Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
File: xVFHJIBoPGGXD2BfsZnuturhIYs.mft (raw, json)
Hash identifier: N+x8LyyfUTq1d1Slct9+tDfyN1bKIkYP1mK4XI2f+8M=
Subject key identifier: EA:F1:33:34:F6:57:AF:52:58:DA:02:22:20:72:05:C6:3B:39:9C:3B
Authority key identifier: C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
Certificate issuer: /CN=c551472480683c61970f605fb199eeb6eae1218b
Certificate serial: 01A1314641BB6D6227DB8F08EB3A2D0AE66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
Manifest number: 17A0
Signing time: Mon 12 Oct 2026 18:00:50 +0000
Manifest this update: Mon 12 Oct 2026 18:00:50 +0000
Manifest next update: Tue 13 Oct 2026 18:00:50 +0000
Files and hashes: 1: mAjzWoi04qK6NnjPrTZ48XaGykQ.roa (hash: P8midNKI0EeB3alRGfjHU2gINYYSKmlfTyo7mKM/3qw=)
2: xVFHJIBoPGGXD2BfsZnuturhIYs.crl (hash: llVIqFaV7238MAhdjQ7+i42TqKr40eBFye0cpKDINXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:46:41:bb:6d:62:27:db:8f:08:eb:3a:2d:0a:e6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c551472480683c61970f605fb199eeb6eae1218b
Validity
Not Before: Oct 12 18:00:50 2026 GMT
Not After : Oct 13 18:00:50 2026 GMT
Subject: CN=eaf13334f657af5258da0222207205c63b399c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c6:41:45:f7:0b:a1:a2:b2:29:82:fb:99:ad:
92:04:a0:69:74:3a:38:02:a0:5c:14:07:70:34:3a:
47:63:66:88:c2:ac:ab:99:39:70:7b:51:98:58:d9:
23:b2:ee:ab:15:53:8b:ed:12:9c:3d:f4:bb:00:4d:
3f:5b:9e:bd:b4:c6:7d:79:bc:fc:b5:7b:01:a4:65:
38:b2:15:de:30:b0:f5:92:16:61:b4:c3:d5:13:4e:
ba:86:3e:85:64:70:0a:3d:f6:54:2c:94:1f:ee:b1:
c5:78:90:a3:85:15:32:c1:16:31:7b:ed:1c:c3:47:
2d:6d:86:77:42:00:8a:16:28:d3:ef:e4:51:89:26:
9f:7a:1c:25:8a:d3:9e:43:48:3d:ce:7a:75:68:48:
84:83:3a:c4:79:3a:1f:d4:2b:cd:e6:09:b3:72:03:
85:0f:1a:e9:21:4c:42:7b:d1:12:88:e2:fd:d4:a7:
65:25:72:0c:d0:2e:44:ca:51:09:64:db:b5:99:de:
0b:57:06:3a:43:65:60:4a:c1:c0:db:7a:74:5d:f0:
bc:98:13:69:35:74:88:8c:23:5c:05:54:f3:b2:3c:
52:f0:a5:2e:5c:e1:bb:28:56:c5:e5:d6:97:cf:00:
93:5d:0b:0f:2a:6c:06:c0:85:f7:d6:bc:f7:85:5e:
96:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F1:33:34:F6:57:AF:52:58:DA:02:22:20:72:05:C6:3B:39:9C:3B
X509v3 Authority Key Identifier:
keyid:C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8e:ed:24:9d:1c:93:8a:d4:4e:78:99:b2:e1:bb:dd:6e:19:
81:cd:ef:b8:94:a7:89:7f:e4:ad:6d:03:39:6e:16:ae:77:25:
b3:3d:a6:51:a0:36:3d:11:e1:f0:da:ec:30:0e:ef:95:ac:aa:
df:b7:2f:34:48:84:ab:23:02:ee:e6:8d:6c:c4:78:6f:e4:df:
65:bc:13:3e:c3:eb:1e:f2:b9:7a:af:1a:a9:cb:f2:a9:fb:21:
f1:08:20:d9:55:0b:a3:5b:14:53:03:5c:76:59:9d:4c:a4:b1:
7d:06:b1:3e:50:76:f6:34:dc:10:76:7e:31:cd:06:dd:eb:b8:
77:e2:a3:76:c6:b4:30:93:be:cc:6d:06:64:98:ac:c8:2f:a4:
a6:9b:0e:6b:7b:dc:9c:48:fd:80:be:49:57:0f:c1:b8:bd:f3:
d9:50:ed:ce:cf:38:d2:cd:0d:6e:42:7a:be:e6:00:39:58:32:
33:0f:a7:53:01:a6:11:fd:21:ef:fc:d1:c4:5f:13:c6:6f:46:
84:33:3d:0c:75:d3:c8:56:43:6f:9f:d6:73:89:90:31:56:08:
50:a1:84:08:e7:c8:1f:a4:24:03:d9:e5:ec:d2:f4:fa:ae:1c:
6f:38:30:d7:9b:43:46:2d:44:a9:5b:b3:92:dd:5c:b6:10:f3:
97:c2:29:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:49:16 2026 by rpki-client