Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
File: xVFHJIBoPGGXD2BfsZnuturhIYs.mft (raw, json)
Hash identifier: Il99tvPGZd+3IX2IFcUWpV0UvfB8WhyWgkSH0K/Q/4w=
Subject key identifier: A3:9D:BF:3B:B1:DE:C7:6F:42:CC:E4:CD:74:DB:5A:AC:0C:7C:A8:89
Authority key identifier: C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
Certificate issuer: /CN=c551472480683c61970f605fb199eeb6eae1218b
Certificate serial: 019D3789A7A96621326D622E9ECA293C6FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
Manifest number: 1591
Signing time: Sun 29 Mar 2026 03:01:01 +0000
Manifest this update: Sun 29 Mar 2026 03:01:01 +0000
Manifest next update: Mon 30 Mar 2026 03:01:01 +0000
Files and hashes: 1: mAjzWoi04qK6NnjPrTZ48XaGykQ.roa (hash: P8midNKI0EeB3alRGfjHU2gINYYSKmlfTyo7mKM/3qw=)
2: xVFHJIBoPGGXD2BfsZnuturhIYs.crl (hash: Xy/X/Z/znKfIziXugvOx2uW0Jk+0RUmpT+4dnqehFt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:a7:a9:66:21:32:6d:62:2e:9e:ca:29:3c:6f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c551472480683c61970f605fb199eeb6eae1218b
Validity
Not Before: Mar 29 03:01:01 2026 GMT
Not After : Mar 30 03:01:01 2026 GMT
Subject: CN=a39dbf3bb1dec76f42cce4cd74db5aac0c7ca889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:38:dc:82:51:59:3d:8e:46:d1:8d:80:12:
34:44:6b:24:cc:90:d4:55:ce:38:0b:3d:8e:e7:ca:
87:3a:46:c0:07:0c:32:50:20:4f:be:99:e4:01:e3:
4a:cd:56:d9:ab:ea:ee:33:b2:d6:38:e5:2f:c1:97:
b0:83:f0:fb:37:cd:77:05:20:69:1c:2b:31:0c:38:
af:f9:66:ef:04:be:4c:52:ef:88:03:15:0e:e9:df:
23:8e:29:53:a5:91:b2:5a:f9:a4:07:4e:d5:8c:7f:
c4:28:03:46:40:d9:94:0f:33:e8:d6:a6:73:30:f7:
10:f7:30:33:59:fc:a8:73:a4:8b:2a:ed:c2:96:97:
13:7d:64:86:5e:f8:0f:c9:a6:d1:cd:9c:42:fe:9f:
99:ba:9d:6d:cb:0a:ea:fe:d9:84:d4:35:0e:13:c6:
97:27:05:db:f9:ed:27:00:f0:e8:2c:e2:75:0a:d6:
98:36:3e:09:1e:c4:e7:7a:fe:c9:fb:66:17:5c:19:
b4:98:3b:ff:da:d0:e0:a5:e1:c9:74:b2:4a:2c:2c:
9a:7b:25:e4:b3:55:35:0f:43:b6:7f:e5:f1:4a:d7:
b1:1f:75:65:8f:ed:32:e6:bf:67:82:67:65:26:e4:
8c:8f:12:23:bd:b9:26:f5:00:43:2c:e1:36:85:14:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9D:BF:3B:B1:DE:C7:6F:42:CC:E4:CD:74:DB:5A:AC:0C:7C:A8:89
X509v3 Authority Key Identifier:
keyid:C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:17:60:4f:d5:53:61:7e:01:fb:6e:f6:f6:c8:7b:b2:3a:95:
cd:eb:e2:1a:14:ca:14:e9:6b:73:95:ed:bd:23:07:3e:47:80:
95:18:dc:6e:45:e4:3d:e2:5b:0f:19:31:e7:e0:1c:45:ca:64:
33:de:f3:d0:de:34:4a:ed:a5:a4:2d:71:aa:59:38:eb:39:ba:
e5:b1:e3:8e:f0:ed:e2:2e:20:6a:4c:4d:c2:0f:f2:d9:36:53:
78:30:dd:fb:30:f7:b3:cb:0e:b4:04:7d:75:49:1d:d0:ae:c2:
1a:79:0d:fd:c9:52:7b:a9:af:7a:8f:c6:28:c3:1c:13:d4:ad:
8e:25:ec:e0:9d:91:71:1c:f7:55:7a:cd:b7:ed:f0:4c:ee:fd:
5e:a6:0d:bf:49:fc:e1:2b:2c:24:d4:c9:26:76:59:c0:96:6a:
e2:18:18:df:b8:a4:99:88:88:bd:b3:8e:4e:5b:93:63:d8:97:
22:39:49:d0:1d:80:1f:d1:a1:40:f2:be:5d:6f:84:75:6f:ae:
3c:a7:b5:48:a2:d0:80:2a:90:c0:9c:28:ac:ae:c3:80:ce:ce:
e6:77:ec:da:73:e4:ba:72:f4:04:b3:3d:33:a8:0a:50:1a:c5:
89:a4:3c:83:d3:6f:ec:b1:54:91:fc:c2:93:0d:af:06:c2:1b:
b7:59:25:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:28 2026 by rpki-client