Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: Kriq2+Lo/Z1nd23NSbW96dcevVfyeEafhkK+zgGu1KM=
Subject key identifier: AD:49:3D:D1:73:3A:42:A7:D7:87:64:0E:08:05:AA:96:0F:E7:BF:EB
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 019F91DA713C91887983E09DD6166A7739BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 183B
Signing time: Fri 24 Jul 2026 02:00:39 +0000
Manifest this update: Fri 24 Jul 2026 02:00:39 +0000
Manifest next update: Sat 25 Jul 2026 02:00:39 +0000
Files and hashes: 1: BSd1DfMbSh6BJ7RqQQ57J6iIn54.roa (hash: Hf/PRSH8627ldiT+c/R6Jxk5Uw2/lYafueoJm0baWdM=)
2: MG306zVy_XnsDe9avuTP6OQlaR4.roa (hash: eZ9MpR2ZT4wF57S821zouXormxfdjIGPXoURlUDpr+M=)
3: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: QqNNe2N2qF8gu2hegcHvlMPr0apqK4HklXOUistx7xs=)
4: yA4t8VFR5w-UawfByzFjfg16sDc.roa (hash: mhRBFfLSkDyDoFbm3ZHCraYe+ogc6AsTxV7YQZpdaT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:71:3c:91:88:79:83:e0:9d:d6:16:6a:77:39:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Jul 24 02:00:39 2026 GMT
Not After : Jul 25 02:00:39 2026 GMT
Subject: CN=ad493dd1733a42a7d787640e0805aa960fe7bfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:33:c2:49:8b:d5:95:10:8f:42:6d:30:ea:
4d:a1:12:de:a2:d2:df:e3:52:67:1d:2f:b1:4f:df:
fe:09:89:15:0c:72:06:c0:b0:72:6f:04:b9:ab:14:
de:41:05:1e:a5:bb:ae:59:03:7c:24:6e:86:85:d5:
7c:74:59:34:5e:81:5e:14:69:24:13:0f:52:fd:e5:
6c:30:35:44:96:5f:0c:f2:fe:58:45:02:42:0b:d3:
c7:79:31:d4:64:b2:b5:c9:cb:4f:3e:97:fe:df:a9:
27:83:61:c8:12:bd:ef:21:18:50:31:1b:3b:5b:7e:
6e:5b:16:ef:a4:59:fb:8f:06:8a:37:13:f2:93:84:
93:c9:95:c5:3c:39:18:24:ad:cc:7d:2a:c0:f1:0d:
e7:d2:f8:c2:75:3c:9d:7e:61:f0:bc:dc:7b:6e:8d:
b3:52:d6:41:53:35:61:45:54:e4:eb:5f:07:25:f3:
43:37:3f:49:85:26:03:24:14:b4:ed:c3:b4:c0:84:
27:69:7c:ab:2c:02:f7:9d:39:bb:cb:f9:da:ea:f0:
9b:82:ea:db:d5:e9:90:48:59:3d:5f:39:38:58:5f:
55:4c:49:b9:96:78:8b:c0:75:dc:13:e2:bd:1d:f4:
97:04:57:64:cd:54:92:c3:de:8a:f5:05:5f:55:f7:
43:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:49:3D:D1:73:3A:42:A7:D7:87:64:0E:08:05:AA:96:0F:E7:BF:EB
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4f:46:70:ab:96:fc:7b:b6:f4:dc:dc:28:2a:04:e5:f3:3c:
a9:18:1d:f3:ae:c9:ba:44:63:bf:b5:d9:f1:30:0a:7a:0d:69:
30:92:f0:f8:9a:1a:64:ac:45:71:b4:8c:30:fb:d8:27:7d:7c:
ba:b2:a2:d2:04:d1:80:e0:62:31:74:ff:d8:73:88:b8:32:ea:
2f:94:01:61:c0:94:28:c6:3a:9f:dd:ae:3e:4f:b3:cd:e7:5c:
5e:74:a8:ea:32:68:28:5d:2b:ad:ea:b3:6d:84:63:34:26:e1:
da:0a:da:d6:a5:76:9d:28:4d:63:66:2f:d2:3b:0f:96:3a:7f:
73:2a:70:bf:48:82:8a:8c:f9:f0:a1:a2:82:52:8a:03:9c:5b:
02:57:1d:ef:d9:54:be:21:1c:e8:c3:c9:1a:09:96:c6:12:de:
5b:0a:fc:d2:66:ca:83:68:5d:15:73:37:50:07:59:5e:fe:35:
5c:84:50:8f:41:0b:61:19:4b:4d:7b:52:1e:9c:1d:9c:20:9f:
b2:b7:fe:26:94:b1:d8:f9:f9:c8:e9:52:27:85:6e:22:08:90:
e2:c2:3f:fb:48:b0:08:3c:f5:11:ea:c1:e7:41:c0:5a:3c:d4:
6a:35:a4:24:5f:f8:f3:cf:55:a8:65:86:f4:6f:4a:d4:79:64:
ea:61:50:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:52 2026 by rpki-client