Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.mft
File: K59zaHqFPjIkksNpEsGGUUHB7NA.mft (raw, json)
Hash identifier: 9ov/NyhHvnFHvpKJX4bLVTSNFNL+zkvkF+WCY17EgjM=
Subject key identifier: 4D:97:B0:60:30:9D:90:75:BD:25:F8:50:1D:7C:3F:71:22:E6:3F:D3
Authority key identifier: 2B:9F:73:68:7A:85:3E:32:24:92:C3:69:12:C1:86:51:41:C1:EC:D0
Certificate issuer: /CN=2b9f73687a853e322492c36912c1865141c1ecd0
Certificate serial: 01A13E9503E8D475C1BE0EF2455403457294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K59zaHqFPjIkksNpEsGGUUHB7NA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.mft
Manifest number: F5
Signing time: Thu 15 Oct 2026 08:01:55 +0000
Manifest this update: Thu 15 Oct 2026 08:01:55 +0000
Manifest next update: Fri 16 Oct 2026 08:01:55 +0000
Files and hashes: 1: K59zaHqFPjIkksNpEsGGUUHB7NA.crl (hash: 7aSRmdOkdlio11vQLRKKgpY2VGmWyHA5wD8gYznMjQs=)
2: XEKXrUtUSEHKeRecg-HKhQKGsRA.roa (hash: 9+YjXqvRCQzbgAOAmscmNkEvHBqrZxLodjNclOm5rLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K59zaHqFPjIkksNpEsGGUUHB7NA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:03:e8:d4:75:c1:be:0e:f2:45:54:03:45:72:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9f73687a853e322492c36912c1865141c1ecd0
Validity
Not Before: Oct 15 08:01:55 2026 GMT
Not After : Oct 16 08:01:55 2026 GMT
Subject: CN=4d97b060309d9075bd25f8501d7c3f7122e63fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:04:42:7a:f4:47:69:f9:f6:16:0d:2f:70:
92:2a:3a:c3:7a:c9:54:55:24:d5:69:05:e0:ab:76:
db:45:8c:e4:f5:bc:de:04:bb:09:f6:cc:8f:0e:66:
ed:78:63:76:e6:ea:82:af:4b:99:27:79:e7:77:f0:
33:48:09:97:3b:19:2c:45:1d:08:fb:a8:0b:86:ce:
9f:cd:01:20:5e:85:12:47:b9:b4:d3:f3:12:de:45:
d0:23:07:97:5c:4e:6c:6a:da:bc:2b:27:4a:b5:76:
fa:5a:65:ec:ff:46:53:17:fc:23:1d:1d:58:68:bc:
53:c1:13:f5:b9:35:c7:51:d7:fa:95:88:30:86:4b:
4a:93:f7:d7:93:f0:77:d8:bb:59:9e:81:a5:cd:da:
78:13:46:f9:d1:25:be:9c:c3:35:be:63:d0:82:4b:
a7:d1:9a:8b:61:fb:10:e4:35:23:7f:6d:53:94:e3:
d0:5c:1c:c7:aa:90:a8:94:16:f4:c4:6d:90:b7:29:
db:4f:61:91:fc:62:ad:f1:35:00:0e:c4:61:06:57:
01:93:ca:40:d4:35:6c:d1:d0:ae:e5:1c:68:78:18:
6e:4d:b5:9d:39:2a:98:05:fc:52:fe:ca:58:59:bb:
a5:b5:38:7b:e8:ed:8c:2d:16:89:c8:c0:ed:50:13:
eb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:97:B0:60:30:9D:90:75:BD:25:F8:50:1D:7C:3F:71:22:E6:3F:D3
X509v3 Authority Key Identifier:
keyid:2B:9F:73:68:7A:85:3E:32:24:92:C3:69:12:C1:86:51:41:C1:EC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K59zaHqFPjIkksNpEsGGUUHB7NA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7f:c9:7c:69:1d:bd:ea:2c:36:98:42:1c:4b:4f:e3:88:4d:
22:65:2c:08:0c:05:39:96:7f:ea:ba:ad:73:37:22:fa:65:6a:
54:10:69:eb:8e:69:03:d3:2e:6b:fc:16:27:7e:0a:28:ac:07:
b7:b8:26:16:4c:73:f0:63:48:8b:ce:8f:f8:7c:d8:d6:87:34:
5f:32:37:3b:42:02:ae:06:99:71:28:40:0e:8b:c8:05:41:af:
18:71:3f:e0:9f:c4:e0:38:fb:8a:ce:c6:8c:55:b8:d3:87:ed:
95:8b:f3:79:fc:b4:0d:7f:14:d0:24:2e:26:fc:aa:0d:c8:8c:
8b:d6:61:7d:1d:98:96:d7:bc:d8:ad:f4:e9:8c:a4:7f:74:76:
95:0e:d0:0c:83:c1:a6:3b:5a:0b:a6:c4:6a:17:59:cb:94:2b:
64:44:03:ea:5a:b3:ab:76:a4:5b:2c:47:81:81:f9:94:14:85:
cf:f9:e5:6a:d2:a7:73:71:4e:aa:f7:04:45:7d:29:b4:a7:a3:
2c:4d:01:5e:de:47:7b:3e:fb:2e:1a:db:90:ee:c3:33:f2:f2:
b2:6a:37:6f:0b:bf:1b:3c:f2:b4:3f:a9:56:8a:cf:b7:85:64:
96:a1:ce:3c:c6:f2:54:8a:7f:ab:1e:a7:c3:1a:06:14:d8:98:
5f:8e:e2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:55:41 2026 by rpki-client