Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: YPtELe3+sIkEmXeFZWEc8V2bFyBuT7xpjDiavIVezsE=
Subject key identifier: 03:72:53:4C:1A:D0:FB:2B:E1:65:4C:80:2E:99:34:8A:93:7E:59:1C
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 019D99621C371915FC31B5BF845B9F56F58A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 0717
Signing time: Fri 17 Apr 2026 03:00:36 +0000
Manifest this update: Fri 17 Apr 2026 03:00:36 +0000
Manifest next update: Sat 18 Apr 2026 03:00:36 +0000
Files and hashes: 1: 1-hMzdQcNiHlC1ILPCSFeyzc3V18.roa (hash: pQ5b3SKsH66K13eGB0zI0xg6+iC58sAtCToDI1E0I1c=)
2: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (hash: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo=)
3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: mzkBeInjJ4Mhn2zem0AuyYVTxSMIOEVO7SEgv2JOu8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:1c:37:19:15:fc:31:b5:bf:84:5b:9f:56:f5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Apr 17 03:00:36 2026 GMT
Not After : Apr 18 03:00:36 2026 GMT
Subject: CN=0372534c1ad0fb2be1654c802e99348a937e591c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:c0:1b:22:a3:0e:71:39:87:bc:7a:00:1b:
88:81:b2:96:8b:c1:7c:3c:6b:c1:7d:cd:45:ea:8e:
d8:15:04:74:a7:41:51:27:89:29:fb:85:9d:ac:de:
4f:f8:31:8b:5e:25:57:00:6c:08:3e:a6:bb:b0:63:
46:88:8e:09:d2:a8:bf:04:bf:41:35:bb:49:70:da:
7b:7c:4c:fd:d1:eb:7c:c7:2d:d2:c1:4f:27:d5:61:
f0:e0:80:89:eb:f1:ff:3f:42:a7:d6:3d:8d:ef:5c:
81:aa:13:dc:a5:c7:34:ca:54:2e:f3:2e:d8:38:6b:
14:9c:ff:a2:1f:92:c3:e9:4b:e3:5b:42:d3:e4:da:
88:9a:ce:0a:88:f3:6b:14:79:a3:4f:a5:ce:97:f7:
4d:18:21:21:19:18:7c:e4:d2:a6:e2:a5:7a:25:f4:
31:4e:cd:61:56:e4:e1:e4:f0:bc:9e:aa:36:97:c8:
95:07:97:47:18:ac:2f:a0:ed:f7:c4:bb:d7:99:cc:
08:2c:14:17:9c:44:ff:3a:96:1d:1b:b9:37:7e:19:
aa:1c:c4:b8:f8:d6:aa:1e:4b:67:a3:f1:37:1a:06:
8b:f1:f4:08:09:09:27:7f:37:85:a7:8b:c8:a9:21:
bf:9a:60:87:14:ac:f9:a8:3d:54:be:cb:3e:75:65:
94:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:72:53:4C:1A:D0:FB:2B:E1:65:4C:80:2E:99:34:8A:93:7E:59:1C
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a1:59:08:b1:40:6f:ef:1f:4c:63:0f:57:03:2f:71:ca:67:
e9:73:73:d5:51:22:6a:ef:67:1a:00:91:79:95:e2:72:c5:7b:
a5:a2:6c:c4:fb:94:46:b3:2c:47:4f:0f:26:bf:32:f6:a5:ba:
d4:1a:1e:a4:97:a2:55:37:be:0d:f1:63:ee:a1:04:29:a0:cb:
2b:df:eb:0f:07:31:fc:ee:d1:b8:8c:54:97:d8:3a:e7:9f:1a:
df:2e:ec:65:48:5a:7d:64:23:0a:43:12:04:78:02:ac:90:0c:
50:fd:b8:09:a4:fa:10:fb:b6:1b:28:f2:fe:cb:68:25:41:3e:
97:03:a7:75:03:48:52:cf:9f:b1:e9:dc:61:97:12:d5:1c:d1:
0b:1d:d0:30:f4:d8:25:70:96:8d:77:dc:4e:09:7f:2a:ac:77:
80:a8:d6:14:a1:34:26:fb:eb:99:62:05:0d:04:36:8f:93:ba:
0f:f3:34:18:4e:2a:ab:95:02:6b:36:57:0d:a6:2b:09:88:f4:
b5:7a:ea:a9:b7:3b:d7:f7:3e:89:be:89:bd:52:05:60:26:d9:
e8:ef:6c:8d:96:be:61:46:eb:14:29:40:38:34:de:2d:2b:37:
fd:3a:74:65:e3:42:2e:ae:7b:89:91:e7:a7:f7:b2:d3:2b:ae:
0d:52:cd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:13 2026 by rpki-client