Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
File: xVFHJIBoPGGXD2BfsZnuturhIYs.mft (raw, json)
Hash identifier: As64km7DXq8VsUwoWZdB4K7CT8DOVMunbidxTiVAQTY=
Subject key identifier: 9A:18:3A:94:76:FA:EB:59:39:AF:90:3D:FA:05:1E:77:07:15:4E:E4
Authority key identifier: C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
Certificate issuer: /CN=c551472480683c61970f605fb199eeb6eae1218b
Certificate serial: 019F867AF8B280D6FA6D6F01F4A587BE800C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
Manifest number: 16C3
Signing time: Tue 21 Jul 2026 21:00:33 +0000
Manifest this update: Tue 21 Jul 2026 21:00:33 +0000
Manifest next update: Wed 22 Jul 2026 21:00:33 +0000
Files and hashes: 1: mAjzWoi04qK6NnjPrTZ48XaGykQ.roa (hash: P8midNKI0EeB3alRGfjHU2gINYYSKmlfTyo7mKM/3qw=)
2: xVFHJIBoPGGXD2BfsZnuturhIYs.crl (hash: EORgKpmCgOlpLlhb5DuN1UvghMljNxltDctzJ0zzWBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:7a:f8:b2:80:d6:fa:6d:6f:01:f4:a5:87:be:80:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c551472480683c61970f605fb199eeb6eae1218b
Validity
Not Before: Jul 21 21:00:33 2026 GMT
Not After : Jul 22 21:00:33 2026 GMT
Subject: CN=9a183a9476faeb5939af903dfa051e7707154ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8c:54:56:be:dc:55:42:cc:ef:ca:40:af:cb:
73:04:e9:45:e6:04:15:52:ab:c5:cf:d4:11:5f:ab:
90:2b:e6:5a:0d:26:2b:ab:8d:5b:f1:78:d2:f9:ce:
4d:43:6b:10:b1:5f:ee:b9:2e:4b:dc:d8:ef:3d:ce:
3e:df:81:4a:76:73:eb:2b:b0:69:f7:70:5e:60:66:
05:14:a5:37:93:8b:a4:b6:2d:3c:2d:72:45:6a:63:
32:16:93:da:92:7c:ab:4a:d9:ea:6a:66:9b:3b:b1:
03:f8:77:f2:ab:55:c5:d8:2b:77:96:9b:b4:8d:9b:
cd:a1:a5:25:5e:3d:82:28:62:81:ca:89:02:22:07:
fb:29:44:f0:75:5c:45:65:df:12:b4:27:00:2b:f3:
d6:99:ea:2d:c2:c2:9f:0c:27:ce:4f:cc:b7:7d:69:
77:7d:97:54:68:cf:1c:ba:0b:0d:18:0e:f4:70:87:
9f:0a:0e:2f:a2:d3:3c:76:de:89:21:74:8b:27:f3:
26:08:07:a3:df:85:c2:49:7d:f0:7b:93:8a:c4:d6:
53:86:69:58:ba:38:a4:a5:c3:37:4b:e7:a0:99:e6:
c3:42:78:72:65:42:30:b2:f9:ff:d4:34:99:7a:72:
f5:0f:a8:08:20:66:9a:b9:db:83:b2:63:16:86:ca:
5d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:18:3A:94:76:FA:EB:59:39:AF:90:3D:FA:05:1E:77:07:15:4E:E4
X509v3 Authority Key Identifier:
keyid:C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d8:af:3a:41:3a:e4:c0:56:1f:61:28:37:b9:4d:97:c2:25:
7c:24:cd:54:bc:d5:53:ef:14:a6:86:89:45:4e:24:48:af:cf:
ba:4f:d9:2c:c7:cc:d0:4c:31:84:93:72:7b:7a:f1:f0:9f:91:
eb:7a:72:30:22:7c:ec:e2:c4:16:7d:d4:9c:7a:7d:1b:9f:58:
23:4a:32:3b:1e:2d:a7:85:92:f0:e6:9c:df:13:4b:69:70:02:
9e:89:85:4b:e1:42:60:e2:b5:89:92:4d:64:f7:5e:e6:0f:ce:
d6:a1:e3:c6:5f:c7:10:f4:fe:a5:e5:58:06:50:e0:18:66:06:
25:a0:a9:0c:2c:8a:e5:41:b8:a3:c4:18:b0:8f:18:74:3e:c3:
0e:09:48:85:ca:0d:28:d5:4c:63:72:27:ca:8e:89:42:b3:df:
cd:75:d9:c0:ac:8a:5d:84:91:ae:39:6b:4f:51:7a:45:1d:35:
f1:0b:fb:5f:0b:3b:6b:52:c7:7b:13:54:db:d3:23:4a:68:2b:
5d:82:22:0e:93:d4:49:06:01:57:68:11:5c:c3:72:d7:fc:5a:
64:9e:92:59:93:75:5e:6c:03:39:1e:3a:2e:8a:38:dd:e4:2e:
4b:4d:ed:11:d5:70:64:ac:67:21:3e:e8:7b:8a:db:4a:ae:87:
7e:f4:c7:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GeviygNb6bW8B9KWHvoAMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTE0NzI0ODA2ODNjNjE5NzBmNjA1ZmIxOTllZWI2ZWFl
MTIxOGIwHhcNMjYwNzIxMjEwMDMzWhcNMjYwNzIyMjEwMDMzWjAzMTEwLwYDVQQD
Eyg5YTE4M2E5NDc2ZmFlYjU5MzlhZjkwM2RmYTA1MWU3NzA3MTU0ZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34xUVr7cVULM78pAr8tzBOlF5gQV
UqvFz9QRX6uQK+ZaDSYrq41b8XjS+c5NQ2sQsV/uuS5L3NjvPc4+34FKdnPrK7Bp
93BeYGYFFKU3k4ukti08LXJFamMyFpPaknyrStnqamabO7ED+Hfyq1XF2Ct3lpu0
jZvNoaUlXj2CKGKByokCIgf7KUTwdVxFZd8StCcAK/PWmeotwsKfDCfOT8y3fWl3
fZdUaM8cugsNGA70cIefCg4votM8dt6JIXSLJ/MmCAej34XCSX3we5OKxNZThmlY
ujikpcM3S+egmebDQnhyZUIwsvn/1DSZenL1D6gIIGaauduDsmMWhspduwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoYOpR2+utZOa+QPfoFHncHFU7kMB8GA1UdIwQY
MBaAFMVRRySAaDxhlw9gX7GZ7rbq4SGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZGSEpJQm9QR0dYRDJCZnNabnV0dXJoSVlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zOWVmODEtZGI4NS00N2Q2LTg3YzIt
NTdlYjVlZjg5NmUxLzEveFZGSEpJQm9QR0dYRDJCZnNabnV0dXJoSVlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zOWVmODEtZGI4NS00N2Q2LTg3YzItNTdlYjVlZjg5NmUx
LzEveFZGSEpJQm9QR0dYRDJCZnNabnV0dXJoSVlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdivOkE6
5MBWH2EoN7lNl8IlfCTNVLzVU+8UpoaJRU4kSK/Puk/ZLMfM0EwxhJNye3rx8J+R
63pyMCJ87OLEFn3UnHp9G59YI0oyOx4tp4WS8Oac3xNLaXACnomFS+FCYOK1iZJN
ZPde5g/O1qHjxl/HEPT+peVYBlDgGGYGJaCpDCyK5UG4o8QYsI8YdD7DDglIhcoN
KNVMY3Inyo6JQrPfzXXZwKyKXYSRrjlrT1F6RR018Qv7Xws7a1LHexNU29MjSmgr
XYIiDpPUSQYBV2gRXMNy1/xaZJ6SWZN1XmwDOR46Loo43eQuS03tEdVwZKxnIT7o
e4rbSq6HfvTH/g==
-----END CERTIFICATE-----
Generated at Wed Jul 22 05:37:11 2026 by rpki-client