Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
File: XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json)
Hash identifier: gGDhzHp2GVX9XxNCwf1JQPEZKrJyybB+wdiDnjQTFdk=
Subject key identifier: C6:56:83:C6:3B:89:10:1A:75:11:CB:57:E3:84:81:AF:6E:8D:6B:DE
Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Certificate serial: 019D2997223C1B953AC93FEEF7839401D1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
Manifest number: 12E9
Signing time: Thu 26 Mar 2026 10:01:03 +0000
Manifest this update: Thu 26 Mar 2026 10:01:03 +0000
Manifest next update: Fri 27 Mar 2026 10:01:03 +0000
Files and hashes: 1: LlXWpROIqtL6tp6Aj-IFy29MFjs.roa (hash: KdLr/tJ9VzR7ewN9N+GnPwm/+RI9By2q5ZnpA8EcZVY=)
2: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: v+MRy5BfVHIghfgU4k41R4+FHIu/rtn2j1FSROxUQKI=)
3: YiSRyD3T9EqkxC_vsLTbpd4-1ic.roa (hash: rH3OH+nKD7gxgdOxb/Eod9szmTSLhYFd7UVaSZRZpws=)
4: v5AikuLbt2o2wZFx81AkxLKlbbE.roa (hash: 7KPccZgy5MWb3ejH0HLnxvwj1pO1ZpFKozpP20aOke4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:22:3c:1b:95:3a:c9:3f:ee:f7:83:94:01:d1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Validity
Not Before: Mar 26 10:01:03 2026 GMT
Not After : Mar 27 10:01:03 2026 GMT
Subject: CN=c65683c63b89101a7511cb57e38481af6e8d6bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:c8:8e:86:16:38:a5:ed:bf:fa:ae:a3:29:
0c:c1:a9:2f:f6:77:9b:7c:4d:d7:bf:0b:18:4e:35:
02:5f:a7:19:d2:12:68:68:0c:d5:0b:d2:d5:b0:b5:
cf:0c:91:f3:4a:52:50:21:44:a2:ce:06:42:db:c1:
f0:8e:88:02:42:d5:59:f5:b2:a1:61:f6:92:8c:e9:
16:02:48:39:76:63:63:ed:41:b7:59:1c:8e:6c:76:
88:70:78:54:c8:ab:80:8a:73:6d:70:50:57:93:cd:
a7:3f:5b:a1:d2:08:d8:4a:57:13:9e:b3:c6:7e:7f:
69:0e:37:45:5e:4e:e7:36:65:7d:5e:79:f4:5b:be:
c9:55:c2:98:b3:07:58:fa:08:e4:6f:74:fa:74:21:
76:73:59:69:a3:6f:29:16:6f:91:93:40:90:e7:dd:
35:0b:da:51:df:f2:ae:a6:ab:c1:25:95:e0:7b:e8:
23:f1:4d:0b:72:3e:2d:91:71:a4:2e:c2:2f:a7:04:
34:85:cb:84:27:5f:3f:1a:fb:97:08:95:9d:a5:ea:
61:31:9c:4a:c7:ff:43:09:bd:6e:b0:a1:b7:a5:c6:
97:f8:2f:25:96:ad:a5:06:ac:5d:0a:07:42:3e:e3:
de:3e:82:46:21:40:7f:6b:6e:e1:84:fc:85:39:48:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:56:83:C6:3B:89:10:1A:75:11:CB:57:E3:84:81:AF:6E:8D:6B:DE
X509v3 Authority Key Identifier:
keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:94:f9:86:90:27:d8:44:ae:99:6e:78:f5:38:fa:de:c1:09:
78:39:66:b1:41:53:78:b9:39:90:05:96:5d:e5:03:1f:1e:02:
9f:84:87:2e:de:ea:b0:45:66:1f:00:24:62:eb:57:dd:d5:07:
1a:09:8c:71:06:86:e8:d1:3e:5f:a6:6d:47:38:71:79:48:9d:
09:c7:fd:5f:41:f8:7a:79:5b:b9:df:31:8b:2b:73:25:3c:ae:
bb:f5:75:28:87:2f:df:ef:0e:70:dc:9b:ea:75:14:5b:b4:cf:
34:39:06:0f:07:2f:e3:b7:95:79:e0:f0:ed:27:48:15:0c:72:
73:22:e1:a4:1f:0f:51:ec:33:3b:5c:29:14:af:12:c4:26:c6:
a5:31:fe:34:5e:b7:3a:73:44:d5:4a:9c:87:52:72:5b:2d:e9:
a2:1b:15:a7:16:b9:16:46:5f:e0:82:b4:b0:39:70:0c:1c:1f:
4f:9e:69:10:fa:b5:a9:16:a5:4e:d6:76:a2:1a:1b:df:82:be:
7a:8c:7b:58:cf:a9:d1:21:bf:6f:2d:a4:a8:f0:6e:e6:1a:c5:
65:03:87:1c:43:27:89:f9:65:f4:09:b3:e9:32:ff:42:50:3a:
c4:93:3c:c1:f5:15:85:0a:46:d2:3c:c0:d8:a7:8c:5d:07:20:
6c:c4:73:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:18:22 2026 by rpki-client