Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
File: XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json)
Hash identifier: Kz3/0/NSj+hR2si5NDQFEfTMfhCV3euhpB1P38smAow=
Subject key identifier: CC:1F:68:57:73:AF:21:9B:CC:9B:FA:6C:0A:FE:6F:0B:E5:71:E3:37
Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Certificate serial: 01A0E399D2F9004E58BC5AAD103F86D826B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
Manifest number: 14D7
Signing time: Sun 27 Sep 2026 16:01:43 +0000
Manifest this update: Sun 27 Sep 2026 16:01:43 +0000
Manifest next update: Mon 28 Sep 2026 16:01:43 +0000
Files and hashes: 1: LlXWpROIqtL6tp6Aj-IFy29MFjs.roa (hash: KdLr/tJ9VzR7ewN9N+GnPwm/+RI9By2q5ZnpA8EcZVY=)
2: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: Km0AbHEApre6ST9EcayPj/nI5PSf5zMWIW5wUOhTjZE=)
3: YiSRyD3T9EqkxC_vsLTbpd4-1ic.roa (hash: rH3OH+nKD7gxgdOxb/Eod9szmTSLhYFd7UVaSZRZpws=)
4: v5AikuLbt2o2wZFx81AkxLKlbbE.roa (hash: 7KPccZgy5MWb3ejH0HLnxvwj1pO1ZpFKozpP20aOke4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:d2:f9:00:4e:58:bc:5a:ad:10:3f:86:d8:26:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Validity
Not Before: Sep 27 16:01:43 2026 GMT
Not After : Sep 28 16:01:43 2026 GMT
Subject: CN=cc1f685773af219bcc9bfa6c0afe6f0be571e337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:05:74:50:4f:d7:78:e2:b6:49:56:fb:f5:
b6:29:29:7a:ae:30:bc:35:cb:2f:89:fd:77:c9:98:
98:2c:12:95:2e:21:04:7e:5c:c1:c3:92:4e:65:f8:
80:92:48:45:60:8e:86:b1:28:32:19:25:4f:d7:af:
b4:8a:e1:6f:03:34:94:b7:7f:92:b9:5f:a4:05:2c:
4d:72:79:04:1c:f7:56:8d:ce:2c:e5:86:3b:f2:07:
54:e2:f5:9b:a1:bd:8e:01:f7:1d:37:c8:db:68:4a:
75:b8:ff:eb:85:b9:de:9c:2d:87:ae:12:01:a2:8d:
4b:e5:b8:1a:d2:8f:4f:46:05:98:43:b5:e4:69:fc:
de:49:07:23:83:dc:6f:c6:b6:13:47:e0:0f:2d:c9:
5d:a6:28:67:b6:d3:34:db:84:e7:3d:25:1b:c4:3a:
d4:95:a4:d7:46:ea:31:c1:c6:26:57:f5:e2:b0:6e:
2e:4b:f3:68:2f:64:af:bf:55:4a:82:ab:15:0a:2a:
9b:e9:80:80:d9:6e:10:62:2c:9f:25:aa:6a:53:6f:
35:b7:50:e1:6f:c4:d9:6a:74:f0:18:cb:3f:9f:f6:
70:66:20:a8:51:aa:f5:2b:2c:ce:ea:36:b8:51:91:
a0:56:3e:d8:49:f5:91:13:09:95:63:b3:ee:95:c1:
7d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1F:68:57:73:AF:21:9B:CC:9B:FA:6C:0A:FE:6F:0B:E5:71:E3:37
X509v3 Authority Key Identifier:
keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e0:9d:90:29:9b:6c:b5:f3:39:48:5f:dc:b0:79:2c:ca:c1:
70:82:1e:e3:1d:d7:28:15:67:5b:53:30:ec:2f:d0:df:8b:c9:
ea:da:42:27:a6:53:76:55:8e:3e:76:5c:da:9a:33:6a:90:0c:
9b:a7:52:f2:ae:35:67:cf:b8:f2:88:27:01:c4:4f:e8:4d:27:
d1:d3:38:25:dc:7b:42:ca:55:40:60:7b:ae:92:b6:c5:ef:17:
f9:29:e2:d9:a1:4c:2c:c7:e4:20:be:74:5b:d4:e3:36:a6:7f:
c0:05:ff:98:c5:26:a0:7a:a6:59:3b:02:67:fe:7b:c5:74:47:
f2:ce:4a:0a:0d:43:6b:8e:8b:31:26:0d:75:80:ba:24:55:47:
b0:58:90:be:4a:69:54:7b:43:52:b4:5a:a5:91:66:4d:13:00:
c8:ec:86:59:3a:4b:34:5f:74:08:04:20:b2:5d:26:55:06:05:
b4:20:a7:3e:41:5d:75:c1:31:9f:95:e0:2a:95:93:ab:38:cf:
5c:f0:99:f9:98:a8:6e:23:da:b7:89:f8:08:21:05:d7:8e:3f:
24:9b:68:d4:00:4e:ab:ac:0e:ca:1f:08:e5:53:eb:ae:d8:1b:
95:67:1b:1f:d9:c7:74:bf:02:fd:81:57:eb:fc:a6:0a:28:dd:
aa:4c:b8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:10:06 2026 by rpki-client