Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
File: 58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json)
Hash identifier: ZS+2yzrZP/W693OZ/pQLkwlltkjZV297agISOiUtBPc=
Subject key identifier: 5A:F0:F1:C4:5E:DD:B1:5F:54:45:60:E8:15:F8:50:2A:58:13:DD:4B
Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
Certificate issuer: /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Certificate serial: 019CAEA2CFE4BC88B8AE4B5730C088CA9693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
Manifest number: 0B8A
Signing time: Mon 02 Mar 2026 13:00:31 +0000
Manifest this update: Mon 02 Mar 2026 13:00:31 +0000
Manifest next update: Tue 03 Mar 2026 13:00:31 +0000
Files and hashes: 1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: SItM722g1hDyUKg9JM+JDqKQFFSzy4BNuBKJB/Pu4wQ=)
2: kjD9MNfC0BPcwkyPzs0CEhSag-I.roa (hash: e8QlVBviEv2pFqVxAanGI81u7if0cNyxjU/3EXVOJq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:cf:e4:bc:88:b8:ae:4b:57:30:c0:88:ca:96:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Validity
Not Before: Mar 2 13:00:31 2026 GMT
Not After : Mar 3 13:00:31 2026 GMT
Subject: CN=5af0f1c45eddb15f544560e815f8502a5813dd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dd:14:18:d9:ec:9a:53:9a:fa:b4:d2:da:0f:
0a:ed:9d:01:6a:ed:59:0c:85:b5:cc:cb:c5:ea:d4:
4b:1c:9a:88:70:36:95:00:15:fb:75:ed:b4:ad:28:
38:95:e7:55:d9:08:55:2b:b8:87:74:5c:4f:35:b4:
aa:36:1a:d2:90:b2:cc:92:3b:2d:eb:64:7f:eb:94:
f1:35:71:ef:35:04:57:93:6e:92:90:c9:ce:df:15:
48:b3:74:1a:0b:9f:6a:e0:43:6a:63:15:cb:7e:3e:
a7:99:be:20:6e:8b:8f:d3:19:e3:e8:43:5c:2d:7e:
fb:fb:f3:83:9f:f3:8a:16:b3:09:03:41:5c:17:31:
d6:ce:75:7c:a4:e0:2d:a0:57:92:cf:92:38:ac:4e:
31:ca:95:b5:b8:01:ce:6e:e8:c5:0d:b4:47:95:92:
c7:85:8f:78:f1:f0:64:e3:33:61:41:b1:6b:d1:1d:
bb:c3:57:63:d8:94:ae:9e:21:ae:14:69:00:99:ed:
05:b3:e3:68:99:4f:70:63:8d:47:90:25:f9:a0:b0:
30:0f:f2:aa:0f:71:ef:66:e3:a3:0f:96:e8:a6:02:
fc:91:24:e6:50:f0:03:f5:44:74:9f:fb:9d:f5:ba:
f7:7f:c2:cd:b7:04:dd:ce:4d:00:f0:da:71:c4:18:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F0:F1:C4:5E:DD:B1:5F:54:45:60:E8:15:F8:50:2A:58:13:DD:4B
X509v3 Authority Key Identifier:
keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7b:c7:4e:b9:99:0d:0e:47:b2:62:6f:c6:14:5f:04:7d:4a:
e7:e2:0f:b7:20:d5:9c:cc:26:56:8e:e2:29:a9:97:08:e5:05:
5c:3e:68:b7:51:65:0c:06:73:0e:ad:de:55:65:74:6e:9e:b2:
58:03:e1:82:0f:3f:46:90:58:c2:14:7d:9b:32:5d:9b:fc:b2:
af:16:2d:ad:00:c2:48:72:41:3b:c6:c6:16:61:4a:3c:a6:76:
32:4e:52:51:13:02:b8:b7:5d:2b:8c:2a:8a:c9:cf:9b:d3:1e:
0f:3d:08:54:1d:39:56:89:9e:f3:b9:ae:85:36:cb:e2:73:e5:
a0:91:b8:ce:4b:49:58:ad:96:f0:f4:78:a1:0d:be:13:7a:fd:
df:f9:25:e9:cc:95:32:ed:33:44:5e:89:f8:bb:e3:e9:ab:48:
9d:4d:d2:df:b8:d5:b9:6e:e0:c6:f8:55:1b:66:b3:9e:42:8c:
3f:e4:1c:e7:dc:d9:c9:d4:0c:ee:85:3c:cd:1d:4e:a9:fd:86:
da:20:d9:d1:48:a1:76:2c:1d:01:77:98:02:77:eb:08:bb:eb:
f2:26:64:81:08:1a:d7:62:e3:73:eb:3a:2f:ca:a3:cc:23:03:
14:3e:09:63:d4:ee:ff:8a:41:07:c1:87:7e:98:ce:6f:76:b9:
67:50:8e:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuos/kvIi4rktXMMCIypaTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2M4NjI2MTM4YmYxZTljYjNmZDFmZWMyNmM2OGM0YTYz
NDA5NmIwHhcNMjYwMzAyMTMwMDMxWhcNMjYwMzAzMTMwMDMxWjAzMTEwLwYDVQQD
Eyg1YWYwZjFjNDVlZGRiMTVmNTQ0NTYwZTgxNWY4NTAyYTU4MTNkZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx90UGNnsmlOa+rTS2g8K7Z0Bau1Z
DIW1zMvF6tRLHJqIcDaVABX7de20rSg4ledV2QhVK7iHdFxPNbSqNhrSkLLMkjst
62R/65TxNXHvNQRXk26SkMnO3xVIs3QaC59q4ENqYxXLfj6nmb4gbouP0xnj6ENc
LX77+/ODn/OKFrMJA0FcFzHWznV8pOAtoFeSz5I4rE4xypW1uAHObujFDbRHlZLH
hY948fBk4zNhQbFr0R27w1dj2JSuniGuFGkAme0Fs+NomU9wY41HkCX5oLAwD/Kq
D3HvZuOjD5bopgL8kSTmUPAD9UR0n/ud9br3f8LNtwTdzk0A8NpxxBjaHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrw8cRe3bFfVEVg6BX4UCpYE91LMB8GA1UdIwQY
MBaAFOfMhiYTi/Hpyz/R/sJsaMSmNAlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWIt
ZjVjMDlmZjM4YTAwLzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWItZjVjMDlmZjM4YTAw
LzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHvHTrmZ
DQ5HsmJvxhRfBH1K5+IPtyDVnMwmVo7iKamXCOUFXD5ot1FlDAZzDq3eVWV0bp6y
WAPhgg8/RpBYwhR9mzJdm/yyrxYtrQDCSHJBO8bGFmFKPKZ2Mk5SURMCuLddK4wq
isnPm9MeDz0IVB05Vome87muhTbL4nPloJG4zktJWK2W8PR4oQ2+E3r93/kl6cyV
Mu0zRF6J+Lvj6atInU3S37jVuW7gxvhVG2aznkKMP+Qc59zZydQM7oU8zR1Oqf2G
2iDZ0UihdiwdAXeYAnfrCLvr8iZkgQga12Ljc+s6L8qjzCMDFD4JY9Tu/4pBB8GH
fpjOb3a5Z1COHQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:45:51 2026 by rpki-client