Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: dea+722ySjz+PynVY+Qw0hZkJtCXOPGxs/rSxmfDhpc=
Subject key identifier: 2F:72:9A:D7:DA:99:67:4D:71:F4:CE:96:E9:DE:D4:3A:2F:71:E6:18
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 019CABD935F31B6DB0E406D28FE586BCA4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 069C
Signing time: Mon 02 Mar 2026 00:01:04 +0000
Manifest this update: Mon 02 Mar 2026 00:01:04 +0000
Manifest next update: Tue 03 Mar 2026 00:01:04 +0000
Files and hashes: 1: 1-hMzdQcNiHlC1ILPCSFeyzc3V18.roa (hash: pQ5b3SKsH66K13eGB0zI0xg6+iC58sAtCToDI1E0I1c=)
2: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (hash: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo=)
3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: +cWQs8TSKshK+9WYyAZIj5jAuYlTE+rruzD/IS+IH+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:35:f3:1b:6d:b0:e4:06:d2:8f:e5:86:bc:a4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Mar 2 00:01:04 2026 GMT
Not After : Mar 3 00:01:04 2026 GMT
Subject: CN=2f729ad7da99674d71f4ce96e9ded43a2f71e618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:dd:91:3d:4b:b1:2c:19:50:21:b1:cd:96:
33:24:ea:16:5a:d7:07:6b:4c:10:84:f2:48:7a:d2:
a7:7d:f2:e3:51:a3:af:a6:de:2d:69:2a:f1:1b:73:
14:6e:f0:a2:02:78:3f:18:df:1e:99:d1:33:f8:93:
65:ba:3c:80:e0:0c:41:45:d7:c1:17:19:82:38:73:
0c:ab:d3:ee:48:44:41:07:cd:24:c0:cf:9e:77:a7:
b5:60:df:0b:33:3f:fd:26:83:69:7c:bd:d1:70:10:
2f:be:2d:c4:93:40:4e:11:4e:1a:f6:9a:9d:1d:75:
55:2f:a0:b8:25:c8:44:32:16:63:15:b5:13:a9:6e:
4c:40:48:5e:bc:40:7a:a1:8c:d6:a6:1c:f6:fa:ee:
43:bb:d0:34:30:6f:e7:45:1e:77:87:b2:f1:f9:55:
16:0b:0c:1a:98:c8:7b:ef:5e:f8:08:a2:ad:ac:41:
d8:f7:10:5b:f5:d6:c3:b1:a6:dd:4b:19:3f:e9:d6:
e1:61:da:68:a9:37:7f:e2:97:ef:83:42:49:86:26:
db:30:d7:3f:1e:46:be:71:ec:9a:7d:40:72:46:56:
bd:36:a0:17:b0:01:cf:72:7c:0e:59:1d:b4:71:ee:
98:99:12:e4:eb:13:c2:58:3d:2a:f6:0b:04:95:5e:
af:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:72:9A:D7:DA:99:67:4D:71:F4:CE:96:E9:DE:D4:3A:2F:71:E6:18
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ef:14:f1:c4:00:63:da:4c:72:e4:0b:5a:b8:52:f4:71:bb:
f3:59:04:43:0b:74:97:b7:7f:ae:3e:f2:cc:67:bf:d1:1f:8d:
2c:77:d0:e1:ba:a9:f0:d8:55:48:12:72:06:b1:29:20:14:c4:
2e:f6:c4:33:b7:c1:c2:5f:6c:f6:06:e7:20:30:49:6a:0f:df:
ff:8a:9f:21:2d:46:71:3c:fb:01:7b:ad:58:76:39:37:91:df:
31:5c:37:e8:76:31:80:0a:40:4e:ab:bf:cc:63:72:f6:43:fe:
bc:ca:3d:53:33:97:47:18:49:75:ec:d3:b0:66:e2:c0:c5:a0:
91:e4:f4:fb:b3:d5:7c:a0:9e:a5:da:59:08:78:00:75:5f:a6:
2f:88:73:19:f4:e3:96:46:f4:bc:d7:22:fa:32:f0:ed:4a:3c:
4e:c5:20:61:04:cc:1b:c0:f6:21:7e:c4:27:30:85:c0:58:fb:
59:de:1f:8e:6a:b7:11:47:13:56:88:7f:d6:ad:6c:e8:dc:1b:
1f:3f:dc:d4:de:dc:05:f7:bd:70:4c:11:93:94:9c:78:a2:21:
b9:b6:9b:02:2c:7f:ad:ec:e5:cc:a7:80:28:ea:ff:0d:1d:3a:
f6:2d:b0:da:42:ba:6b:ef:f5:1c:9e:f3:ae:db:e5:6f:fb:ad:
0c:2e:b0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:25 2026 by rpki-client