Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: RvJWsRidlEoAVyWVcrDZtToxdO6r9yVkBXzaMsL/+Ec=
Subject key identifier: 50:C5:8E:52:21:70:95:E4:C8:AF:5A:F6:D6:63:65:7C:66:73:B8:A9
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 019D0D0D4F0D6943C49B77B3A7F0880F4DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 1437
Signing time: Fri 20 Mar 2026 21:01:09 +0000
Manifest this update: Fri 20 Mar 2026 21:01:09 +0000
Manifest next update: Sat 21 Mar 2026 21:01:09 +0000
Files and hashes: 1: IXA5NTfyPmX-NcYymUYHoZqq10U.roa (hash: aV0Y8kWeg0x50q3D9prRP0W1mgyRSrG19k/0B7ej/F0=)
2: ueAFixVmYFJiD-Pjjc9ASXBfU1A.roa (hash: H5ZlbNWM33UZohORBQr6iFvv7D9rUkB4F6O6kRx61Cw=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: yd/3HVgKMrZjllz6a3XcMm6A32zRvxE342KinNHutvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0d:0d:4f:0d:69:43:c4:9b:77:b3:a7:f0:88:0f:4d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Mar 20 21:01:09 2026 GMT
Not After : Mar 21 21:01:09 2026 GMT
Subject: CN=50c58e52217095e4c8af5af6d663657c6673b8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:82:50:78:ba:cc:f6:11:38:0f:0e:ad:e9:87:
c2:aa:17:9e:9e:b3:99:45:87:f3:45:8d:cc:41:b4:
0c:1a:c0:59:0b:c6:e2:93:f1:49:cb:3f:59:ab:46:
ed:c0:24:f5:ef:e8:c5:2c:10:8b:01:84:90:f1:14:
de:d0:8c:80:71:9d:35:14:ad:24:d0:c9:2d:d1:02:
a3:92:47:fb:0d:ee:68:9e:3b:63:a7:e5:61:dc:80:
6c:2f:b7:97:d1:5e:37:1e:a6:5d:84:0a:c5:95:e2:
a8:5f:09:1c:7a:f1:b1:30:f9:80:4b:82:b4:3a:3d:
b1:fc:8e:12:3a:f4:2a:ca:79:39:a9:09:07:23:d4:
58:97:dd:9f:ee:4f:e1:48:c9:d6:f4:90:13:98:36:
48:34:4c:c5:84:47:4a:32:3d:36:07:e8:7f:ae:84:
7e:fd:4b:26:bf:18:65:50:f5:7e:f1:b9:44:8c:ef:
7f:2c:b2:6c:3e:b9:c1:48:a8:f5:7e:27:48:3a:85:
0a:5c:5d:1a:5d:30:31:98:b8:74:08:93:e7:80:be:
d0:1c:60:6c:82:1c:12:3d:fc:d9:03:cd:eb:c3:b9:
c5:f1:39:04:32:18:b0:55:60:7f:c7:7a:32:03:02:
83:43:e1:c1:2b:36:fa:b0:6d:d8:98:de:41:e5:92:
21:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C5:8E:52:21:70:95:E4:C8:AF:5A:F6:D6:63:65:7C:66:73:B8:A9
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:eb:4d:7a:e7:38:48:ff:28:df:a3:d9:69:1b:18:09:8a:2d:
89:9f:36:d7:d1:63:86:21:3d:c1:37:c7:b9:ce:43:fa:b7:4b:
8d:12:0c:36:be:5f:3d:67:96:4f:d8:4c:00:19:1b:c6:2e:fe:
dc:e1:b5:96:36:b8:e8:35:db:6d:b7:0f:59:35:9e:a7:67:1b:
7a:ee:84:de:6b:c3:81:2d:32:34:92:5f:90:6d:6c:bd:72:7f:
c5:18:d2:4d:a2:21:ba:d3:c1:5d:bb:5a:6a:d9:67:aa:98:99:
50:21:6d:3e:3c:ec:03:fe:8a:af:91:8a:00:88:68:70:20:9b:
8b:15:45:1c:64:53:ec:a4:3e:65:93:c2:09:cc:3d:e3:da:2f:
69:98:ac:2e:e6:e3:4e:53:c8:08:67:20:c7:07:33:1e:ef:73:
c8:28:48:0f:0e:62:94:7b:64:18:4a:18:a8:53:cd:41:43:04:
fd:3e:d1:bb:1d:16:59:90:d9:e7:74:0b:44:e7:36:46:3f:21:
25:62:72:0a:4b:7d:27:98:05:d1:bf:e7:1f:5b:73:48:24:d5:
72:50:c5:4f:d2:96:fc:3f:b1:b6:a3:09:a0:df:6b:24:10:8d:
52:cd:48:c4:0d:30:9b:df:19:01:12:66:f0:cf:cf:98:01:b6:
78:0b:d2:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0NDU8NaUPEm3ezp/CID03UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTZiY2NiZGM5ZjJlNGJhZGMwYTA1N2VhMDhmN2M3NDgx
ODhiMWYwHhcNMjYwMzIwMjEwMTA5WhcNMjYwMzIxMjEwMTA5WjAzMTEwLwYDVQQD
Eyg1MGM1OGU1MjIxNzA5NWU0YzhhZjVhZjZkNjYzNjU3YzY2NzNiOGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYJQeLrM9hE4Dw6t6YfCqheenrOZ
RYfzRY3MQbQMGsBZC8bik/FJyz9Zq0btwCT17+jFLBCLAYSQ8RTe0IyAcZ01FK0k
0Mkt0QKjkkf7De5onjtjp+Vh3IBsL7eX0V43HqZdhArFleKoXwkcevGxMPmAS4K0
Oj2x/I4SOvQqynk5qQkHI9RYl92f7k/hSMnW9JATmDZINEzFhEdKMj02B+h/roR+
/UsmvxhlUPV+8blEjO9/LLJsPrnBSKj1fidIOoUKXF0aXTAxmLh0CJPngL7QHGBs
ghwSPfzZA83rw7nF8TkEMhiwVWB/x3oyAwKDQ+HBKzb6sG3YmN5B5ZIh6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDFjlIhcJXkyK9a9tZjZXxmc7ipMB8GA1UdIwQY
MBaAFMVWvMvcny5LrcCgV+oI98dIGIsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83ZGVmMTMtYzRjZC00NmE2LTgyNWYt
NDJlYTU1MTRlNzIyLzEveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83ZGVmMTMtYzRjZC00NmE2LTgyNWYtNDJlYTU1MTRlNzIy
LzEveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJetNeuc4
SP8o36PZaRsYCYotiZ8219FjhiE9wTfHuc5D+rdLjRIMNr5fPWeWT9hMABkbxi7+
3OG1lja46DXbbbcPWTWep2cbeu6E3mvDgS0yNJJfkG1svXJ/xRjSTaIhutPBXbta
atlnqpiZUCFtPjzsA/6Kr5GKAIhocCCbixVFHGRT7KQ+ZZPCCcw949ovaZisLubj
TlPICGcgxwczHu9zyChIDw5ilHtkGEoYqFPNQUME/T7Rux0WWZDZ53QLROc2Rj8h
JWJyCkt9J5gF0b/nH1tzSCTVclDFT9KW/D+xtqMJoN9rJBCNUs1IxA0wm98ZARJm
8M/PmAG2eAvSvw==
-----END CERTIFICATE-----
Generated at Sat Mar 21 08:02:12 2026 by rpki-client