Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: eUpS38ThqGSs9ZyX1SN+zyToNhgWRdSSZeHqZVIcZq8=
Subject key identifier: 98:31:2B:F5:2B:DB:BF:7A:F0:5F:C1:84:63:5C:15:9C:03:18:E3:ED
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 019EC17FA8DE58DC0007BCEAAD880DC93CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 1519
Signing time: Sat 13 Jun 2026 15:00:29 +0000
Manifest this update: Sat 13 Jun 2026 15:00:29 +0000
Manifest next update: Sun 14 Jun 2026 15:00:29 +0000
Files and hashes: 1: IXA5NTfyPmX-NcYymUYHoZqq10U.roa (hash: aV0Y8kWeg0x50q3D9prRP0W1mgyRSrG19k/0B7ej/F0=)
2: ueAFixVmYFJiD-Pjjc9ASXBfU1A.roa (hash: H5ZlbNWM33UZohORBQr6iFvv7D9rUkB4F6O6kRx61Cw=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: jrtPQo/PbSVNoj6W9hpUTh3VrDNEJhbslc0q8vnBobc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:a8:de:58:dc:00:07:bc:ea:ad:88:0d:c9:3c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Jun 13 15:00:29 2026 GMT
Not After : Jun 14 15:00:29 2026 GMT
Subject: CN=98312bf52bdbbf7af05fc184635c159c0318e3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9b:af:ea:74:8a:9c:4c:06:96:c9:84:9e:7c:
ff:95:59:a0:33:15:1e:f1:d3:e0:01:61:82:93:4d:
15:7a:65:bd:27:86:e2:e6:38:0f:95:83:a9:d3:ac:
76:15:a7:f8:ff:15:2c:fb:58:bf:e6:25:b1:b2:cd:
19:fd:ea:99:5e:55:a2:68:a2:0f:f7:08:f1:5a:9f:
14:b8:0c:a0:6b:6e:7f:5e:b6:c7:e1:13:bd:81:01:
74:07:12:31:ac:74:29:2d:5e:fd:2e:10:ae:27:86:
03:61:67:cf:7f:9a:88:99:c0:3b:5d:3d:57:7f:9e:
68:c5:dc:33:30:7e:3a:6c:8a:f4:27:d3:a0:79:7b:
71:9b:7a:d9:1a:f6:90:84:cd:5a:91:bd:55:60:e3:
76:2d:f9:a2:79:c3:95:1b:b8:4a:1d:cf:a3:2d:d8:
88:2a:60:e6:46:06:e4:3b:23:90:4d:87:e7:33:84:
bc:2f:3f:08:1c:2e:35:4c:b6:90:dd:17:65:06:fc:
be:4d:f1:c0:fa:6d:3b:d4:08:63:f2:94:71:ab:52:
98:b0:f6:31:02:80:d1:20:f6:5e:88:b5:22:cc:fe:
6b:39:56:0b:2e:0b:e7:d2:a5:5a:93:e8:3a:e3:5f:
86:b8:4e:7b:cd:4a:22:da:07:d9:dc:5c:1b:3c:0a:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:31:2B:F5:2B:DB:BF:7A:F0:5F:C1:84:63:5C:15:9C:03:18:E3:ED
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:77:8c:f5:09:49:cf:0a:0f:3f:bb:e2:d2:23:08:f5:0f:cc:
40:3a:c4:74:fd:a2:74:bd:80:36:09:50:ae:2b:2e:28:69:90:
d3:5b:17:ec:b3:7a:68:7b:48:bc:10:e5:99:ae:ef:a4:57:d4:
cd:e1:73:2c:97:ad:b4:39:0d:aa:c9:25:ae:fb:89:24:73:23:
85:44:18:46:2e:3a:f6:77:be:0d:8f:56:79:9d:be:68:99:5b:
b8:2f:39:7e:32:2a:7e:ab:67:ce:39:fb:ac:6c:e6:58:a0:bc:
62:0a:d4:5d:ef:17:44:fb:a9:1c:29:4a:21:f0:43:dc:f1:4f:
50:21:ad:0d:6b:2c:3b:d2:36:ab:65:ed:54:f5:3f:96:12:3d:
05:1f:d8:91:16:df:a9:e4:a7:e0:9d:86:c6:58:0e:76:03:bc:
1d:7f:8c:d6:f0:eb:21:55:fe:96:3f:f2:5c:50:12:05:8d:2a:
31:8a:f3:6d:d7:5f:8c:3f:2a:b7:9e:9a:04:33:11:84:b9:da:
46:9f:93:78:2c:92:b3:32:40:da:e5:53:d7:a4:44:f7:4d:67:
2e:ae:ec:a1:0f:3b:84:8c:14:89:dc:4d:46:5f:a9:f0:f7:28:
59:01:85:d0:12:dd:c2:c4:ec:99:a6:9d:89:7d:52:f2:f5:16:
18:31:60:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:58:27 2026 by rpki-client