Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
File: XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json)
Hash identifier: QNb8qR0+zNxkbW93mRqcNdbQoGgCgnJTWpEvpEi9yaM=
Subject key identifier: 9B:2C:AB:40:C9:FA:A1:EE:92:F1:3A:9B:D6:6A:7A:A7:F0:55:8B:9F
Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Certificate serial: 019F9391C7AAB117C66DA720B7EDD88D2E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
Manifest number: 1429
Signing time: Fri 24 Jul 2026 10:00:32 +0000
Manifest this update: Fri 24 Jul 2026 10:00:32 +0000
Manifest next update: Sat 25 Jul 2026 10:00:32 +0000
Files and hashes: 1: LlXWpROIqtL6tp6Aj-IFy29MFjs.roa (hash: KdLr/tJ9VzR7ewN9N+GnPwm/+RI9By2q5ZnpA8EcZVY=)
2: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: 3aoR0UZ26TuuZUiQNHutxWymOLdyTu7Fu/eDOEfy+2U=)
3: YiSRyD3T9EqkxC_vsLTbpd4-1ic.roa (hash: rH3OH+nKD7gxgdOxb/Eod9szmTSLhYFd7UVaSZRZpws=)
4: v5AikuLbt2o2wZFx81AkxLKlbbE.roa (hash: 7KPccZgy5MWb3ejH0HLnxvwj1pO1ZpFKozpP20aOke4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:c7:aa:b1:17:c6:6d:a7:20:b7:ed:d8:8d:2e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Validity
Not Before: Jul 24 10:00:32 2026 GMT
Not After : Jul 25 10:00:32 2026 GMT
Subject: CN=9b2cab40c9faa1ee92f13a9bd66a7aa7f0558b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:89:c2:44:dd:2a:ef:6c:5c:f8:da:5e:49:38:
33:35:2f:a8:4e:a8:14:51:65:4d:16:96:c3:b6:f4:
12:93:01:51:a4:8c:c8:5f:7d:25:47:75:9f:f2:ab:
95:bf:ad:4b:2f:2a:06:d2:2e:34:59:5d:bc:f1:59:
0d:ff:d0:5a:b8:4c:71:a6:23:82:c3:a9:72:e8:64:
de:1f:18:51:b4:b1:1f:b2:be:00:a4:66:ab:4c:6d:
c9:ee:5f:12:45:68:a5:dc:96:ba:4a:bf:7a:5a:45:
82:5c:d8:09:50:a7:a9:fc:4e:d7:56:be:52:5b:49:
c8:31:db:fc:ff:e7:87:06:11:42:27:53:01:94:60:
bc:f2:76:22:6e:4b:7a:b5:b0:33:3a:49:a3:bf:fd:
6e:95:88:f9:94:87:73:64:83:8d:ac:8f:11:19:5d:
5c:cf:3f:15:9a:e1:97:f7:4e:a9:ce:16:39:1c:a2:
ea:4e:b9:7b:d7:18:34:30:f1:bd:c7:5f:34:df:b9:
a5:55:fc:f7:29:63:0b:48:0d:88:f6:0d:f0:33:27:
d1:f5:ff:8a:1c:b4:e9:59:8c:0f:99:1b:6f:4f:6b:
c6:e2:65:38:fb:a2:09:fe:66:93:87:e6:ea:e5:d4:
a5:90:a6:9c:8d:31:eb:d7:5a:0a:32:c6:9a:91:7a:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2C:AB:40:C9:FA:A1:EE:92:F1:3A:9B:D6:6A:7A:A7:F0:55:8B:9F
X509v3 Authority Key Identifier:
keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:60:eb:c6:28:3c:09:f9:89:43:b1:3b:87:00:4d:c7:ec:3d:
04:a7:fc:c5:e6:0d:83:31:5a:0e:2c:7a:ca:b3:a9:e2:e1:17:
46:ac:c2:bb:94:49:37:6d:48:73:ce:30:3a:ce:15:22:c4:57:
33:11:ce:94:d9:65:e4:68:c6:1d:c6:c3:1d:ec:de:a8:80:75:
47:ab:ac:87:3b:16:04:8a:25:39:04:f8:de:cc:c0:7d:f8:2c:
02:db:7a:2d:5b:fd:fa:ad:b8:a0:95:0c:0f:e6:1c:f9:70:f6:
a8:61:b3:60:c6:cd:9b:78:01:b3:c4:c7:b5:31:08:e9:41:07:
61:2d:19:c0:fe:28:0a:ee:33:21:99:84:56:b3:69:bd:6d:d9:
61:fe:17:5b:f0:f3:3a:cd:45:f8:e4:74:cc:db:e7:41:78:77:
9b:7c:f2:8c:fb:d8:5d:e3:37:99:27:56:a7:27:56:47:10:42:
98:d9:ce:43:7d:29:7d:dd:63:3b:32:f2:34:ce:ff:d3:f3:03:
f0:ec:c2:aa:ec:4d:04:16:11:2d:64:da:e5:14:4f:71:0b:5d:
e9:3d:ac:0b:f3:5a:06:01:ba:54:12:e9:84:6d:06:92:1d:6e:
f2:0c:6f:94:e1:6d:23:e2:0c:8b:ae:7a:78:5f:d1:0f:f5:c1:
0e:da:1b:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkceqsRfGbacgt+3YjS6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzk5ZmJhOWFhZTlkMmQ2ZmZlNTJhZThjNzRhZTM4ZmM2
YzFhZjEwHhcNMjYwNzI0MTAwMDMyWhcNMjYwNzI1MTAwMDMyWjAzMTEwLwYDVQQD
Eyg5YjJjYWI0MGM5ZmFhMWVlOTJmMTNhOWJkNjZhN2FhN2YwNTU4YjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlInCRN0q72xc+NpeSTgzNS+oTqgU
UWVNFpbDtvQSkwFRpIzIX30lR3Wf8quVv61LLyoG0i40WV288VkN/9BauExxpiOC
w6ly6GTeHxhRtLEfsr4ApGarTG3J7l8SRWil3Ja6Sr96WkWCXNgJUKep/E7XVr5S
W0nIMdv8/+eHBhFCJ1MBlGC88nYibkt6tbAzOkmjv/1ulYj5lIdzZIONrI8RGV1c
zz8VmuGX906pzhY5HKLqTrl71xg0MPG9x18037mlVfz3KWMLSA2I9g3wMyfR9f+K
HLTpWYwPmRtvT2vG4mU4+6IJ/maTh+bq5dSlkKacjTHr11oKMsaakXqTCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJssq0DJ+qHukvE6m9ZqeqfwVYufMB8GA1UdIwQY
MBaAFF45n7qarp0tb/5Srox0rjj8bBrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iOTFkMDUtNmEwMy00MGVkLWE5ODMt
YmQ4MDlkOWRlZGI5LzEvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iOTFkMDUtNmEwMy00MGVkLWE5ODMtYmQ4MDlkOWRlZGI5
LzEvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGDrxig8
CfmJQ7E7hwBNx+w9BKf8xeYNgzFaDix6yrOp4uEXRqzCu5RJN21Ic84wOs4VIsRX
MxHOlNll5GjGHcbDHezeqIB1R6ushzsWBIolOQT43szAffgsAtt6LVv9+q24oJUM
D+Yc+XD2qGGzYMbNm3gBs8THtTEI6UEHYS0ZwP4oCu4zIZmEVrNpvW3ZYf4XW/Dz
Os1F+OR0zNvnQXh3m3zyjPvYXeM3mSdWpydWRxBCmNnOQ30pfd1jOzLyNM7/0/MD
8OzCquxNBBYRLWTa5RRPcQtd6T2sC/NaBgG6VBLphG0Gkh1u8gxvlOFtI+IMi656
eF/RD/XBDtob9w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:09:44 2026 by rpki-client