
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: bt5bXuNx6Uwo9EmayXhqyEDeannhS2lzJMOhd2XAtNM=
Subject key identifier: 8E:97:3C:E7:F8:C3:FA:F1:F0:A5:D1:C1:A9:BC:68:CB:50:36:A7:D9
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 019F92115C0713822A3DFE9A70E4A5889F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 1585
Signing time: Fri 24 Jul 2026 03:00:38 +0000
Manifest this update: Fri 24 Jul 2026 03:00:38 +0000
Manifest next update: Sat 25 Jul 2026 03:00:38 +0000
Files and hashes: 1: IXA5NTfyPmX-NcYymUYHoZqq10U.roa (hash: aV0Y8kWeg0x50q3D9prRP0W1mgyRSrG19k/0B7ej/F0=)
2: ueAFixVmYFJiD-Pjjc9ASXBfU1A.roa (hash: H5ZlbNWM33UZohORBQr6iFvv7D9rUkB4F6O6kRx61Cw=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: gB4XQm/uhf+SS+kezVZFFWM3LrSPK+jBNQgopIEALUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:5c:07:13:82:2a:3d:fe:9a:70:e4:a5:88:9f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Jul 24 03:00:38 2026 GMT
Not After : Jul 25 03:00:38 2026 GMT
Subject: CN=8e973ce7f8c3faf1f0a5d1c1a9bc68cb5036a7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:a2:b2:06:f3:4a:56:54:16:42:0a:c0:44:
ac:62:17:14:95:0c:87:76:2d:f7:a8:48:1f:a1:c5:
2e:c8:b7:b7:01:28:ed:4e:17:e1:0f:18:9d:59:c5:
c8:4a:b6:9c:25:fa:4c:79:c4:53:2f:48:41:9f:e8:
ec:4e:c0:8b:fa:37:88:1e:23:eb:d3:34:c5:7b:4f:
3c:1e:bd:67:48:d2:09:a0:9c:c4:eb:3d:0b:9e:e0:
09:df:db:83:b1:18:c5:91:5c:b4:e1:a8:9a:4b:2b:
ea:08:ec:16:3f:f0:a2:fb:81:6c:79:57:00:69:02:
da:de:cc:1a:3d:a9:db:db:73:a2:a8:6c:18:41:96:
82:8b:52:bc:d7:6c:9c:20:80:f2:44:21:86:2c:3b:
32:e0:f5:69:a7:bf:de:08:6a:fd:98:0a:dd:a0:f7:
70:d1:14:30:74:ac:5a:41:38:06:14:20:33:0d:d2:
06:cd:2f:ce:6f:b6:13:51:d5:07:ce:8a:7c:eb:58:
5d:39:76:04:88:24:9f:1d:91:23:82:4e:0f:ba:18:
1e:41:6d:f0:af:4c:11:c7:38:1c:8d:64:13:47:c7:
3a:8d:4e:ed:92:87:12:bd:6c:e5:df:bb:db:e9:e6:
75:e5:83:d0:86:4d:92:0f:88:e6:8a:2d:52:be:17:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:97:3C:E7:F8:C3:FA:F1:F0:A5:D1:C1:A9:BC:68:CB:50:36:A7:D9
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a1:41:7d:33:f5:59:df:10:da:1b:d7:7d:d8:cb:5a:9d:cf:
55:06:48:cc:96:07:e8:b8:a1:85:51:28:0f:91:1e:f5:ef:02:
42:c9:bc:61:12:2b:a0:63:54:12:66:e6:ef:63:58:57:10:83:
06:91:b7:27:0b:7e:06:19:11:5c:79:71:44:0d:ff:44:37:f6:
52:d5:50:15:39:a8:b1:1c:02:90:2b:cd:a5:8e:3c:83:8d:3b:
7a:f9:1d:15:0e:ed:bf:a8:b5:6a:ea:b0:b7:20:7f:d1:97:76:
23:c3:8e:79:79:b7:67:9f:fa:f6:c3:46:69:c1:06:68:3c:d5:
a3:f7:f1:58:41:e1:74:10:4d:dc:cb:e4:a8:4e:18:4a:18:ac:
9c:e9:c5:35:63:5d:47:ed:3b:a6:a3:b3:c8:3d:73:08:af:8f:
0a:2b:ec:38:b6:ac:e3:f1:65:4d:83:14:28:04:de:0d:f4:a2:
87:60:b1:ac:0f:83:23:01:e6:91:cc:b1:43:06:a6:b2:80:94:
d7:0f:98:11:c0:38:f0:91:74:15:00:5c:70:15:80:15:32:9b:
38:82:da:a2:f0:e1:c5:92:44:7d:3f:16:f3:2d:b1:cc:af:95:
0f:5c:45:f8:6b:c2:de:db:50:ec:7f:58:a0:c1:d7:4d:59:52:
04:b9:23:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:51:43 2026 by rpki-client