Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: JjlvfSJnDTLNf8HYHih1woenPgR20ksfbLdg7wtysq4=
Subject key identifier: BD:6F:6E:5C:54:94:E8:EB:1E:8D:5F:D8:A8:11:C6:98:BC:B6:9F:EE
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 01A0D07F7C8D316822408A906D4038E044E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 18E0
Signing time: Wed 23 Sep 2026 23:00:10 +0000
Manifest this update: Wed 23 Sep 2026 23:00:10 +0000
Manifest next update: Thu 24 Sep 2026 23:00:10 +0000
Files and hashes: 1: BSd1DfMbSh6BJ7RqQQ57J6iIn54.roa (hash: Hf/PRSH8627ldiT+c/R6Jxk5Uw2/lYafueoJm0baWdM=)
2: MG306zVy_XnsDe9avuTP6OQlaR4.roa (hash: eZ9MpR2ZT4wF57S821zouXormxfdjIGPXoURlUDpr+M=)
3: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: qBDiNnvFGAPh5ueE8M4S5OxwpoWplukQ81QfgPMOMfg=)
4: yA4t8VFR5w-UawfByzFjfg16sDc.roa (hash: mhRBFfLSkDyDoFbm3ZHCraYe+ogc6AsTxV7YQZpdaT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:7c:8d:31:68:22:40:8a:90:6d:40:38:e0:44:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Sep 23 23:00:10 2026 GMT
Not After : Sep 24 23:00:10 2026 GMT
Subject: CN=bd6f6e5c5494e8eb1e8d5fd8a811c698bcb69fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:26:eb:f7:18:0d:15:84:6a:0e:ca:a2:68:e2:
59:ff:69:1c:36:b6:9f:85:2f:73:ce:2d:c3:74:d0:
88:9d:68:06:b9:72:3f:26:9c:fc:a8:74:e0:36:52:
61:4d:d2:dd:0a:0c:a4:6c:33:d9:10:7a:98:f4:72:
6c:a4:32:8c:92:52:bf:5b:6f:27:f0:19:3e:13:c4:
41:22:b1:47:ec:4f:9e:63:b1:8b:dc:35:20:49:1a:
6f:90:70:00:d4:1f:35:db:05:55:66:44:d8:0a:9f:
75:e7:f0:9b:ab:7f:47:0d:c8:d8:b0:9d:01:77:e6:
fa:a2:9a:4e:e8:5d:3c:78:f9:49:3a:be:74:5f:0a:
e0:c1:04:6f:36:d5:23:c7:24:9b:02:68:62:c8:09:
95:c0:bc:42:85:d6:17:73:95:92:5c:b4:cc:78:22:
ee:cc:ba:df:55:70:e1:df:28:a8:eb:cc:44:55:89:
53:de:97:19:79:77:72:11:ee:83:71:33:62:97:6c:
d9:3a:fb:91:c2:94:04:a3:73:69:db:95:b1:56:78:
a7:6a:e3:8b:9e:34:02:ec:ba:47:86:d8:f0:d7:41:
d0:5b:51:d0:3d:fa:13:f4:a4:2e:5f:c4:c4:cf:66:
1a:90:b9:b9:a4:34:0c:ac:7c:f1:65:40:e1:ba:45:
4a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6F:6E:5C:54:94:E8:EB:1E:8D:5F:D8:A8:11:C6:98:BC:B6:9F:EE
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e9:bb:5a:2c:af:22:55:96:36:78:e0:2c:13:0f:f9:f8:36:
43:92:2f:82:6e:54:3f:d3:37:7d:ff:66:ff:ac:1f:9b:9d:32:
07:26:48:a9:1b:23:5b:3a:4d:0d:26:06:b3:9c:7a:1e:36:81:
0a:c4:c4:52:3b:d6:54:48:06:19:34:55:4b:ec:a4:b3:aa:37:
8d:a7:c4:61:e9:d9:f3:0d:80:45:03:89:e3:f1:8b:e9:d5:30:
71:c6:26:71:8b:40:4c:8c:a1:e5:84:28:23:82:7c:9d:8a:be:
40:51:00:0e:da:8f:c2:dc:23:64:59:55:44:96:b3:2e:ca:c1:
f8:6c:c7:4c:90:7e:f4:55:e7:19:f7:35:9f:8e:fb:3e:63:6d:
a5:70:65:70:bc:d6:82:11:0c:83:a9:b2:d6:47:8a:48:bb:8c:
a9:60:19:0a:15:fe:21:99:0d:1a:0f:4a:ce:ce:2d:ba:91:27:
f0:de:83:69:a0:c5:8f:d3:fe:74:6c:11:69:9e:2d:25:ee:c0:
eb:e3:cc:5c:12:d0:34:b3:c3:17:a2:27:f9:ba:7f:56:6e:84:
ca:42:f4:4e:ec:0d:9a:7e:74:69:a8:26:56:c7:c0:e8:a2:1b:
35:57:12:83:f7:89:6c:b0:35:48:2e:e9:af:10:97:b9:32:38:
2e:25:87:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:04:10 2026 by rpki-client