Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: XYLh0dPO8TsgXYserxtijGATSwNJAYbH0OwwpNIrjUA=
Subject key identifier: CC:BF:F0:E8:4D:6D:AB:B0:DE:6D:D6:38:23:76:FA:D9:C2:20:6D:A9
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 019D9A06E7BB3EC9F95FCD8114AD1F633A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 1480
Signing time: Fri 17 Apr 2026 06:00:36 +0000
Manifest this update: Fri 17 Apr 2026 06:00:36 +0000
Manifest next update: Sat 18 Apr 2026 06:00:36 +0000
Files and hashes: 1: IXA5NTfyPmX-NcYymUYHoZqq10U.roa (hash: aV0Y8kWeg0x50q3D9prRP0W1mgyRSrG19k/0B7ej/F0=)
2: ueAFixVmYFJiD-Pjjc9ASXBfU1A.roa (hash: H5ZlbNWM33UZohORBQr6iFvv7D9rUkB4F6O6kRx61Cw=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: J1997lr2dwKZOHb7zZZ6a/rtwnBO0+NsdnXV4XNPYX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:e7:bb:3e:c9:f9:5f:cd:81:14:ad:1f:63:3a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Apr 17 06:00:36 2026 GMT
Not After : Apr 18 06:00:36 2026 GMT
Subject: CN=ccbff0e84d6dabb0de6dd6382376fad9c2206da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:2e:4e:c2:4b:7f:3a:1f:47:09:4b:65:79:
4c:3c:5a:36:4b:7b:5c:b2:9e:c0:16:e1:24:d4:96:
56:c3:96:45:07:8d:8d:49:f5:fd:d1:f5:1e:08:3c:
2f:dc:dc:d7:e9:66:28:78:5e:d2:17:9f:df:35:a0:
9d:e3:92:d9:b1:d5:5d:88:c9:ad:40:9c:c2:25:f9:
fb:c5:03:4c:c0:31:88:5a:58:fa:a6:2d:f6:93:42:
88:8a:08:4f:23:51:67:ef:69:65:78:1b:ce:2c:4b:
a2:d1:c6:c0:47:25:4f:5c:79:5c:bc:d2:f9:11:a2:
02:5d:fb:8a:4c:1b:b3:e0:1f:0a:0a:ad:da:84:62:
be:39:6a:8a:c1:04:a2:c7:e6:97:26:4c:b7:b2:c7:
85:ef:dc:04:55:22:13:70:85:65:10:0e:61:fe:3a:
fd:dd:b3:a4:43:8b:c9:b2:81:84:50:e8:56:78:8a:
c2:81:cd:88:37:56:36:5e:f7:dc:b4:aa:93:5f:97:
04:69:99:48:0f:01:2f:1f:0b:8a:85:fa:29:96:0b:
10:aa:a0:d2:02:7c:59:5d:78:ad:55:57:e0:88:16:
f3:1b:be:fd:e6:22:ca:86:76:aa:13:62:26:37:c5:
fa:44:cc:28:d7:f5:7b:4f:06:1b:74:2b:a5:4c:67:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BF:F0:E8:4D:6D:AB:B0:DE:6D:D6:38:23:76:FA:D9:C2:20:6D:A9
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:af:90:94:2d:51:63:91:56:db:53:31:27:f1:86:9c:1c:a3:
cd:1a:a8:04:2a:b8:14:95:fb:ef:0d:aa:c2:b9:13:6b:2b:0a:
90:1d:41:51:95:ed:fc:7f:9e:c4:3b:41:03:c2:c7:e9:31:5d:
81:51:46:dd:a6:4c:87:a1:e9:80:c2:03:2b:d5:a5:c9:04:37:
48:d2:ca:6b:0a:62:a3:7d:fc:ad:05:cf:cf:a2:3b:4b:86:57:
18:c7:04:99:51:e4:6a:cf:4e:78:60:33:1e:cf:ee:fe:69:43:
07:58:4f:62:b4:11:40:b8:ff:b3:40:1d:9a:a8:94:4a:35:4c:
07:f0:58:c1:75:e2:86:c8:20:6e:f3:92:4b:de:a6:45:25:2d:
7f:89:a7:ab:56:4d:91:22:2a:72:10:b1:88:84:2e:79:a5:6e:
3d:86:c7:e9:35:fe:19:bb:31:e8:69:3d:c6:2a:73:f1:0b:80:
12:90:32:d8:58:27:57:31:81:5b:b1:58:2b:a5:7f:84:f2:bc:
3f:52:b4:fc:41:76:b0:2e:a9:bc:b2:7f:7f:51:52:c7:84:b4:
8f:47:4d:65:d3:0e:82:0e:8a:19:be:31:14:ce:11:c0:44:94:
83:88:34:7d:92:79:62:df:46:89:67:41:ce:9a:e9:eb:20:27:
51:e6:96:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:40:04 2026 by rpki-client