Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: zVmThrYUrScsMjoC8/y24sd+OfTcpMe2eTUn/vTqsZc=
Subject key identifier: EC:19:BD:6D:C6:33:39:81:EB:0B:7F:EC:65:D9:D6:B7:30:DA:00:F4
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 019E1D59D988CCB3B1F1373FA91D06104A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 14C4
Signing time: Tue 12 May 2026 18:01:28 +0000
Manifest this update: Tue 12 May 2026 18:01:28 +0000
Manifest next update: Wed 13 May 2026 18:01:28 +0000
Files and hashes: 1: IXA5NTfyPmX-NcYymUYHoZqq10U.roa (hash: aV0Y8kWeg0x50q3D9prRP0W1mgyRSrG19k/0B7ej/F0=)
2: ueAFixVmYFJiD-Pjjc9ASXBfU1A.roa (hash: H5ZlbNWM33UZohORBQr6iFvv7D9rUkB4F6O6kRx61Cw=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: qF/Qg4KQIy98CtfO08x+2ISj8gRpYhF+BWmJ8PeHmnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:d9:88:cc:b3:b1:f1:37:3f:a9:1d:06:10:4a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: May 12 18:01:28 2026 GMT
Not After : May 13 18:01:28 2026 GMT
Subject: CN=ec19bd6dc6333981eb0b7fec65d9d6b730da00f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:c0:e4:d8:de:41:5b:86:8f:da:3e:36:ae:
29:dc:fe:a4:14:24:be:ac:ed:55:9e:66:09:b7:c6:
d9:f7:c9:38:16:e5:2d:c6:90:09:43:40:a4:29:ab:
00:9c:35:64:d6:28:80:e7:7d:29:66:f2:81:3a:2a:
cb:4f:f8:28:a6:f7:dc:02:34:f9:91:02:fe:92:c5:
dd:75:49:bc:df:d2:4e:42:b9:ee:65:06:01:50:99:
c5:23:bd:20:09:03:58:50:68:e7:b4:7c:01:e7:33:
45:f9:67:84:9c:64:b0:f2:9e:53:dd:3b:42:86:6b:
59:fd:14:20:53:ff:3c:35:68:e3:c0:e3:3c:bc:f9:
a0:0c:a9:74:6d:b3:a0:24:d3:6e:e4:7b:f9:e3:25:
13:c9:9e:fa:89:8a:48:e7:db:76:f6:e8:63:9d:67:
97:e8:03:cd:02:38:76:e5:b8:32:8d:b2:38:68:4a:
2e:74:ad:e5:75:10:7c:40:3a:b7:2b:61:7e:57:74:
fe:c4:7d:80:66:47:d7:db:af:cb:d3:bf:cf:13:9e:
56:74:7f:1d:53:c6:0f:00:12:5a:11:20:c8:04:df:
67:c0:73:48:93:6b:8a:88:05:19:d6:2e:57:58:ee:
f7:cb:af:bd:02:3e:b9:0d:a4:74:82:41:84:b0:c7:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:19:BD:6D:C6:33:39:81:EB:0B:7F:EC:65:D9:D6:B7:30:DA:00:F4
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ab:41:89:ef:3e:5d:77:87:d1:77:ff:85:92:34:d8:58:fe:
02:ae:52:19:77:b1:57:6a:7a:af:8c:3a:7f:71:88:62:2a:63:
f7:7a:37:d7:61:a0:ae:10:1c:ef:8c:d9:a7:07:18:81:17:46:
89:28:83:f4:d8:6e:69:b4:a2:16:0c:c2:7f:7a:30:fd:88:44:
28:57:68:67:07:2b:79:60:e8:46:21:60:09:e9:8d:b9:aa:61:
5e:33:b3:11:5f:c8:68:c5:68:5b:bf:42:12:c9:53:5a:04:b8:
f3:71:0a:c3:35:bf:7a:9e:86:8d:0d:2c:3e:cf:98:45:a3:7a:
02:91:10:55:04:23:ac:bb:e1:ed:3a:8a:31:d6:ec:56:e2:32:
4c:98:f5:fa:6f:d9:ac:4c:91:7e:46:1f:06:72:e8:62:80:a1:
69:e5:4a:60:5c:2d:d7:92:e1:c6:ad:4d:64:91:7e:11:0d:fb:
73:90:46:6a:92:0f:96:31:aa:d7:70:ff:ce:e5:54:ae:70:12:
77:3d:88:55:af:f2:b8:88:8c:93:3f:94:f4:9a:9e:4c:9a:3e:
69:14:49:9c:94:41:d3:a7:d7:63:1f:6e:6c:63:dc:70:10:3e:
33:ce:7d:3c:35:4c:9c:f4:4f:c7:8a:64:7c:17:db:82:17:af:
8f:69:89:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:57 2026 by rpki-client