Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: oywCYyQHa3Yvbw8PCkqEFNHQmkWKS4QxQlEiWrsAqbU=
Subject key identifier: 88:42:09:BA:9C:FA:9A:66:54:C7:17:76:8A:B7:19:6C:67:71:D8:78
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 01A0CCDA05877F49F0DACCE431D87E39F57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 1628
Signing time: Wed 23 Sep 2026 06:00:35 +0000
Manifest this update: Wed 23 Sep 2026 06:00:35 +0000
Manifest next update: Thu 24 Sep 2026 06:00:35 +0000
Files and hashes: 1: IXA5NTfyPmX-NcYymUYHoZqq10U.roa (hash: aV0Y8kWeg0x50q3D9prRP0W1mgyRSrG19k/0B7ej/F0=)
2: ueAFixVmYFJiD-Pjjc9ASXBfU1A.roa (hash: H5ZlbNWM33UZohORBQr6iFvv7D9rUkB4F6O6kRx61Cw=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: yRvpq3/NhHM+JFw6VFMyIiO9W1bBS2ouMa81mHGJkoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:05:87:7f:49:f0:da:cc:e4:31:d8:7e:39:f5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Sep 23 06:00:35 2026 GMT
Not After : Sep 24 06:00:35 2026 GMT
Subject: CN=884209ba9cfa9a6654c717768ab7196c6771d878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:4a:72:4e:34:2e:b9:e3:c6:c3:c5:93:c5:
8a:18:86:f3:0f:74:f0:8b:7f:cd:39:5f:2a:1d:ce:
1c:7e:ec:29:a3:96:62:a2:d3:71:a8:54:f1:97:15:
76:b7:83:72:94:42:eb:79:c2:3a:5c:a6:ef:45:d1:
ae:6f:c5:0b:88:db:4f:9b:05:7e:ad:db:56:91:97:
6a:a7:dd:56:27:90:b6:48:0d:95:e8:6c:28:ff:e6:
4a:bb:8f:4a:27:65:5a:a2:df:8d:41:51:12:14:fc:
e0:5b:38:fc:ce:74:c8:dc:49:40:1c:ae:a8:50:09:
d7:b8:08:c1:32:5b:1d:86:80:55:d5:f7:43:69:1f:
12:08:de:13:35:ea:ea:da:28:8b:f0:8e:37:18:29:
41:9e:56:3b:77:8b:8e:51:df:2c:1c:e1:88:66:29:
79:e8:65:d5:79:80:33:0e:34:4c:f2:67:22:bf:a0:
3d:4a:6f:56:6f:4d:4f:9b:33:18:02:45:77:34:91:
7e:f0:43:02:a2:3a:5b:e2:9f:f2:7c:ce:d8:61:49:
48:f5:e5:13:25:38:d5:29:9f:e4:89:e6:4f:95:32:
f8:16:90:72:ad:bc:66:22:2d:2f:4c:0e:db:78:5e:
f6:9c:99:c1:f6:8b:bd:de:5c:50:c3:0a:a7:e2:92:
3f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:42:09:BA:9C:FA:9A:66:54:C7:17:76:8A:B7:19:6C:67:71:D8:78
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fc:47:8a:31:4c:f2:e8:77:2a:1a:f6:95:29:99:f4:6c:c9:
a7:4c:84:d3:0e:a9:9a:9c:90:bc:6f:e4:ac:b7:35:c6:64:67:
ef:18:a5:ef:89:eb:72:83:52:3b:52:b1:41:af:e0:7d:95:fb:
36:bd:1d:35:3c:59:93:27:1f:25:12:20:4d:88:c7:7e:8a:c4:
52:82:2e:ef:de:08:31:00:19:ce:8c:d7:0c:c9:81:18:db:08:
77:ba:8b:0b:f3:25:d5:ea:05:83:b0:8b:72:8a:e4:02:8e:86:
12:0d:e1:3e:82:4f:be:93:a4:7a:c0:b3:e2:78:9e:13:95:fe:
bb:4a:29:1d:6c:6d:51:57:45:1b:69:83:fb:c3:1a:cb:20:d7:
42:99:97:b7:f6:8b:db:0f:3d:dc:19:36:ec:fd:d2:60:c9:92:
80:a7:c2:a0:81:d2:ef:48:cf:8d:08:61:0d:86:bb:a0:e2:3c:
18:cd:fd:9a:11:3b:a5:04:11:95:dd:ba:d5:b0:7a:70:38:99:
22:31:68:18:58:77:6c:0e:66:dc:5c:12:c8:59:98:c0:5f:12:
95:53:9f:11:1d:98:ff:8d:b9:87:0d:1d:77:f4:9c:61:12:f4:
c1:88:0f:a1:ff:9d:81:4f:62:b4:10:85:70:ba:ed:6f:67:30:
90:a8:62:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:15:02 2026 by rpki-client