Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: X7w9324XWdUnIEVdmMTU3yqr3ruSOW/PireRe5RBP6o=
Subject key identifier: BB:53:6F:ED:00:AA:C5:48:D2:77:21:53:47:C8:08:30:54:52:D9:5C
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 019FA93E4028E3EF6EC89D75C811EAB68D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 1591
Signing time: Tue 28 Jul 2026 15:00:56 +0000
Manifest this update: Tue 28 Jul 2026 15:00:56 +0000
Manifest next update: Wed 29 Jul 2026 15:00:56 +0000
Files and hashes: 1: IXA5NTfyPmX-NcYymUYHoZqq10U.roa (hash: aV0Y8kWeg0x50q3D9prRP0W1mgyRSrG19k/0B7ej/F0=)
2: ueAFixVmYFJiD-Pjjc9ASXBfU1A.roa (hash: H5ZlbNWM33UZohORBQr6iFvv7D9rUkB4F6O6kRx61Cw=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: 64TPjfMZmnduwFZBIGJ3v8883wf62tAUH3fJJFfMz9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:40:28:e3:ef:6e:c8:9d:75:c8:11:ea:b6:8d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Jul 28 15:00:56 2026 GMT
Not After : Jul 29 15:00:56 2026 GMT
Subject: CN=bb536fed00aac548d277215347c808305452d95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:91:5b:82:87:26:1d:c9:ba:80:b7:08:7d:
3f:65:45:a6:08:b4:a4:cd:f0:d7:92:ec:62:9d:eb:
81:c0:58:91:36:f6:a8:33:c7:78:40:97:24:79:58:
2b:ad:19:8e:98:58:a7:5f:f8:d7:b1:b2:d3:74:a9:
e3:e2:d9:ad:e9:f8:97:b5:dc:b1:d7:48:ac:bf:68:
4f:ad:7b:53:d6:2c:65:36:41:bd:37:e2:9e:28:18:
c6:21:21:99:3e:97:53:3e:dc:17:4e:7a:73:57:8d:
f1:a0:cc:96:39:e2:b6:68:e0:40:f1:73:ab:ae:3d:
b1:0b:87:d0:51:81:39:2f:f2:1d:af:54:57:40:a2:
80:7d:48:f6:3f:41:1d:4b:af:5d:13:73:bd:ad:c7:
a9:c0:70:83:db:d4:de:64:7b:bc:13:47:71:2d:ea:
01:af:35:0a:93:e5:63:2a:de:71:64:cd:4f:30:b3:
53:c0:88:94:53:ec:1c:54:0e:d1:ba:79:98:3c:93:
a1:cf:5f:51:6c:1c:5e:d3:c8:83:b8:b5:75:2a:a4:
53:f9:04:8a:02:28:0c:11:a8:d8:3e:3f:20:1d:2c:
ec:92:5f:98:65:53:fd:63:0a:9e:62:34:f5:fa:f6:
7a:8a:c4:ed:ef:e3:a0:bb:17:15:ed:d5:01:51:7b:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:53:6F:ED:00:AA:C5:48:D2:77:21:53:47:C8:08:30:54:52:D9:5C
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8a:a9:a5:04:99:c8:41:6d:0c:dc:34:70:c7:2c:82:bf:23:
b1:43:02:fd:72:3d:21:c2:67:5b:ea:75:08:dd:c3:e9:ad:4e:
b1:0f:7e:e4:bd:2b:a5:dd:5b:22:62:17:9a:65:dd:70:a6:a2:
13:31:db:c6:37:5c:4e:4c:a4:49:e6:38:17:26:28:95:e1:47:
b9:98:4e:83:fa:2e:03:b9:89:0b:a3:04:c8:af:97:c2:ba:b3:
a7:4a:c2:fe:89:78:ff:45:40:09:8e:38:f8:a9:92:59:fc:09:
27:bc:62:c8:e2:9b:f3:d1:72:d6:58:b1:db:11:91:7a:7f:4e:
c8:36:58:8a:e6:47:db:73:f2:6e:ed:fc:e5:53:1d:36:19:16:
11:98:df:9d:3b:1d:ba:38:f8:99:3e:c1:1b:ff:38:ad:66:91:
3f:99:b4:8a:e4:52:78:25:ea:24:e2:c6:74:ce:e8:2f:5c:b7:
6e:d6:03:13:ad:00:4f:bf:f5:c0:44:7b:0d:f7:ab:6e:d6:51:
c4:03:4d:f5:43:e1:cf:41:b6:3d:7d:0b:b0:92:87:4c:93:1b:
04:cd:df:1a:90:26:7d:3e:02:6d:14:bb:2c:a4:69:69:0a:83:
d7:51:79:8b:b6:5d:d7:82:60:28:9b:63:04:4b:58:a4:1b:59:
e1:ca:b5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:32 2026 by rpki-client