Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: Oc+RenI2MJpaBzxMAUvduMn/PgFMReDTnKKG/0A7Uvg=
Subject key identifier: C8:22:3A:E5:C8:EB:77:28:DA:A1:83:18:FA:D2:33:32:D3:77:15:DF
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 019DF8A84B2878062875069C3F80F2634F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 14B1
Signing time: Tue 05 May 2026 15:01:12 +0000
Manifest this update: Tue 05 May 2026 15:01:12 +0000
Manifest next update: Wed 06 May 2026 15:01:12 +0000
Files and hashes: 1: IXA5NTfyPmX-NcYymUYHoZqq10U.roa (hash: aV0Y8kWeg0x50q3D9prRP0W1mgyRSrG19k/0B7ej/F0=)
2: ueAFixVmYFJiD-Pjjc9ASXBfU1A.roa (hash: H5ZlbNWM33UZohORBQr6iFvv7D9rUkB4F6O6kRx61Cw=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: RFpuu5dplZRnAEC9vOJK6xTvYNHQ8w43pyKuFpsKPLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:a8:4b:28:78:06:28:75:06:9c:3f:80:f2:63:4f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: May 5 15:01:12 2026 GMT
Not After : May 6 15:01:12 2026 GMT
Subject: CN=c8223ae5c8eb7728daa18318fad23332d37715df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3d:db:6c:1c:e1:bf:eb:6b:99:44:72:01:e1:
58:22:73:c2:7d:1c:7f:f0:c8:6c:7c:32:a1:1d:e2:
95:2c:85:f3:ff:16:6f:ce:23:c8:31:ec:56:57:62:
d3:e5:f7:bd:cf:cc:0b:2a:89:ae:6c:44:14:22:79:
e5:db:77:ff:64:72:7f:79:af:b3:07:b1:0c:cd:0c:
a7:3e:5f:f1:d2:78:0a:95:37:f7:70:dc:b8:88:6f:
cf:b8:c8:81:30:82:41:1a:5d:ff:f0:86:2a:09:c6:
82:29:86:5a:84:ef:c8:7b:65:09:ec:3a:70:77:15:
67:2e:2e:25:7e:80:bf:13:bd:6f:84:ee:45:a1:2d:
72:6b:10:c4:49:a0:9a:b9:b5:ce:29:38:8a:19:61:
f6:95:d4:67:7b:ce:da:d5:22:2e:7b:f7:92:fc:a1:
2f:0b:47:fd:10:c6:1f:2a:07:90:e9:c4:03:76:e4:
05:5a:bb:2d:c7:60:b9:64:c6:dc:3f:35:e1:4d:f2:
99:68:ae:09:26:ae:37:54:6f:c1:f4:02:04:3f:59:
ee:6a:ff:7d:0c:9f:8a:2c:d2:8e:a7:4d:03:7f:ba:
f3:03:ee:99:05:06:9e:30:9c:85:ba:97:f2:ca:8e:
e9:de:45:99:48:d8:2c:ef:05:47:67:35:53:ac:12:
5e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:22:3A:E5:C8:EB:77:28:DA:A1:83:18:FA:D2:33:32:D3:77:15:DF
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8b:4a:ec:10:4b:d4:19:96:f6:af:3f:9d:a4:d9:ea:a1:bd:
35:7a:c1:a2:cd:92:39:ca:db:7e:98:6f:e6:f1:ea:fa:80:ac:
dc:72:7a:4b:a3:ca:55:17:64:5c:a2:6a:13:23:d5:44:7c:25:
56:49:29:44:21:2d:00:07:e5:e6:8e:66:3e:dc:07:2a:17:f7:
74:c6:58:df:c1:36:e2:34:86:78:1d:a6:c0:3d:0f:70:fc:24:
88:1e:a1:b9:72:e6:90:19:8a:56:22:06:d4:c7:ff:ea:a5:c8:
cd:fb:32:cc:2f:a9:84:10:4a:cb:f3:42:ef:1f:60:44:c8:4e:
b5:aa:1c:9c:51:cc:82:0c:be:ff:9a:6d:2f:6a:48:91:ba:fa:
11:37:d2:61:f6:92:f5:c1:e5:f2:30:1d:48:d1:7e:4b:fc:30:
2d:4b:0f:38:6a:f1:89:db:f4:ee:01:75:c1:7c:e8:0d:c4:c0:
ef:03:90:dc:b0:53:07:5d:8d:d8:08:dd:13:de:8f:fe:12:dc:
b7:bb:9c:3f:12:f9:e5:20:a2:70:7c:c9:23:d4:9b:9a:0a:06:
93:af:d4:c3:fa:85:0e:2b:37:72:c2:98:0a:88:3e:1d:ec:2c:
05:52:89:d9:63:bc:1a:1d:49:3a:90:8d:05:3a:38:05:e3:7e:
7d:3b:90:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:21:15 2026 by rpki-client