
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
File: xVFHJIBoPGGXD2BfsZnuturhIYs.mft (raw, json)
Hash identifier: gWUopIQH7ulYRktfZlJmijBtU5aI37MYyTe12powg/Y=
Subject key identifier: 7B:11:8D:73:D1:59:44:7B:9B:27:52:C3:19:1C:2F:15:D8:50:6C:7F
Authority key identifier: C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
Certificate issuer: /CN=c551472480683c61970f605fb199eeb6eae1218b
Certificate serial: 019F95EE12FE975FE8E04837C4DB212FBC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
Manifest number: 16CB
Signing time: Fri 24 Jul 2026 21:00:35 +0000
Manifest this update: Fri 24 Jul 2026 21:00:35 +0000
Manifest next update: Sat 25 Jul 2026 21:00:35 +0000
Files and hashes: 1: mAjzWoi04qK6NnjPrTZ48XaGykQ.roa (hash: P8midNKI0EeB3alRGfjHU2gINYYSKmlfTyo7mKM/3qw=)
2: xVFHJIBoPGGXD2BfsZnuturhIYs.crl (hash: aWH6aIiRZmGakjZtgLfqSJCSSpqTrBolrTzijHFAaNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ee:12:fe:97:5f:e8:e0:48:37:c4:db:21:2f:bc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c551472480683c61970f605fb199eeb6eae1218b
Validity
Not Before: Jul 24 21:00:35 2026 GMT
Not After : Jul 25 21:00:35 2026 GMT
Subject: CN=7b118d73d159447b9b2752c3191c2f15d8506c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:73:40:a7:1b:6a:74:8d:1e:6d:2a:97:96:
64:ee:3c:5c:d1:ad:94:31:d3:13:da:dc:e9:84:a1:
9f:73:0a:4b:91:33:a4:83:79:6f:a1:d2:ec:ed:d9:
96:2f:61:1c:35:48:f1:d2:92:fb:45:22:f6:c1:8a:
6a:33:e2:2c:21:ad:f7:18:dd:c5:2f:71:b3:4f:4e:
07:e3:aa:bc:61:f6:0a:e9:d9:20:5d:8b:d8:8c:62:
eb:4c:39:70:06:0c:ae:d4:e6:72:5a:c0:4e:7c:a8:
87:32:19:f5:ce:b3:23:a3:18:53:6c:68:c1:e9:ae:
75:7f:19:30:24:e5:c6:2b:86:50:9d:a7:d9:72:7f:
7c:aa:a3:fd:d5:0b:9b:fd:53:dd:56:cf:07:02:71:
fa:84:08:79:41:51:cb:f1:5d:f9:81:72:9b:0d:7d:
c5:30:b6:e3:47:62:30:b7:b5:9a:a6:ce:7a:ca:2c:
75:45:41:c4:49:bd:7b:3e:da:a2:a1:cc:2a:c5:91:
d9:0d:82:74:3f:25:23:42:d2:61:9a:12:e1:98:24:
be:84:76:ad:55:0c:41:ab:72:63:13:8b:60:57:f1:
23:72:bb:5f:13:b0:31:e1:51:8f:91:cf:4a:d5:9b:
b4:3a:38:81:a8:af:57:9c:52:9b:24:ad:4e:67:db:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:11:8D:73:D1:59:44:7B:9B:27:52:C3:19:1C:2F:15:D8:50:6C:7F
X509v3 Authority Key Identifier:
keyid:C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:97:f5:4c:e8:63:47:56:87:79:b6:f3:d0:90:e7:f5:cc:bb:
87:d7:c2:d8:78:6f:eb:3c:3c:d0:34:de:35:fb:f6:11:7b:30:
98:ab:92:2d:3b:ff:8b:3f:d8:c5:11:67:fa:d4:41:d9:21:1f:
54:8c:a1:0c:9e:72:b3:f9:57:4a:4a:62:d4:8c:39:4b:8b:cd:
70:a2:82:31:18:2d:ed:bb:01:84:0f:63:1c:6a:4a:e1:6b:97:
44:72:3a:62:df:fb:f3:17:43:c3:42:bb:aa:0b:8a:1e:65:2c:
33:41:53:47:1e:0f:e8:2d:86:6d:a6:a1:d4:35:ab:24:e5:69:
2a:4a:b2:de:10:03:51:58:ea:36:07:ed:f7:4f:5d:ab:7c:9a:
37:3d:ce:e2:b7:13:27:3f:d4:4a:25:cd:d0:1c:95:ed:ae:f3:
91:2b:a1:c5:97:df:c3:f7:cd:10:8f:9d:1f:f3:02:aa:a0:2d:
80:2c:fe:32:7e:23:a5:5c:96:8b:7d:22:68:3a:c4:ab:45:df:
ac:61:c5:5d:e9:f9:ea:d9:a1:22:39:72:a7:78:97:7b:f1:fa:
96:b1:c9:96:c4:9c:3e:b6:95:04:5b:ac:8c:f1:74:4c:54:1f:
a5:ce:10:5d:96:0f:0d:48:69:d7:c1:3b:14:d0:e9:c8:31:49:
cc:dd:7a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:15:15 2026 by rpki-client