Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: YdX3BIEVsavO4KhkdgZCzWgVa3DFBaLfGdsmz9NftR8=
Subject key identifier: 21:48:7B:7F:20:5F:2F:56:1E:40:E8:CC:C0:A9:AE:98:57:9B:87:1C
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 019EE254B57E50E6ABA3D5F942D8F8FF7A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 152A
Signing time: Sat 20 Jun 2026 00:01:02 +0000
Manifest this update: Sat 20 Jun 2026 00:01:02 +0000
Manifest next update: Sun 21 Jun 2026 00:01:02 +0000
Files and hashes: 1: IXA5NTfyPmX-NcYymUYHoZqq10U.roa (hash: aV0Y8kWeg0x50q3D9prRP0W1mgyRSrG19k/0B7ej/F0=)
2: ueAFixVmYFJiD-Pjjc9ASXBfU1A.roa (hash: H5ZlbNWM33UZohORBQr6iFvv7D9rUkB4F6O6kRx61Cw=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: IATmZSl9H5agHiw91zXj1JZm09/OVB4QseIpz2kOHXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:54:b5:7e:50:e6:ab:a3:d5:f9:42:d8:f8:ff:7a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Jun 20 00:01:02 2026 GMT
Not After : Jun 21 00:01:02 2026 GMT
Subject: CN=21487b7f205f2f561e40e8ccc0a9ae98579b871c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:1d:2f:64:7c:86:ca:8c:bd:bc:ea:cb:10:
47:b7:54:38:fe:97:ae:53:ae:c5:db:da:1c:e2:56:
fd:9e:2b:67:c9:e4:79:72:b9:7e:74:dd:68:d8:7b:
50:a9:e7:5d:b8:7c:08:4e:82:ce:54:d0:1f:27:db:
db:2b:40:10:df:5d:d9:be:c6:00:fd:4a:86:57:c4:
24:74:2a:dc:fa:21:e4:50:9b:3c:a9:10:d1:f0:c0:
8d:3f:7a:d3:86:04:91:f9:94:77:20:a2:d4:5e:7d:
26:80:0c:2d:2d:2c:af:f4:67:d8:03:27:37:e5:f7:
92:a5:d8:cb:f2:d6:54:93:dc:f7:d8:2b:b9:eb:ed:
35:e3:c5:bb:1e:64:1c:46:06:ba:d8:e0:f6:ec:9a:
cb:1c:d2:c8:09:33:03:e9:1d:c5:82:27:05:2b:f5:
0f:82:2c:1f:2b:a4:7d:46:a8:78:dd:e6:5d:fc:c6:
be:f8:cb:5a:31:ad:c7:3c:2e:35:1c:da:12:24:a4:
f0:38:39:44:14:b9:e3:f2:f7:ee:25:6c:bb:cf:fe:
83:a4:67:ff:67:6f:b2:64:14:c2:72:aa:32:d7:3d:
d6:02:2f:34:7a:99:f8:36:de:cd:e4:0e:60:89:c5:
08:06:a1:36:ea:7a:e1:a6:22:7e:df:48:34:0c:93:
5e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:48:7B:7F:20:5F:2F:56:1E:40:E8:CC:C0:A9:AE:98:57:9B:87:1C
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2b:b2:0b:4d:7a:3f:98:d5:30:c4:12:c8:63:05:92:39:98:
2f:42:84:6c:a9:5a:ab:89:9c:64:e7:a2:cc:2c:e9:ee:32:72:
bd:36:2d:cc:31:91:33:0c:cd:c3:d8:e4:64:c0:8a:5b:07:e0:
19:d4:2a:42:8a:63:a1:94:d2:d1:6b:7b:79:27:31:2c:b9:c4:
f6:74:d4:52:46:96:a2:7c:5a:ae:81:ae:6b:75:eb:50:d0:88:
e1:ad:7d:33:fe:18:67:5b:c7:d7:b8:22:12:24:9b:0c:3c:76:
00:4d:7d:85:56:44:32:da:fb:50:12:9e:0c:7d:99:a1:31:00:
1c:d6:3f:e9:dd:99:5c:df:b6:ea:02:d2:53:7c:2c:26:4f:19:
1e:6c:e3:f6:f0:02:4b:69:24:6d:82:57:4c:80:48:2e:57:e6:
69:92:fa:6a:1d:53:10:3a:e8:0f:8b:03:c7:8f:ac:89:7c:de:
a9:e3:ac:b1:be:91:f5:a8:d8:e4:78:37:f5:28:9a:69:a7:36:
1d:b6:f0:ff:aa:fb:5c:f1:43:ef:f5:7e:c7:9d:f3:77:c1:ed:
6c:42:2a:ed:da:47:f5:db:8a:50:9c:ce:b0:2f:ac:ce:5e:89:
64:03:c4:d6:b5:b2:27:db:47:94:1f:8e:fe:e6:c1:58:93:92:
e3:4d:5b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 03:14:03 2026 by rpki-client