Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: ev78rCyZcyFRwPTVWTNke4ciuVE4HETvkrOLZemqLwA=
Subject key identifier: 79:32:AB:96:C5:3F:8C:5C:3D:1D:F2:C3:91:EA:C6:F6:AC:4C:E7:3E
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 019FAB6304D6EFBFF3037748E2B98F0EE31D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 082A
Signing time: Wed 29 Jul 2026 01:00:20 +0000
Manifest this update: Wed 29 Jul 2026 01:00:20 +0000
Manifest next update: Thu 30 Jul 2026 01:00:20 +0000
Files and hashes: 1: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (hash: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo=)
2: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: eSI2Ai1w6Jsw8g0xtahGD+hrtSjbV+/7fH8Pn1MikMg=)
3: btsbBPG_XDlQ3e5fMtVbLStYwh8.roa (hash: XdV1d+wt2UtCqheQtg2DA5+JgtI45RV6xN6JsyMCDQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:04:d6:ef:bf:f3:03:77:48:e2:b9:8f:0e:e3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Jul 29 01:00:20 2026 GMT
Not After : Jul 30 01:00:20 2026 GMT
Subject: CN=7932ab96c53f8c5c3d1df2c391eac6f6ac4ce73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:cb:54:d4:de:39:d8:f9:b3:78:b7:9b:6b:
ef:af:98:1f:61:73:32:fc:e4:5d:21:83:cd:ca:7f:
22:49:bd:0f:e2:38:3b:65:79:45:34:0f:42:04:ca:
eb:92:27:f7:ae:3c:c0:51:2a:80:b5:aa:fa:74:a7:
bc:30:a5:e6:d2:45:f7:34:f2:cf:3d:53:3d:e3:ca:
6f:07:55:86:3d:8f:cf:f9:b7:19:af:40:3b:70:ad:
7c:d4:8c:af:a2:7b:40:1f:11:62:85:43:77:b6:c0:
17:14:24:c4:38:c7:ee:13:02:15:f5:ef:84:fc:19:
c1:21:d9:5f:ed:b0:04:28:f9:79:5a:d1:70:ba:f1:
1b:73:b2:22:17:9d:79:5a:b8:08:2b:7b:25:fa:8f:
79:d5:7d:56:3b:1a:ee:21:9b:38:09:30:43:a2:f7:
de:12:05:36:87:2d:33:77:5e:4d:ca:9a:da:e0:12:
c3:63:1d:45:c8:bc:52:b5:67:7a:f7:f2:bf:82:8c:
2f:5d:6a:0d:09:09:7b:10:0c:a5:d6:c0:11:72:e6:
20:91:0c:e8:cf:cf:2b:b8:aa:5b:91:16:56:b1:76:
f3:27:c0:93:ea:21:a8:bc:27:df:2d:63:86:c6:52:
68:e7:70:8d:6f:b9:e2:79:32:6c:7b:67:7b:68:1d:
0b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:32:AB:96:C5:3F:8C:5C:3D:1D:F2:C3:91:EA:C6:F6:AC:4C:E7:3E
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:31:b0:a6:5b:a8:56:bd:c7:47:53:e2:8b:41:17:62:4a:29:
f5:95:83:01:f3:5e:99:11:49:78:49:20:d5:ed:c3:a1:65:f7:
51:33:c2:6c:e2:c5:6c:8e:8c:43:bf:76:ea:77:43:20:ce:08:
2f:98:08:b4:18:1b:a1:c7:01:05:2f:c3:56:f1:c4:07:53:8e:
67:48:47:d2:69:c8:f7:2d:92:ac:aa:32:f1:ea:5b:51:d7:43:
54:91:22:3b:61:8b:be:a5:39:66:90:9d:0f:41:b8:f4:77:02:
e3:39:fb:8b:c4:0a:22:a5:48:88:f8:d9:01:98:32:24:48:a5:
ae:4b:51:0c:8a:56:95:31:17:d0:51:54:37:3c:78:01:7e:dd:
08:0f:42:d8:6d:45:15:58:ad:28:75:46:8f:46:10:25:e1:5d:
87:65:02:bf:e1:68:8f:ce:75:ec:7c:b2:2c:23:73:2d:86:ec:
35:12:08:58:59:30:eb:9d:ff:ef:4f:eb:38:f5:74:c3:ea:b4:
e9:53:76:29:8c:36:b2:93:1c:ca:4d:0f:f8:66:66:f4:a2:83:
c5:85:58:ba:62:2a:c3:e8:f9:3b:c9:94:8d:ab:e5:cf:e0:e8:
9e:b9:eb:b4:55:df:6a:0f:1e:f5:55:91:8b:e7:dc:1d:ab:0f:
31:bf:cd:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rYwTW77/zA3dI4rmPDuMdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MmU3ZDg3OTIyMTI5ZGY5MGM0ODcwZGEyYTc3Mzg0MDQ3
MjQ4NTgwHhcNMjYwNzI5MDEwMDIwWhcNMjYwNzMwMDEwMDIwWjAzMTEwLwYDVQQD
Eyg3OTMyYWI5NmM1M2Y4YzVjM2QxZGYyYzM5MWVhYzZmNmFjNGNlNzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9bLVNTeOdj5s3i3m2vvr5gfYXMy
/ORdIYPNyn8iSb0P4jg7ZXlFNA9CBMrrkif3rjzAUSqAtar6dKe8MKXm0kX3NPLP
PVM948pvB1WGPY/P+bcZr0A7cK181IyvontAHxFihUN3tsAXFCTEOMfuEwIV9e+E
/BnBIdlf7bAEKPl5WtFwuvEbc7IiF515WrgIK3sl+o951X1WOxruIZs4CTBDovfe
EgU2hy0zd15Nypra4BLDYx1FyLxStWd69/K/gowvXWoNCQl7EAyl1sARcuYgkQzo
z88ruKpbkRZWsXbzJ8CT6iGovCffLWOGxlJo53CNb7nieTJse2d7aB0LMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkyq5bFP4xcPR3yw5HqxvasTOc+MB8GA1UdIwQY
MBaAFEUufYeSISnfkMSHDaKnc4QEckhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80ODc5NjItODU4OC00ZjBhLWJiN2Qt
YWFhOGQzYTk0MGFjLzEvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80ODc5NjItODU4OC00ZjBhLWJiN2QtYWFhOGQzYTk0MGFj
LzEvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjGwpluo
Vr3HR1Pii0EXYkop9ZWDAfNemRFJeEkg1e3DoWX3UTPCbOLFbI6MQ7926ndDIM4I
L5gItBgboccBBS/DVvHEB1OOZ0hH0mnI9y2SrKoy8epbUddDVJEiO2GLvqU5ZpCd
D0G49HcC4zn7i8QKIqVIiPjZAZgyJEilrktRDIpWlTEX0FFUNzx4AX7dCA9C2G1F
FVitKHVGj0YQJeFdh2UCv+Foj8517HyyLCNzLYbsNRIIWFkw653/70/rOPV0w+q0
6VN2KYw2spMcyk0P+GZm9KKDxYVYumIqw+j5O8mUjavlz+DonrnrtFXfag8e9VWR
i+fcHasPMb/Ngw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:26 2026 by rpki-client