Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: WpwcuV5Wxbq+7j2vf+IJ1dHFOX+9cgiz7GFEFN0512U=
Subject key identifier: 46:BC:C4:5F:33:19:E7:94:35:EC:7E:8A:13:54:43:5E:0B:16:38:5A
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 019D97E1902AB9DE2C53972D4B9774A48072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 1735
Signing time: Thu 16 Apr 2026 20:00:35 +0000
Manifest this update: Thu 16 Apr 2026 20:00:35 +0000
Manifest next update: Fri 17 Apr 2026 20:00:35 +0000
Files and hashes: 1: BSd1DfMbSh6BJ7RqQQ57J6iIn54.roa (hash: Hf/PRSH8627ldiT+c/R6Jxk5Uw2/lYafueoJm0baWdM=)
2: MG306zVy_XnsDe9avuTP6OQlaR4.roa (hash: eZ9MpR2ZT4wF57S821zouXormxfdjIGPXoURlUDpr+M=)
3: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: xhOoHhs/iUb0Q2hKwVKBXZc/XfkT6/iMadgsuy1PQS0=)
4: yA4t8VFR5w-UawfByzFjfg16sDc.roa (hash: mhRBFfLSkDyDoFbm3ZHCraYe+ogc6AsTxV7YQZpdaT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:90:2a:b9:de:2c:53:97:2d:4b:97:74:a4:80:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Apr 16 20:00:35 2026 GMT
Not After : Apr 17 20:00:35 2026 GMT
Subject: CN=46bcc45f3319e79435ec7e8a1354435e0b16385a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:ba:9b:bb:cb:2e:00:33:9f:79:89:5c:07:
09:26:d2:78:72:de:0b:09:a7:3d:2d:18:65:8e:9f:
12:e7:1c:21:2f:fd:71:10:91:e5:d0:ef:3c:cd:1c:
10:78:6c:f3:11:2d:f5:08:e6:83:54:b0:63:f3:33:
c9:1c:a1:fc:04:89:3b:a5:54:88:d0:60:03:d8:08:
d7:a3:eb:5b:37:74:86:15:b3:96:0b:57:a2:9d:7a:
ca:fd:fe:03:cd:3f:7e:7c:47:3a:a8:4e:47:9d:52:
c9:30:0e:01:44:7d:fc:9b:cb:9a:8b:0e:58:ed:6d:
9c:58:f8:aa:93:e9:b4:ab:f0:2b:be:54:5c:bc:fe:
ce:55:5c:f6:18:44:ea:1a:66:16:1a:32:52:08:84:
f3:46:2d:30:f9:e7:94:99:4e:a0:47:59:a2:cb:24:
9d:34:47:19:9d:bd:6f:ff:62:92:fd:4f:7d:c2:0a:
46:7f:8e:b0:5c:7c:3b:3f:05:4d:42:d9:5e:ff:8a:
08:5b:72:48:dc:04:fa:3b:d5:a2:cc:d0:36:bb:b4:
ad:94:92:8c:c4:a0:33:db:64:af:d3:28:8f:54:6a:
8f:2e:58:9c:52:29:c6:cb:09:92:c1:f2:75:1a:7b:
b9:61:ff:9b:9c:c3:11:77:39:84:ef:90:c5:65:4f:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BC:C4:5F:33:19:E7:94:35:EC:7E:8A:13:54:43:5E:0B:16:38:5A
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8b:28:aa:3b:91:4c:1f:5a:fc:28:fa:c1:b9:cd:f0:94:43:
0c:f4:64:21:46:27:dd:8f:b1:e9:5b:1f:1c:8c:eb:ad:20:ed:
f1:c1:63:ce:1b:80:16:55:ad:14:24:b9:a2:76:77:a6:d8:cf:
75:03:21:67:9c:47:0d:91:28:1d:65:92:c6:ca:0c:ff:98:67:
96:7a:d7:10:88:e3:25:92:b9:4f:af:5b:4c:cf:d3:b0:23:94:
3e:e5:f9:14:f7:d8:13:a3:24:d7:cd:1c:e7:79:ae:8e:ad:16:
51:fe:48:8b:26:f6:9f:d1:16:c8:5f:75:a0:c7:5a:98:70:6c:
30:de:88:0e:3d:e5:05:48:d3:83:1e:63:5f:2b:ef:61:43:e8:
2e:be:99:d5:ad:0c:48:58:ff:cd:48:21:bf:6b:75:6c:20:0d:
9c:87:31:9d:4d:1f:42:99:67:f5:cb:8c:48:f0:9e:e3:ea:ab:
af:89:7e:b0:72:2e:65:6b:de:6d:4d:ad:8b:53:66:78:a5:44:
c8:55:79:3b:8b:c8:9e:d1:63:d8:36:55:a7:4f:c5:e7:c9:d9:
b9:62:cf:9b:c7:db:90:c6:1a:1d:f6:78:86:c1:9a:c7:ab:0b:
8c:9f:29:12:a2:51:0a:19:4a:d0:2b:bc:d4:5b:cf:64:50:ae:
c4:18:dc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:40:46 2026 by rpki-client