Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: dGNoGxPw/KjLpzP8KohlG+HlpyoZ9e/GNofx81j2994=
Subject key identifier: D2:0D:88:EF:6E:E2:03:75:53:60:C2:DF:C4:98:F2:07:A2:CB:D8:DB
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 019FCA136870CD2723357988AB52A1001820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 15A2
Signing time: Tue 04 Aug 2026 00:01:37 +0000
Manifest this update: Tue 04 Aug 2026 00:01:37 +0000
Manifest next update: Wed 05 Aug 2026 00:01:37 +0000
Files and hashes: 1: IXA5NTfyPmX-NcYymUYHoZqq10U.roa (hash: aV0Y8kWeg0x50q3D9prRP0W1mgyRSrG19k/0B7ej/F0=)
2: ueAFixVmYFJiD-Pjjc9ASXBfU1A.roa (hash: H5ZlbNWM33UZohORBQr6iFvv7D9rUkB4F6O6kRx61Cw=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: gYAOUITf84Rk3DCnGoVT6ieVObEa2eUxGbeRITeygDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ca:13:68:70:cd:27:23:35:79:88:ab:52:a1:00:18:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Aug 4 00:01:37 2026 GMT
Not After : Aug 5 00:01:37 2026 GMT
Subject: CN=d20d88ef6ee203755360c2dfc498f207a2cbd8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:71:47:89:17:b1:59:51:f3:d2:81:ad:de:
08:92:ad:20:71:2b:78:87:72:2c:e5:06:e2:44:38:
81:2e:0c:54:40:b4:04:c2:d0:66:7f:a9:d6:92:16:
b5:74:84:0b:2d:0c:f6:05:a5:04:65:96:1f:88:1d:
3e:be:b7:5a:f3:81:f4:88:ce:b6:dd:91:51:0a:ff:
29:4e:8b:85:59:4c:df:27:a1:52:04:73:d4:28:ad:
ba:8b:05:1c:87:64:e4:62:92:31:bf:13:16:18:fa:
6b:de:43:5a:80:e6:1d:8d:7b:9e:a1:44:96:fc:88:
36:90:7e:87:aa:a4:90:3c:7a:ff:47:18:02:85:aa:
40:88:85:fe:5c:13:ca:c6:9a:b0:4a:97:3d:68:0d:
92:1d:4c:46:3f:3a:a7:26:8e:79:0c:77:ed:91:2c:
f9:95:9f:e2:21:14:16:b4:1e:bb:7b:a3:2b:b8:ef:
59:ed:2a:65:36:91:a4:06:54:17:aa:02:93:bb:f3:
a4:0f:40:0a:c5:34:20:54:25:c0:7f:0a:8b:d0:ca:
e9:8e:5d:d4:18:29:1d:62:7f:7a:7f:7b:09:da:21:
fb:6f:54:bd:4c:bd:1b:ff:40:33:3f:52:f4:a9:ac:
ed:6d:33:4c:7a:a0:14:17:16:27:c2:83:32:2d:ea:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0D:88:EF:6E:E2:03:75:53:60:C2:DF:C4:98:F2:07:A2:CB:D8:DB
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:54:f3:30:8d:63:c7:eb:c3:90:a0:aa:6f:f9:46:43:73:2b:
79:66:4c:1b:0c:33:9c:c1:20:ce:9a:cc:75:6a:be:48:8a:88:
7e:bf:f2:7b:30:ad:c5:26:dd:6f:3a:5f:dd:6a:22:48:a0:15:
cd:7d:08:aa:b0:02:2b:d2:70:eb:cb:4c:a8:26:c4:eb:f1:84:
c0:62:59:90:e3:3a:5c:f2:13:f2:dd:02:fe:65:36:37:7c:25:
40:66:6a:a7:a7:a6:e5:7d:b5:5f:3f:0d:b6:f0:d6:e2:57:06:
da:f8:66:0f:75:54:e0:73:25:ad:95:20:03:00:c1:de:0d:1f:
91:40:46:38:f2:e5:5f:fc:43:b8:73:7c:92:a4:d6:54:13:f7:
5c:b9:a4:db:b1:78:e1:74:6e:60:9d:c9:94:3a:3f:ac:9c:86:
d3:93:9b:be:89:6b:7a:17:97:a1:c9:c6:26:31:f7:7c:2c:eb:
bd:2d:8a:d3:33:0a:ea:1a:84:b3:82:d7:04:59:f5:72:50:3c:
dc:d0:73:36:d4:7e:6e:ce:40:b5:37:b9:4c:69:c2:6d:6a:0d:
33:07:af:7e:2f:4b:79:b7:9e:a9:9f:6f:85:7d:d3:4b:4a:f5:
cc:f6:92:67:4b:57:97:6b:33:fe:aa:9d:c1:50:d3:d9:cc:6b:
c1:12:63:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 08:49:06 2026 by rpki-client