Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: WNuEs1V58w/Ja+NXfeCztEAy7SsFQfqpV1cSsp2j/FE=
Subject key identifier: 13:41:8C:E9:D2:31:A0:D5:B3:63:28:D4:9E:1D:19:F1:B8:89:5C:9E
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 01A0D494102BD70124180DA06C58EA43600D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 162C
Signing time: Thu 24 Sep 2026 18:01:08 +0000
Manifest this update: Thu 24 Sep 2026 18:01:08 +0000
Manifest next update: Fri 25 Sep 2026 18:01:08 +0000
Files and hashes: 1: IXA5NTfyPmX-NcYymUYHoZqq10U.roa (hash: aV0Y8kWeg0x50q3D9prRP0W1mgyRSrG19k/0B7ej/F0=)
2: ueAFixVmYFJiD-Pjjc9ASXBfU1A.roa (hash: H5ZlbNWM33UZohORBQr6iFvv7D9rUkB4F6O6kRx61Cw=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: /Snz+uSDdf+jh/K5jMnlTrJANl1m8lXbwrxzAemYVgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:10:2b:d7:01:24:18:0d:a0:6c:58:ea:43:60:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Sep 24 18:01:08 2026 GMT
Not After : Sep 25 18:01:08 2026 GMT
Subject: CN=13418ce9d231a0d5b36328d49e1d19f1b8895c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1a:0e:b4:1a:a0:f6:05:bf:10:bb:2a:8f:ce:
ff:7a:0d:85:de:f3:34:07:01:c6:ff:d7:f8:81:bf:
53:0d:7e:5b:7f:99:c6:ba:03:a1:95:78:e5:40:19:
d4:f0:d1:b7:54:bd:7c:54:08:64:ed:84:d8:fe:ed:
8c:ea:44:8c:c4:0c:4a:b9:f5:eb:a2:81:59:56:d0:
ea:a3:81:c0:24:6a:3e:8c:f0:54:56:48:50:9c:3c:
1c:74:70:0a:79:28:64:da:59:8b:6d:2b:86:f9:49:
27:04:37:b1:75:75:14:61:65:24:fd:cf:fc:19:92:
26:ef:0b:17:e7:2d:ac:4f:9c:e8:f5:f0:89:3a:90:
14:b5:e3:b8:09:87:15:8e:a9:eb:78:88:20:ff:d1:
04:61:3b:56:6e:f4:2d:9d:fe:ce:cb:07:eb:a5:5d:
a2:f4:a6:45:72:d9:f6:70:29:71:d6:13:09:8c:4a:
d0:03:3a:b4:c0:58:e3:83:e0:19:f5:e5:18:da:4e:
5c:e6:7d:61:3c:da:e4:86:47:56:98:1d:76:bf:87:
ad:d6:db:9d:70:c7:5a:6d:7c:1c:a8:ea:1a:ee:fc:
4a:05:e3:4e:53:4d:8b:1c:46:b1:fa:c1:91:37:2e:
9d:14:35:93:08:66:c1:8f:eb:c3:cd:47:ff:0a:5e:
16:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:41:8C:E9:D2:31:A0:D5:B3:63:28:D4:9E:1D:19:F1:B8:89:5C:9E
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:53:e4:1d:59:97:ae:df:0f:97:7d:52:29:e8:bf:1d:f3:33:
f6:a9:e5:28:c0:c4:75:50:8e:00:25:84:2c:de:b1:25:ba:0c:
c6:c7:2c:9c:fa:f9:4a:64:b1:3a:1a:97:bb:b7:71:32:e1:c0:
03:45:11:d8:81:50:fa:33:44:d8:ce:be:2c:53:b1:2f:b6:9e:
bf:d4:9d:d6:b7:7c:4d:6d:04:a9:5c:81:54:38:06:22:78:20:
aa:9f:35:d6:6a:2f:74:84:c6:0f:c3:2f:fa:6e:cc:a8:2b:a4:
58:ce:87:86:c5:51:66:07:86:52:dc:fb:0e:3f:1c:3e:ac:32:
eb:20:df:ec:c2:3e:ad:30:91:4f:d8:23:0e:89:b3:a7:55:65:
1e:84:69:d3:55:00:09:ac:50:f3:2d:dc:82:1a:f4:69:94:f8:
21:e4:57:93:83:a9:50:e7:0c:e4:c2:d0:2e:7a:94:8f:84:f0:
e2:21:d2:2c:4b:1a:69:f0:f7:9e:cc:ae:27:33:6a:1a:bf:d8:
1d:44:1e:5f:dc:fe:c3:a2:95:ea:11:31:c8:31:fb:9e:42:09:
07:57:e1:ec:5d:71:9a:e3:e0:22:8a:01:d1:04:3b:0e:cf:0f:
d1:e2:ec:e4:e6:8f:4d:56:92:8e:f0:62:b6:c8:cd:9e:6c:17:
1b:39:0a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:18:19 2026 by rpki-client