Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
File: xVFHJIBoPGGXD2BfsZnuturhIYs.mft (raw, json)
Hash identifier: EOsfJRnnDHwW9PttMSuaGGhvjjDcNJkZ7YSbEOqccFU=
Subject key identifier: 45:FB:D6:37:E4:B7:63:3A:43:74:A9:6F:9C:D8:97:49:D1:43:84:99
Authority key identifier: C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
Certificate issuer: /CN=c551472480683c61970f605fb199eeb6eae1218b
Certificate serial: 019DA3AEAC0DF441D69B3A0EF62CB1839806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
Manifest number: 15C9
Signing time: Sun 19 Apr 2026 03:00:26 +0000
Manifest this update: Sun 19 Apr 2026 03:00:26 +0000
Manifest next update: Mon 20 Apr 2026 03:00:26 +0000
Files and hashes: 1: mAjzWoi04qK6NnjPrTZ48XaGykQ.roa (hash: P8midNKI0EeB3alRGfjHU2gINYYSKmlfTyo7mKM/3qw=)
2: xVFHJIBoPGGXD2BfsZnuturhIYs.crl (hash: pY3GROQpnCyrXKgUid+VWsvaxwaT9Ev3eZT4zkpt66U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:ac:0d:f4:41:d6:9b:3a:0e:f6:2c:b1:83:98:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c551472480683c61970f605fb199eeb6eae1218b
Validity
Not Before: Apr 19 03:00:26 2026 GMT
Not After : Apr 20 03:00:26 2026 GMT
Subject: CN=45fbd637e4b7633a4374a96f9cd89749d1438499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:4b:52:46:32:be:6b:66:5b:90:9f:f5:d9:
5d:b3:70:a2:14:8b:aa:de:52:cd:97:7f:bb:17:38:
c6:76:34:c3:64:31:99:b5:7e:e4:58:94:cf:5c:3e:
c6:ce:cc:9f:74:e7:98:5d:68:3c:96:1f:8b:d6:97:
b4:2a:e0:e3:98:2a:1a:af:83:97:34:50:83:3c:e2:
79:95:3c:33:76:c6:a5:83:87:41:f5:4f:da:7b:64:
9b:01:58:b4:43:7a:a8:61:25:87:68:5e:70:33:73:
31:09:58:0d:ed:50:25:50:fa:e0:e7:3b:84:57:0d:
db:df:13:7d:21:3d:7c:c5:47:4b:22:1b:be:26:b1:
84:f6:c5:f7:33:38:9c:a8:98:4e:6a:fd:00:21:81:
77:07:4e:28:71:da:28:70:8f:9c:f0:34:53:a4:95:
7d:fc:31:d3:eb:fe:16:3a:74:88:6d:46:37:da:d0:
32:29:b3:0e:c5:f8:99:d3:1e:74:4a:56:3d:00:bc:
3e:bb:57:bf:00:81:0c:57:d2:e7:0f:cb:85:70:0c:
7a:3d:3a:6d:ae:a8:61:9c:93:3a:1f:b3:3d:e4:e5:
52:57:2f:58:36:a6:50:50:48:3c:05:4f:4a:72:84:
44:08:56:92:e5:d5:51:77:d3:5f:3d:d3:cb:bc:c3:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FB:D6:37:E4:B7:63:3A:43:74:A9:6F:9C:D8:97:49:D1:43:84:99
X509v3 Authority Key Identifier:
keyid:C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c4:01:32:5e:8c:68:22:ed:c6:9b:d0:6c:ec:ef:aa:63:4d:
68:8c:d9:33:78:76:64:b9:f4:ad:c2:6e:b4:46:71:8b:59:0c:
f5:0f:f1:20:56:6e:0b:36:08:4b:31:d2:6a:d2:46:f4:fa:fc:
8a:cc:19:13:bd:2b:96:18:99:f4:ea:0a:d0:90:f5:e9:cd:f5:
83:55:42:bc:c1:06:c9:07:10:d4:98:07:e3:f5:82:3c:15:f8:
18:1f:36:29:e4:c1:c6:c8:f8:0d:f4:8d:13:96:3e:c9:13:b5:
c2:a1:77:33:0c:cd:a9:83:27:80:59:7b:0b:a2:bb:5f:63:2f:
f9:a7:5b:8e:b9:18:db:42:55:fa:5d:c1:bc:67:c7:f5:e3:d6:
c5:7d:01:6f:53:2a:77:70:00:28:ae:22:19:22:48:ad:12:21:
21:55:13:35:94:35:c2:be:c9:6a:cf:d9:33:89:ac:be:e4:91:
11:b7:f0:22:5f:c0:75:fe:27:83:09:11:a0:78:5f:64:57:eb:
f8:d6:a2:9c:20:be:9b:9b:8e:ef:96:e7:9b:72:8d:8c:38:fc:
0d:2a:17:c1:d8:34:e9:80:15:da:35:a4:c7:84:13:6b:1b:dc:
72:45:40:00:44:35:42:2f:4f:51:f8:b4:a9:12:1e:37:89:12:
f8:35:2d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:08 2026 by rpki-client