Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: 58CaLyuHdT6rwu3Sqyhi59nGiqAQW8z1nWxkszrwLWI=
Subject key identifier: 3D:87:34:4B:41:BB:04:64:F0:7A:2E:8E:75:6E:65:C2:95:60:02:C6
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 019CAA587843E635D0C98649C126429054DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 16BA
Signing time: Sun 01 Mar 2026 17:00:50 +0000
Manifest this update: Sun 01 Mar 2026 17:00:50 +0000
Manifest next update: Mon 02 Mar 2026 17:00:50 +0000
Files and hashes: 1: BSd1DfMbSh6BJ7RqQQ57J6iIn54.roa (hash: Hf/PRSH8627ldiT+c/R6Jxk5Uw2/lYafueoJm0baWdM=)
2: MG306zVy_XnsDe9avuTP6OQlaR4.roa (hash: eZ9MpR2ZT4wF57S821zouXormxfdjIGPXoURlUDpr+M=)
3: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: G7HMZA3JkGeHti304qfFFChyDIegXbMZ+ACxuZCQeoE=)
4: yA4t8VFR5w-UawfByzFjfg16sDc.roa (hash: mhRBFfLSkDyDoFbm3ZHCraYe+ogc6AsTxV7YQZpdaT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:78:43:e6:35:d0:c9:86:49:c1:26:42:90:54:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Mar 1 17:00:50 2026 GMT
Not After : Mar 2 17:00:50 2026 GMT
Subject: CN=3d87344b41bb0464f07a2e8e756e65c2956002c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:51:43:96:13:34:53:f8:f5:a1:aa:72:56:
e1:a2:48:27:be:45:ce:86:84:52:36:20:9e:d0:6e:
15:a1:a9:6a:a0:a3:85:d2:0c:bf:fe:7d:ad:90:25:
f5:6c:06:a9:d6:79:51:2f:8b:65:c8:fa:97:b9:33:
53:cb:b9:b0:6b:b6:03:89:68:90:0a:08:c8:ef:9f:
d5:7e:a9:10:8a:eb:3a:d8:1a:d2:8e:35:ce:31:8e:
75:84:72:03:c9:3d:d2:f4:a7:50:2f:f1:47:bb:9a:
37:e6:51:7b:a1:2c:65:7a:c2:56:92:1a:7d:32:95:
83:28:18:48:ce:87:9e:45:c7:d1:d6:63:f4:2d:c3:
91:49:38:f2:52:2e:b6:2d:be:ef:65:db:21:c4:7a:
a9:f4:17:75:e8:12:7f:61:bd:9c:c7:bf:33:74:fb:
15:b6:32:32:b7:59:be:4e:49:fd:fd:fa:1c:f3:34:
73:12:55:1a:14:de:59:c2:23:0c:a1:00:a9:36:fb:
4f:4b:3d:11:b2:73:47:0e:72:f7:35:7d:2b:c7:59:
77:54:75:c9:ed:36:e2:2f:c4:f0:96:18:7e:db:d2:
b9:8d:57:f8:43:54:fe:fb:e2:16:e8:1b:da:b0:f1:
c4:98:76:0d:b1:e6:69:ab:b2:62:c4:0f:fa:b1:f2:
90:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:87:34:4B:41:BB:04:64:F0:7A:2E:8E:75:6E:65:C2:95:60:02:C6
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ce:20:72:9f:82:18:5c:25:f0:5c:a7:c5:8f:9f:a1:6a:fa:
33:25:46:4b:26:67:79:66:d6:da:c8:e3:23:98:06:17:01:a2:
6e:31:7e:58:27:01:8b:58:13:e0:5a:d3:65:89:71:c6:ea:16:
f5:20:9b:f5:44:69:bd:70:11:63:e3:a0:45:15:8f:fb:48:2f:
87:c8:fc:41:63:60:b1:72:62:4b:cb:b5:b4:94:df:a6:1d:07:
fd:2e:78:62:f1:21:fd:a1:3d:55:f0:ab:21:6b:32:af:b9:bb:
cf:a5:e2:60:0f:26:9d:1b:35:67:6f:e9:e1:0d:26:3c:3f:13:
85:80:88:ae:ed:cb:36:6d:04:63:d5:ce:e9:37:7e:3f:d2:06:
30:cb:ea:0e:cf:85:7c:f6:c1:73:e3:8a:9c:67:a2:64:44:08:
e4:50:b1:58:d0:9d:06:5d:7c:a7:45:8d:d5:22:88:4e:7d:e9:
4b:2b:46:11:01:21:53:d0:53:5f:19:9c:cd:a9:10:1d:96:29:
6c:9e:eb:77:9f:51:55:3a:5f:fa:79:e5:07:df:65:29:45:e4:
4b:db:d9:f4:83:73:ab:55:88:8d:f7:e3:4f:64:fb:59:5a:c3:
3c:33:46:54:f3:70:78:e3:1e:00:97:6c:e9:e8:5a:f1:ee:e0:
02:09:3a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:11 2026 by rpki-client