Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: qT9zwJ+oOUyQ33bg3JexDiIKjhPMfv1NjJ0qXE3KIjU=
Subject key identifier: D7:6C:1F:ED:F0:1B:A3:20:0C:04:7E:91:34:AC:45:AB:6C:8E:F9:06
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 019CAC7DD3850B648E3B1A2DCD568FD47FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 1405
Signing time: Mon 02 Mar 2026 03:00:53 +0000
Manifest this update: Mon 02 Mar 2026 03:00:53 +0000
Manifest next update: Tue 03 Mar 2026 03:00:53 +0000
Files and hashes: 1: IXA5NTfyPmX-NcYymUYHoZqq10U.roa (hash: aV0Y8kWeg0x50q3D9prRP0W1mgyRSrG19k/0B7ej/F0=)
2: ueAFixVmYFJiD-Pjjc9ASXBfU1A.roa (hash: H5ZlbNWM33UZohORBQr6iFvv7D9rUkB4F6O6kRx61Cw=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: C4g5s2alSwctTXfSUbWhmXLZPHviamhLzJcvwoiHENg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:d3:85:0b:64:8e:3b:1a:2d:cd:56:8f:d4:7f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Mar 2 03:00:53 2026 GMT
Not After : Mar 3 03:00:53 2026 GMT
Subject: CN=d76c1fedf01ba3200c047e9134ac45ab6c8ef906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:bb:e9:47:26:6a:5f:57:18:14:71:0d:e7:
5f:0f:1a:51:b1:ab:58:cf:39:83:a4:80:ef:18:1f:
fd:27:f7:56:d8:64:06:8e:4a:09:3a:bf:5a:5c:e6:
16:44:70:98:ce:60:ba:22:d5:77:43:fd:da:c2:8d:
74:d6:be:9a:ba:f4:3d:52:2e:d3:56:8e:0e:9f:7f:
23:f1:54:cc:f5:17:4a:14:9d:fe:4b:bc:2c:3c:3f:
86:f0:76:a5:bd:b4:91:f0:eb:76:74:0d:4f:69:1a:
f7:4b:bc:58:e0:6b:0d:f2:db:7b:e6:cc:af:00:58:
95:c4:e7:3e:c1:5e:0f:5e:b3:08:96:d8:ef:78:c1:
1e:ee:47:71:ab:5c:6c:4a:41:b7:92:3a:dd:f0:48:
0c:fd:ba:41:c2:cf:2c:07:63:61:d7:6c:30:3b:da:
08:f5:59:44:96:8f:fb:d1:e9:01:02:be:65:87:e8:
15:d0:d3:49:e3:90:ec:a6:1d:df:e0:36:5e:a6:bb:
a0:d8:62:6f:05:7e:ef:2f:74:de:fd:48:db:83:50:
b7:00:b5:27:97:da:42:9f:f9:e5:d5:b4:bb:3e:21:
bf:f0:39:31:d3:e1:25:04:57:7f:d3:e6:43:85:07:
a7:36:d3:2a:f7:5d:8a:56:7a:af:7e:36:6d:3e:1c:
97:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6C:1F:ED:F0:1B:A3:20:0C:04:7E:91:34:AC:45:AB:6C:8E:F9:06
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:61:fc:33:b7:44:5e:94:8c:8a:33:4f:4a:2d:bb:df:15:47:
27:0f:97:c5:01:aa:76:27:52:be:9f:2a:15:37:86:d0:af:d7:
ac:d1:66:05:e4:88:80:7a:cf:b6:62:da:e8:d6:aa:fd:66:8b:
47:04:da:80:df:46:de:63:c9:68:1d:75:7b:50:7a:2c:37:38:
8f:0b:c7:18:49:5c:3e:84:04:7e:20:71:45:61:69:6e:d7:be:
bc:55:ba:0b:ca:b0:7b:11:00:90:19:df:5a:5c:be:18:1f:76:
4f:33:ba:e5:43:69:a3:f2:10:fb:13:26:22:48:d6:70:c6:1d:
00:e4:3a:81:a9:2b:93:cd:33:d3:8c:18:7c:c5:57:02:97:b6:
ef:bb:e7:47:0d:39:a9:34:c7:21:14:15:ac:f9:16:eb:aa:d4:
54:c8:a3:8a:63:d2:70:08:6e:d9:85:e5:52:8e:a2:6a:7f:a1:
aa:a9:ce:6b:fb:b4:61:f2:78:1b:fd:e0:0c:37:40:31:3d:98:
5f:2c:fa:61:e7:f1:e6:a6:a6:42:b7:08:39:1d:a1:37:58:33:
7c:11:31:c1:a3:9c:dc:68:aa:5d:a3:9a:cd:47:d8:4c:08:ef:
a1:c3:55:ff:ce:70:cd:ba:a9:9d:0b:39:5d:ac:56:e6:13:b2:
b6:e3:39:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:22 2026 by rpki-client