Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: xu5BPji/sLrXhYxX011AS4znlfHKTUqNyVlNC3t6DxY=
Subject key identifier: EE:10:36:BE:A6:18:92:A0:78:91:C6:35:64:17:E1:13:9A:C8:95:2E
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 01A0B3BF16EC99A1A91B27C898FBD2D0B5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 161B
Signing time: Fri 18 Sep 2026 09:00:39 +0000
Manifest this update: Fri 18 Sep 2026 09:00:39 +0000
Manifest next update: Sat 19 Sep 2026 09:00:39 +0000
Files and hashes: 1: IXA5NTfyPmX-NcYymUYHoZqq10U.roa (hash: aV0Y8kWeg0x50q3D9prRP0W1mgyRSrG19k/0B7ej/F0=)
2: ueAFixVmYFJiD-Pjjc9ASXBfU1A.roa (hash: H5ZlbNWM33UZohORBQr6iFvv7D9rUkB4F6O6kRx61Cw=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: HYYOTwA3W2XVOe8y20k83qw3KsHn3G87sRMK7/YLIM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:bf:16:ec:99:a1:a9:1b:27:c8:98:fb:d2:d0:b5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Sep 18 09:00:39 2026 GMT
Not After : Sep 19 09:00:39 2026 GMT
Subject: CN=ee1036bea61892a07891c6356417e1139ac8952e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:5c:fa:fd:f8:37:f7:68:0d:98:e8:92:b2:
6d:8e:eb:fb:58:f3:b4:4b:56:e1:de:18:6b:ed:08:
a2:3b:b2:73:e8:b2:67:9a:f6:a6:44:1a:f6:0b:5e:
8e:1f:6a:ab:7a:72:d1:53:9e:5f:6c:40:1d:d8:c4:
3b:e8:75:1a:86:8e:b5:a1:e7:a4:00:33:27:f1:86:
bd:5a:78:8f:84:bb:2f:85:be:14:93:68:55:88:b2:
ec:31:d4:ed:a8:66:aa:90:43:1a:f2:54:77:6c:2f:
39:5e:c9:45:ad:94:2e:a5:20:88:c3:49:9b:fd:41:
79:85:6e:02:d5:15:b4:18:a6:f7:ba:73:3c:4c:70:
96:ae:21:8a:7a:67:90:68:95:68:4a:b1:f0:25:06:
b9:21:84:54:cb:61:e4:d1:d7:72:e0:2a:24:a6:09:
33:c5:3e:17:cf:4b:f4:b6:cb:ae:72:c5:c0:f7:fb:
75:1a:10:83:4b:7e:f8:57:1b:24:3b:41:46:cd:5d:
eb:e5:c6:b0:4e:f1:11:46:53:88:c0:aa:65:7b:81:
32:0e:25:97:72:75:f5:cb:16:35:d5:77:c5:77:be:
07:31:b1:29:17:8f:b1:72:8d:ee:70:f2:51:7d:8c:
75:cc:45:d0:0a:32:cc:7a:fe:f5:ba:a1:8c:24:d2:
e3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:10:36:BE:A6:18:92:A0:78:91:C6:35:64:17:E1:13:9A:C8:95:2E
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:67:c5:2c:7c:f3:30:dc:ec:01:09:ea:4a:06:31:ea:99:69:
ba:a8:f5:5f:3b:19:8b:5c:48:c3:7a:9c:3e:b9:04:9d:fa:a6:
67:db:e8:15:af:48:2f:78:9b:1f:e0:87:f6:81:d0:73:a6:43:
d4:dd:dd:2f:e0:fb:1d:2e:25:f7:68:a1:b6:1a:1f:f6:f8:5d:
54:1f:8c:27:d6:e6:9d:80:46:9b:67:fc:02:41:2c:92:a7:b4:
ed:f1:06:ae:3f:04:be:a0:f1:9d:91:f2:09:a2:93:f5:c8:39:
fe:7d:f4:6a:b0:bb:01:d5:63:d0:c6:92:be:d4:c9:9f:45:fa:
17:d5:1b:e2:93:f0:77:f2:46:6d:46:fe:30:92:19:27:f0:30:
4c:bc:a6:23:43:50:24:38:a7:93:8b:49:af:bc:82:ec:4f:40:
96:c0:b0:af:c2:41:27:b9:82:7b:9a:08:4a:53:70:a5:f9:21:
a6:6a:f3:c6:5d:9b:b5:c3:ed:e1:d8:39:ee:0e:ac:65:65:3e:
7d:44:a1:eb:21:ed:19:4b:a4:6f:8f:05:22:68:7d:8c:92:bd:
ac:6c:49:ec:7a:31:3e:ba:0e:15:ff:33:f2:95:13:bd:b0:a5:
89:b0:ab:b8:84:fd:92:9f:dd:6d:38:83:9c:e4:74:92:7e:7c:
6b:34:5a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:11:29 2026 by rpki-client