Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
File: xVFHJIBoPGGXD2BfsZnuturhIYs.mft (raw, json)
Hash identifier: b7ehaeuuOUdA1adwat8qdhLqHJAIPsXHgzbZ0AU3s8E=
Subject key identifier: E0:1D:F3:F6:91:66:91:B1:06:61:98:D4:B2:99:FB:8C:D2:27:4C:54
Authority key identifier: C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
Certificate issuer: /CN=c551472480683c61970f605fb199eeb6eae1218b
Certificate serial: 019E3297C931FE32E862A993739F84266F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
Manifest number: 1613
Signing time: Sat 16 May 2026 21:01:08 +0000
Manifest this update: Sat 16 May 2026 21:01:08 +0000
Manifest next update: Sun 17 May 2026 21:01:08 +0000
Files and hashes: 1: mAjzWoi04qK6NnjPrTZ48XaGykQ.roa (hash: P8midNKI0EeB3alRGfjHU2gINYYSKmlfTyo7mKM/3qw=)
2: xVFHJIBoPGGXD2BfsZnuturhIYs.crl (hash: uYmItECVxeW0MaycHLfs0bvwkoyYIOhfZGPqdDNvmiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:97:c9:31:fe:32:e8:62:a9:93:73:9f:84:26:6f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c551472480683c61970f605fb199eeb6eae1218b
Validity
Not Before: May 16 21:01:08 2026 GMT
Not After : May 17 21:01:08 2026 GMT
Subject: CN=e01df3f6916691b1066198d4b299fb8cd2274c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ce:05:99:d1:b5:4a:b0:1d:ce:59:05:1d:57:
df:da:d9:b1:e1:24:07:24:06:e5:f9:2b:4a:a6:77:
06:8f:d3:6b:da:96:4b:c9:6f:03:cc:21:83:99:12:
d2:f3:88:8b:d1:a3:19:f7:1f:94:ec:e0:46:e1:dc:
58:30:e4:cd:16:de:8c:c5:a4:2c:8d:7f:5c:8a:a0:
b1:90:96:62:63:cd:95:8e:ab:50:23:c1:2b:4b:7c:
0a:2d:c4:be:d0:36:95:19:8a:f5:58:cc:1f:71:c9:
a6:48:b4:60:42:b7:93:42:6c:eb:85:51:85:c5:87:
71:1c:b3:ba:23:0c:5d:73:7f:74:ae:7b:c9:c8:e7:
bd:e6:f4:78:32:da:2f:e0:67:5a:b3:8c:9e:a2:05:
6d:c9:d7:c0:55:a6:8c:e8:17:74:12:50:df:f6:47:
14:c2:a0:b0:e3:a0:f2:2a:dc:87:0a:01:52:e5:6b:
a8:60:f1:a2:ff:f7:33:a4:5d:e5:d9:4a:48:59:3f:
99:18:5c:d7:fd:dd:ba:42:a7:47:c8:55:9f:d0:1a:
27:cd:e0:bc:87:8a:9b:76:d6:cd:0a:7a:62:a8:79:
da:3c:5b:80:9d:1b:35:9f:9f:88:32:86:1a:21:2b:
ac:95:19:67:ea:3a:9c:3f:4b:0b:d1:79:e7:4c:50:
b3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1D:F3:F6:91:66:91:B1:06:61:98:D4:B2:99:FB:8C:D2:27:4C:54
X509v3 Authority Key Identifier:
keyid:C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:94:37:2c:29:72:93:52:95:b5:9e:48:8f:e4:30:bf:5f:1d:
2b:db:ab:4c:5f:7b:d3:e6:57:8f:a5:ff:31:75:c5:41:6a:ec:
8a:1c:12:fc:ea:48:b1:1c:f8:ed:a7:37:35:b4:93:58:30:76:
89:d3:2d:9b:69:c5:a2:5c:80:c9:a4:f5:a3:23:9b:ed:5e:6c:
f7:41:ab:29:32:96:af:21:a2:82:0a:df:74:d3:1c:a0:fd:db:
f4:12:cd:89:a6:01:5a:be:a6:54:ab:9c:58:d7:e2:af:b9:1d:
3f:38:bc:fa:e5:7a:b1:3c:ab:b2:d2:b3:98:55:7a:5d:fb:a7:
7e:65:78:b3:25:a2:be:2a:57:de:76:08:d8:20:69:77:c5:b3:
22:63:08:96:fe:27:61:3d:91:ec:89:e3:be:ea:fe:75:0e:82:
a2:7b:b6:d3:67:1c:19:bb:4e:d0:44:7c:bd:0d:da:00:a1:6d:
72:1c:fa:a1:e9:80:22:14:a9:14:4b:ff:cc:09:1c:07:17:b8:
fd:5b:8b:7c:97:0d:c8:1b:11:75:0a:05:aa:bf:e8:14:e2:f6:
32:06:82:3a:fb:ec:29:73:80:19:ff:08:2c:91:2b:d0:f1:8f:
1b:28:5a:2d:45:d8:36:52:4f:52:7e:71:ee:86:da:c1:b2:1a:
66:c6:92:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:01:50 2026 by rpki-client