Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: uViSunqjNN0Zfcciie4ouK/xSaze+Qbaz7hptFla+VU=
Subject key identifier: ED:F9:75:A9:D2:DA:45:D8:6E:D4:C1:76:A6:8A:E3:15:61:7B:3C:3B
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 019D28170A844F600E2F86CD94768EF118E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 1445
Signing time: Thu 26 Mar 2026 03:01:31 +0000
Manifest this update: Thu 26 Mar 2026 03:01:31 +0000
Manifest next update: Fri 27 Mar 2026 03:01:31 +0000
Files and hashes: 1: IXA5NTfyPmX-NcYymUYHoZqq10U.roa (hash: aV0Y8kWeg0x50q3D9prRP0W1mgyRSrG19k/0B7ej/F0=)
2: ueAFixVmYFJiD-Pjjc9ASXBfU1A.roa (hash: H5ZlbNWM33UZohORBQr6iFvv7D9rUkB4F6O6kRx61Cw=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: ysGR2TYUsXWH8uiJxWCVg7hRatIHrrBLFJo2J9fSLY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:0a:84:4f:60:0e:2f:86:cd:94:76:8e:f1:18:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Mar 26 03:01:31 2026 GMT
Not After : Mar 27 03:01:31 2026 GMT
Subject: CN=edf975a9d2da45d86ed4c176a68ae315617b3c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:b1:a0:54:fd:9b:ce:e3:eb:0c:c3:53:06:
a9:06:03:93:3c:60:5a:69:47:97:44:fb:a0:b7:0c:
57:f0:05:7a:5f:e3:93:57:52:8c:51:33:60:03:94:
5f:aa:ae:b5:e9:14:ca:d1:9c:ac:f4:48:51:ae:a1:
c9:62:ef:41:5d:f6:a3:6f:30:d6:55:a5:b5:5d:30:
5d:56:b9:82:23:b0:8f:38:2d:21:65:4e:13:69:29:
9d:ed:cf:26:87:f6:9a:c6:de:da:26:68:94:f4:f8:
a7:82:c6:34:cb:3f:09:e6:73:af:38:aa:d1:93:67:
e4:2e:d4:78:00:f3:a8:fa:c0:5f:ea:1e:49:61:dd:
cf:3a:59:3a:74:ed:23:41:9b:16:1c:5c:f6:e8:96:
5e:74:b6:aa:da:05:9d:2f:90:0f:b0:ca:ea:a0:f5:
44:41:1f:4d:67:46:bf:cf:7c:0a:b0:ea:ed:6e:cb:
00:3d:28:9c:db:a7:c4:32:4f:62:65:60:72:40:91:
df:64:96:43:e6:bd:cc:5f:0f:4a:83:b0:3f:27:74:
72:29:bf:a2:ec:02:4b:6a:b4:65:8c:5e:89:7d:6f:
df:fc:f5:08:c3:c3:4d:ad:2a:06:7b:cf:e3:6c:63:
4b:85:dd:45:46:f8:bb:c1:b8:c4:b8:d1:93:18:96:
c4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F9:75:A9:D2:DA:45:D8:6E:D4:C1:76:A6:8A:E3:15:61:7B:3C:3B
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:79:03:f1:a1:da:82:39:e0:1e:1a:fd:3a:3a:14:b0:b1:e7:
7c:59:45:23:72:2d:0f:78:f6:91:e8:fd:0f:18:a3:e0:68:d4:
aa:7c:74:b1:a0:9c:38:87:33:ca:71:f4:1e:90:fe:c8:32:04:
d7:c1:ab:73:14:f8:a7:66:f1:15:1d:df:69:02:1d:ec:86:59:
2d:02:cb:8e:db:ec:3f:4b:6f:f7:0f:82:52:97:68:fa:cf:51:
6e:fa:af:43:42:66:07:c8:1f:a5:ed:8a:2d:9f:42:89:41:ac:
91:35:8c:b2:4f:2c:52:4c:bb:2d:33:f9:4e:97:4c:1f:c0:74:
13:3f:d1:53:1e:25:1d:b2:1e:34:0d:1a:a7:a2:d9:ef:d7:30:
40:af:4c:c7:32:f9:f9:72:cd:9b:6c:2d:4c:94:2e:60:6f:59:
91:93:78:4c:4b:be:c0:ae:66:c8:eb:f8:d3:bb:14:89:d7:2b:
54:b9:c6:65:67:a9:e4:be:3d:9e:82:ab:24:72:9e:89:c2:20:
56:bf:21:54:82:ee:55:7a:cc:54:a1:7c:b2:99:2c:cc:5c:30:
77:0a:91:4a:40:11:71:65:5b:b5:f3:0b:91:eb:34:83:47:d4:
37:00:75:fc:74:f8:e0:f1:8a:79:07:02:26:15:ed:ca:30:03:
a0:58:52:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:00 2026 by rpki-client