Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
File: xVFHJIBoPGGXD2BfsZnuturhIYs.mft (raw, json)
Hash identifier: 80OIlFCwbdh4uV7joaY/i1YmI9T3CasFtRmfvhytqaU=
Subject key identifier: F5:21:5A:D9:E1:6C:74:CF:97:FB:C1:D8:33:48:C4:A7:16:6D:A8:01
Authority key identifier: C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
Certificate issuer: /CN=c551472480683c61970f605fb199eeb6eae1218b
Certificate serial: 019EC55CF3A51950C9E2E884414A86FF3C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
Manifest number: 165F
Signing time: Sun 14 Jun 2026 09:01:03 +0000
Manifest this update: Sun 14 Jun 2026 09:01:03 +0000
Manifest next update: Mon 15 Jun 2026 09:01:03 +0000
Files and hashes: 1: mAjzWoi04qK6NnjPrTZ48XaGykQ.roa (hash: P8midNKI0EeB3alRGfjHU2gINYYSKmlfTyo7mKM/3qw=)
2: xVFHJIBoPGGXD2BfsZnuturhIYs.crl (hash: tNqsXB59h4Zttnad0YP5IHKz8j0TbDE1NxziAABKuH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c5:5c:f3:a5:19:50:c9:e2:e8:84:41:4a:86:ff:3c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c551472480683c61970f605fb199eeb6eae1218b
Validity
Not Before: Jun 14 09:01:03 2026 GMT
Not After : Jun 15 09:01:03 2026 GMT
Subject: CN=f5215ad9e16c74cf97fbc1d83348c4a7166da801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:33:38:21:e3:eb:0f:ef:8f:cd:80:55:2e:
5b:20:32:b8:e4:f7:51:63:6b:76:94:f2:99:f1:d2:
2b:70:30:8d:b6:ea:e8:8e:41:93:d1:99:55:6f:0a:
2c:f8:7b:e6:41:74:a0:46:52:cd:f6:6c:92:a5:4c:
15:cf:ba:ed:43:d4:5c:74:5f:a2:ab:b7:d0:a6:ef:
d4:3a:ca:92:f7:36:da:bd:74:6c:31:95:f4:14:3c:
30:39:34:c9:33:b8:7f:cb:b4:d7:48:68:86:5b:af:
cc:de:af:41:22:7c:47:88:75:09:33:0d:bd:7e:78:
fd:20:26:2d:d9:68:93:29:e7:f1:0e:71:4e:da:c5:
c3:a5:52:d6:0e:9a:e2:41:28:9c:93:1d:d0:75:bf:
ca:db:7f:96:a6:fe:04:16:5c:17:4f:b6:10:aa:75:
4c:1a:68:77:30:f2:d3:f7:6a:61:f3:e7:e5:42:9e:
29:bc:0e:65:b3:0d:3b:f5:24:cc:81:51:ea:21:72:
07:6f:61:14:ff:75:34:2c:4d:58:38:94:ac:d6:25:
26:a8:da:4d:d5:4b:69:3a:9e:dd:ad:3c:e1:28:d9:
b3:71:1b:f9:bc:15:9d:ac:ad:e1:77:ff:54:e2:fb:
b8:2f:7c:7c:ca:7d:b5:68:93:98:22:f0:93:5e:4d:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:21:5A:D9:E1:6C:74:CF:97:FB:C1:D8:33:48:C4:A7:16:6D:A8:01
X509v3 Authority Key Identifier:
keyid:C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ff:d0:43:f6:cf:fd:59:ac:c3:66:43:2a:5a:e0:6b:63:64:
62:50:00:e3:cf:71:33:01:ff:de:43:c1:a2:2c:9f:e9:df:9a:
12:6c:34:a6:d6:45:f0:f1:1e:be:03:d7:89:f6:ad:15:2a:9f:
62:0a:ce:3b:13:27:ce:62:6c:ed:1f:85:36:9b:65:9a:04:35:
15:a2:c2:5f:3a:52:e9:ad:6d:7d:ae:89:fa:4a:94:f0:cc:04:
21:c0:32:ce:d1:27:85:a3:e4:68:d6:e7:6a:8c:91:b6:53:8e:
71:dc:7c:33:bd:9c:45:1e:3f:4c:79:9b:1f:41:a5:46:41:b5:
33:36:37:e9:ff:52:ac:f3:cf:61:29:a7:48:85:d9:20:4b:1e:
d9:af:92:36:69:b0:ac:b7:6b:e0:ce:12:ef:3c:a5:01:d3:dd:
9f:a3:42:b1:02:95:52:4f:36:34:e6:6f:07:cc:74:f2:cb:b9:
34:8e:34:3b:ba:ca:d6:6a:f8:90:60:44:5f:d3:90:fe:13:41:
42:ca:1f:bc:09:43:5a:e5:f7:75:73:72:a6:f4:7c:9d:80:50:
47:43:de:9d:57:04:1f:30:bd:94:27:4f:a1:7c:4e:8d:39:df:
53:e5:6b:58:7d:e5:7c:1d:2e:86:db:40:c2:c4:5e:5a:36:35:
2f:19:a1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:40:41 2026 by rpki-client