Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: iL7pFUIVP/SQ9gAilxcVkejIdDyurf0hdB7htqGfFYs=
Subject key identifier: AA:D1:7B:38:51:38:2E:5A:6F:54:38:A9:83:13:5B:35:F3:0C:3D:47
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 01A0C5573550EAE2A88FE1E5D06E14BDAB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 08BC
Signing time: Mon 21 Sep 2026 19:00:21 +0000
Manifest this update: Mon 21 Sep 2026 19:00:21 +0000
Manifest next update: Tue 22 Sep 2026 19:00:21 +0000
Files and hashes: 1: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (hash: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo=)
2: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: RfB0/FKndYZXSU+ZBAwyL3OrY4vVzMUwGpGvTZPxmZM=)
3: btsbBPG_XDlQ3e5fMtVbLStYwh8.roa (hash: XdV1d+wt2UtCqheQtg2DA5+JgtI45RV6xN6JsyMCDQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:35:50:ea:e2:a8:8f:e1:e5:d0:6e:14:bd:ab:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Sep 21 19:00:21 2026 GMT
Not After : Sep 22 19:00:21 2026 GMT
Subject: CN=aad17b3851382e5a6f5438a983135b35f30c3d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:9b:e2:8f:f2:65:ac:88:13:27:cf:3e:56:
b2:88:a4:f3:67:c4:87:4f:32:3d:2a:d4:30:02:f0:
30:a1:7e:9e:6c:bc:4e:4d:e8:5b:cf:33:cf:ce:f6:
54:7a:de:7c:d5:90:f1:cb:0d:b9:1e:d2:d0:de:3e:
b0:71:08:21:89:e4:e5:5b:40:8d:a3:8c:de:54:6d:
7c:46:57:c4:2d:0f:cc:05:f6:e1:a5:aa:30:88:5c:
3b:0b:37:b0:94:c1:7c:64:00:ea:6a:23:b8:87:0c:
94:b1:4e:a1:89:96:35:6d:06:ec:7c:a0:ca:fb:ec:
f4:0c:b9:7a:70:86:51:d1:ca:96:c8:63:ef:ca:97:
28:8a:3f:b5:b7:77:ab:7a:4e:da:51:48:50:58:61:
c2:01:be:21:77:0b:9d:db:11:e7:43:b8:67:bf:74:
30:77:d0:1d:ca:67:1f:0a:52:e9:d3:f0:91:97:aa:
ad:65:4a:6c:f7:a8:fe:17:c1:52:c2:44:a8:51:c9:
18:67:ad:a9:23:61:2c:71:c5:f1:c8:59:0e:b6:b3:
37:5d:8e:5b:54:b0:de:6c:5d:a0:5a:e2:83:5f:be:
25:30:6f:ef:2d:f5:b4:7c:17:da:48:2d:5e:41:1d:
02:fb:99:b1:ce:46:a9:09:53:b6:fd:1d:25:5b:a9:
94:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D1:7B:38:51:38:2E:5A:6F:54:38:A9:83:13:5B:35:F3:0C:3D:47
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3f:53:bb:a4:e6:27:3b:6c:5a:0d:32:fb:3d:eb:95:5f:02:
10:48:a0:fa:71:78:96:94:68:29:88:7e:da:a5:24:4b:48:02:
bb:a4:35:2d:59:b5:c6:8e:b4:d3:3f:17:47:4b:14:c6:67:5e:
2e:8d:13:1c:6d:22:da:85:23:00:6c:98:d9:b3:d9:a2:91:c1:
c2:56:b8:fa:9f:c2:c8:d4:4f:80:85:05:08:00:44:2a:a0:ee:
73:1b:7a:04:b4:ac:06:f4:bc:6b:89:47:67:63:42:d1:1e:8d:
df:41:25:e6:52:9e:4b:a1:be:fb:42:25:d1:63:63:06:5f:de:
b3:1b:f1:21:f1:9f:e5:fe:02:0a:bc:be:d6:08:02:40:40:72:
2a:ae:80:f8:34:d6:ba:44:fe:04:53:35:9a:60:f8:4a:85:04:
32:36:6c:1e:3c:8c:51:fb:c6:96:95:a4:9b:a0:06:8f:a5:33:
0b:3c:b7:ae:80:9f:2b:d8:9f:62:8b:ce:e4:65:21:24:48:e8:
e6:40:af:d9:3c:aa:b6:41:ff:f8:35:fb:8c:df:2e:6b:f2:89:
d7:a8:af:44:52:42:24:c5:15:9e:4d:b5:a1:bb:aa:87:31:b2:
7d:07:88:b9:70:cb:11:53:0a:5c:2b:96:80:dd:57:76:bc:3a:
66:39:25:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:37:51 2026 by rpki-client