5:62:13:e0:d9:
8d:74:1e:4e:af:5d:68:d8:51:fa:ee:de:0d:c7:f4:c6:41:67:
22:f4:23:4f:ff:89:df:34:a5:eb:c7:6b:ae:32:dd:1c:d3:f1:
72:e3:73:81:91:4d:09:08:0c:39:2c:53:10:7c:05:2e:35:98:
d3:01:5f:91:aa:95:ad:c9:03:a6:44:a8:fb:7e:7f:77:59:41:
7f:35:4a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:06:05 2026 by rpki-client