Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
File: xVFHJIBoPGGXD2BfsZnuturhIYs.mft (raw, json)
Hash identifier: xya3fONIjEbWE4CAP/6cXitb06/av+pcSc8dqXXnddI=
Subject key identifier: CC:B6:35:E4:D2:80:05:8F:55:03:E5:1B:C1:1A:1C:F2:1D:99:F3:A2
Authority key identifier: C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
Certificate issuer: /CN=c551472480683c61970f605fb199eeb6eae1218b
Certificate serial: 01A125B04AEFF916748953BF88478C93571E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
Manifest number: 179A
Signing time: Sat 10 Oct 2026 12:01:12 +0000
Manifest this update: Sat 10 Oct 2026 12:01:12 +0000
Manifest next update: Sun 11 Oct 2026 12:01:12 +0000
Files and hashes: 1: mAjzWoi04qK6NnjPrTZ48XaGykQ.roa (hash: P8midNKI0EeB3alRGfjHU2gINYYSKmlfTyo7mKM/3qw=)
2: xVFHJIBoPGGXD2BfsZnuturhIYs.crl (hash: cHOboQ+jVAo5ebZHHUc5DfdTeNfAHVxFpyqbH1toinI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:b0:4a:ef:f9:16:74:89:53:bf:88:47:8c:93:57:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c551472480683c61970f605fb199eeb6eae1218b
Validity
Not Before: Oct 10 12:01:12 2026 GMT
Not After : Oct 11 12:01:12 2026 GMT
Subject: CN=ccb635e4d280058f5503e51bc11a1cf21d99f3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:69:a8:b1:56:8d:c3:b9:c0:00:6b:87:5c:
30:a7:eb:91:aa:71:0a:2a:a7:70:ca:ad:77:05:f0:
0f:c9:b5:3e:6a:d3:40:3c:c5:ea:e2:ab:c2:17:12:
0c:40:dd:93:64:93:1a:d1:04:97:f5:f2:b7:94:8f:
54:4d:8e:dc:34:7b:df:52:5a:90:1c:7f:a7:d2:e6:
b9:92:81:0f:8b:43:8a:7f:b3:bd:d4:64:3b:0a:67:
71:43:a9:92:6e:67:14:1f:8b:97:4f:10:3f:da:df:
3f:db:c4:db:7c:80:07:cd:a7:53:3f:92:0d:d0:a4:
19:30:3e:71:59:6e:b3:24:af:9a:46:75:e3:16:83:
cb:2f:5f:de:61:e7:da:0e:66:63:d4:cf:57:bc:1c:
d7:9e:9f:3d:fb:6a:e6:75:86:67:cf:d8:a2:6e:f7:
b0:36:6e:14:c2:2e:b1:3e:d2:db:8f:7f:c6:90:40:
e6:83:c8:e9:8e:90:f1:8f:4b:59:e9:80:93:be:b6:
a6:1d:a0:78:52:2f:a7:7f:1d:50:4c:e8:99:63:a0:
1f:a6:4d:f8:8a:30:1a:04:80:12:18:d1:2e:3c:65:
c9:da:c5:15:40:94:4e:8c:69:70:80:ee:da:19:2f:
1d:c7:85:62:64:e2:c7:77:53:23:c6:35:c3:cc:a0:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B6:35:E4:D2:80:05:8F:55:03:E5:1B:C1:1A:1C:F2:1D:99:F3:A2
X509v3 Authority Key Identifier:
keyid:C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:52:bf:70:6e:e7:26:27:a9:1f:c4:09:2a:42:5a:ee:64:31:
7a:c0:be:3b:36:06:f5:b1:87:38:ca:7b:e5:8a:bd:18:7d:e0:
94:e9:c8:17:21:50:64:c2:bd:24:9a:7f:17:bf:12:50:d5:7c:
cf:df:15:96:f8:77:9f:4a:31:8e:22:7d:8a:7c:d6:7b:8d:c3:
14:c8:d9:d8:48:bf:af:72:08:7f:19:37:65:72:09:4b:ed:c5:
fa:1f:80:9e:ad:fc:e0:58:dd:29:dd:84:cb:28:eb:48:a2:46:
12:22:9b:26:38:0a:b7:75:e1:a0:13:38:af:ad:7d:64:9d:d6:
13:64:d5:b1:91:f7:36:d9:4b:60:02:6c:6f:6d:e4:24:73:e7:
f7:19:c4:df:90:be:3c:d9:32:1a:a6:ea:d1:44:1a:eb:66:32:
76:a0:ed:e0:f2:c7:20:86:22:5c:5d:01:2c:8e:53:f7:30:a3:
45:6a:84:28:c9:1e:eb:2e:e2:73:1c:6c:b6:de:9b:54:c4:8f:
27:12:34:ff:cd:f8:95:36:5a:bd:5b:d4:80:47:0c:f2:16:72:
2f:e2:89:63:5c:f1:36:36:54:09:1d:12:b5:5a:97:d1:8a:3e:
34:17:41:bd:81:d4:31:9e:ae:2c:f3:42:68:26:60:94:c5:67:
7d:1f:c1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:22:36 2026 by rpki-client