Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: 8MGQUECESNk0qMPuS+pPzlJX91PQ8jxSy0tousyculQ=
Subject key identifier: 40:3E:6B:A2:DE:9E:2B:0B:35:0D:16:97:F3:17:F3:79:36:CE:66:87
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 019EBF5B1F10AEC244980B2CCB180A1C900D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 17CE
Signing time: Sat 13 Jun 2026 05:01:20 +0000
Manifest this update: Sat 13 Jun 2026 05:01:20 +0000
Manifest next update: Sun 14 Jun 2026 05:01:20 +0000
Files and hashes: 1: BSd1DfMbSh6BJ7RqQQ57J6iIn54.roa (hash: Hf/PRSH8627ldiT+c/R6Jxk5Uw2/lYafueoJm0baWdM=)
2: MG306zVy_XnsDe9avuTP6OQlaR4.roa (hash: eZ9MpR2ZT4wF57S821zouXormxfdjIGPXoURlUDpr+M=)
3: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: w03c5hjNjc3LduyVWwK0NzNp466oGqywAyyr83sNqOY=)
4: yA4t8VFR5w-UawfByzFjfg16sDc.roa (hash: mhRBFfLSkDyDoFbm3ZHCraYe+ogc6AsTxV7YQZpdaT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:1f:10:ae:c2:44:98:0b:2c:cb:18:0a:1c:90:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Jun 13 05:01:20 2026 GMT
Not After : Jun 14 05:01:20 2026 GMT
Subject: CN=403e6ba2de9e2b0b350d1697f317f37936ce6687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:26:73:73:1f:e5:37:59:a7:ee:70:ba:9f:
c4:c5:a4:b1:96:ca:cf:cc:19:a4:20:d1:cb:cd:5e:
6d:1b:e1:78:58:28:60:fd:95:e1:36:06:12:43:be:
29:68:25:52:dc:66:5f:5d:4b:fe:d4:96:bb:79:e0:
0b:e8:9b:06:4c:44:87:aa:53:d8:ac:07:0d:67:a1:
41:68:0f:4d:bf:00:a5:dd:83:77:0e:50:9b:40:7b:
a8:76:d6:92:9b:11:6b:7e:cc:79:63:6e:b1:df:58:
f4:03:5a:d4:9c:9e:8e:6d:63:71:8a:20:2f:97:0e:
13:10:50:04:de:aa:87:aa:90:7f:e6:27:2c:ba:a1:
f8:cf:f9:64:91:cc:60:58:9b:e6:80:32:ff:92:67:
12:9c:a6:8c:e0:cb:6c:ec:f8:f5:66:88:3e:11:24:
ce:4d:8a:ea:22:ca:5b:71:20:b2:fe:7c:0b:59:cb:
ed:7c:42:fe:b9:95:aa:03:02:90:2b:6f:0f:57:fe:
1b:76:f5:89:c5:9a:b4:1b:2d:b7:4b:60:ec:72:40:
a0:e2:14:a3:61:1c:c4:4d:25:47:cb:a8:dc:a7:e7:
d7:cc:95:c5:4f:e4:32:9a:4c:0c:4a:8d:67:2d:a5:
34:b4:a2:39:29:84:bf:93:e2:78:5b:61:04:2f:97:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3E:6B:A2:DE:9E:2B:0B:35:0D:16:97:F3:17:F3:79:36:CE:66:87
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:cb:7d:86:63:ac:b2:cf:5b:35:a3:62:53:e8:8e:1b:b9:9f:
e9:d4:1e:24:8f:e0:18:e1:d9:ce:6c:b9:0b:a7:9e:db:50:64:
60:4e:65:9a:86:0d:28:86:c6:22:82:75:21:5e:df:fc:9e:4a:
2f:3b:1a:aa:27:ac:1b:b3:73:ac:73:48:f4:a7:e3:35:96:b1:
af:a2:c1:9c:00:3e:bd:53:1a:3b:10:52:f3:69:a5:25:66:79:
1b:83:37:a1:d1:dd:9f:43:02:69:80:c1:8a:d9:f0:0f:ec:27:
d3:30:4f:23:9f:6a:f7:ca:20:65:e8:d3:01:1c:8b:af:82:08:
57:18:30:de:b0:af:a1:8f:63:3f:29:9e:8e:13:55:35:76:da:
25:98:fa:4e:b7:11:33:0e:7c:98:6d:12:1d:11:41:6e:69:fe:
d0:ba:ee:71:f7:a1:74:09:4a:57:20:cd:2f:05:03:1b:03:4c:
a0:38:18:da:74:a5:47:b1:cc:a8:b4:71:56:a0:52:86:6b:a7:
a6:20:bb:d3:20:2c:d3:30:55:be:ea:08:5b:ca:15:41:bb:5f:
6d:6c:a1:01:65:ce:b5:1a:3b:8f:72:d4:9f:64:47:87:0a:7e:
0a:c1:b5:7f:3a:dc:29:e3:43:8d:37:3c:6e:2f:bf:1a:4f:da:
3d:0f:41:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/Wx8QrsJEmAssyxgKHJANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZmIwNzRkNDdiN2UwYmM4OTFlZDA2ZWE4ZmM2N2UzOGVj
ZjUwYTEwHhcNMjYwNjEzMDUwMTIwWhcNMjYwNjE0MDUwMTIwWjAzMTEwLwYDVQQD
Eyg0MDNlNmJhMmRlOWUyYjBiMzUwZDE2OTdmMzE3ZjM3OTM2Y2U2Njg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHgmc3Mf5TdZp+5wup/ExaSxlsrP
zBmkINHLzV5tG+F4WChg/ZXhNgYSQ74paCVS3GZfXUv+1Ja7eeAL6JsGTESHqlPY
rAcNZ6FBaA9NvwCl3YN3DlCbQHuodtaSmxFrfsx5Y26x31j0A1rUnJ6ObWNxiiAv
lw4TEFAE3qqHqpB/5icsuqH4z/lkkcxgWJvmgDL/kmcSnKaM4Mts7Pj1Zog+ESTO
TYrqIspbcSCy/nwLWcvtfEL+uZWqAwKQK28PV/4bdvWJxZq0Gy23S2DsckCg4hSj
YRzETSVHy6jcp+fXzJXFT+QymkwMSo1nLaU0tKI5KYS/k+J4W2EEL5cj1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEA+a6LenisLNQ0Wl/MX83k2zmaHMB8GA1UdIwQY
MBaAFF37B01Ht+C8iR7Qbqj8Z+OOz1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80MmZjOTItMTY2My00Njg4LWEzMWQt
Y2Y2YTYzZTRlZmI2LzEvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi80MmZjOTItMTY2My00Njg4LWEzMWQtY2Y2YTYzZTRlZmI2
LzEvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMt9hmOs
ss9bNaNiU+iOG7mf6dQeJI/gGOHZzmy5C6ee21BkYE5lmoYNKIbGIoJ1IV7f/J5K
LzsaqiesG7NzrHNI9KfjNZaxr6LBnAA+vVMaOxBS82mlJWZ5G4M3odHdn0MCaYDB
itnwD+wn0zBPI59q98ogZejTARyLr4IIVxgw3rCvoY9jPymejhNVNXbaJZj6TrcR
Mw58mG0SHRFBbmn+0LrucfehdAlKVyDNLwUDGwNMoDgY2nSlR7HMqLRxVqBShmun
piC70yAs0zBVvuoIW8oVQbtfbWyhAWXOtRo7j3LUn2RHhwp+CsG1fzrcKeNDjTc8
bi+/Gk/aPQ9BdA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:16:08 2026 by rpki-client