Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File: S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier: pSP/n0uW7XxCDvzpk2U0ujwKOJpokrsyNO+pabtoYSI=
Subject key identifier: 06:59:99:B1:08:D8:05:14:B6:A2:67:67:F8:38:50:94:B5:F5:97:7E
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 019CA7FC673BF68B8FEB19FA7A3B784EFCDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 06:01:02 +0000
Manifest this update: Sun 01 Mar 2026 06:01:02 +0000
Manifest next update: Mon 02 Mar 2026 06:01:02 +0000
Files and hashes: 1: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: 12/qDVZcHF9hXzBWYKBlGBCtLo+eeCeKyk8Q6ndA708=)
2: WNub_b8gcNqu1fV67q57r6UlmNI.roa (hash: W3o0N676i3NWWAuw5Jf6ypX8jnN/9ihF6+nuITCxXbk=)
3: bwdHvKYyhs4Ju5CwlBTPEYm3sCg.roa (hash: J52qNXcYUL8Md7MHBa4Z1H074n+eMZjwdb1rZYRHD/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:67:3b:f6:8b:8f:eb:19:fa:7a:3b:78:4e:fc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Mar 1 06:01:02 2026 GMT
Not After : Mar 2 06:01:02 2026 GMT
Subject: CN=065999b108d80514b6a26767f8385094b5f5977e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:b1:40:cb:a6:ee:42:89:28:2f:1f:e9:a7:
71:bc:8e:08:08:4d:11:d6:d6:e9:24:12:1f:27:b7:
6a:7d:8c:d8:9e:5e:51:68:d2:d1:9a:80:9b:b9:84:
37:8a:f8:c8:74:69:e7:82:40:fa:e0:81:fb:7c:b4:
a2:f1:44:32:5d:a9:3b:c4:dd:0c:de:54:38:e2:03:
c4:f8:61:34:9a:46:46:c1:d6:1c:b0:4f:f2:02:58:
05:26:41:1b:55:10:df:66:db:0f:99:86:fd:68:f7:
5a:02:b8:c0:ee:ab:1d:19:a5:a0:f7:e8:a7:e6:95:
74:db:0d:1b:98:ba:84:6c:02:60:27:04:20:b7:2d:
02:76:3d:9d:6e:3b:f0:34:54:5e:aa:8e:16:8a:0b:
c2:f2:37:6b:67:15:e8:1e:10:e7:24:2f:ea:84:eb:
fa:51:5d:cd:fd:d7:53:29:39:a5:5e:91:fc:0e:97:
81:05:06:e6:0b:61:99:5c:9d:20:1a:ac:b7:bc:aa:
2f:8b:dc:68:98:30:99:93:31:ce:f5:e4:d8:1e:08:
a9:f9:80:70:6e:2b:be:23:8a:bb:1b:c8:9d:2b:a0:
72:c2:8f:b6:b0:9f:62:9a:b1:e1:8d:bb:df:9f:27:
69:79:7c:18:f1:5c:1a:d7:ed:30:12:78:be:08:26:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:59:99:B1:08:D8:05:14:B6:A2:67:67:F8:38:50:94:B5:F5:97:7E
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:fe:23:fb:bf:8c:02:cc:41:1e:17:92:db:01:cc:2b:0b:9c:
f6:93:7b:4f:fa:f9:80:25:ce:53:ee:0e:6a:77:49:30:76:1a:
a2:c2:df:96:77:60:f2:a3:18:65:ae:d5:e7:a3:0c:71:fe:e1:
bd:ed:a5:e2:9d:a4:6c:8a:73:6b:35:cd:f1:42:d3:2e:5a:55:
c9:94:a3:65:dd:fb:25:1b:d4:54:76:f1:e7:ec:f8:37:53:3f:
b2:a7:3e:1d:e7:8e:0b:07:f4:04:cc:8e:20:8d:41:6b:df:f6:
59:da:a0:8a:b7:70:6e:b0:e6:c9:28:e1:d7:de:89:a8:88:a8:
f4:ea:22:05:72:c2:00:76:f9:ea:f6:ef:62:0d:83:dc:b4:ef:
5a:dc:f9:2e:6e:f0:19:ac:7a:a8:35:4d:97:53:2f:b0:85:bb:
8d:eb:ff:a8:6c:83:5b:a7:74:92:44:58:1a:78:fa:f1:f6:42:
85:a9:b8:a5:61:aa:68:bd:e8:1c:c8:18:fb:33:05:dd:2d:8a:
e5:44:1f:32:9e:bf:d2:32:d7:63:12:3b:31:e1:69:15:00:b0:
75:46:4a:a7:36:cd:d6:11:ee:e6:6d:e1:74:4b:ad:12:2f:35:
5e:53:4a:52:d7:2b:53:b3:a9:a4:68:a0:f7:7d:04:be:29:a8:
85:1b:df:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyn/Gc79ouP6xn6ejt4TvzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOWYzMWU3MzUyYTg3MDdiOThjNmQyNzM0OGU4YmM0OTNk
MWE5YWYwHhcNMjYwMzAxMDYwMTAyWhcNMjYwMzAyMDYwMTAyWjAzMTEwLwYDVQQD
EygwNjU5OTliMTA4ZDgwNTE0YjZhMjY3NjdmODM4NTA5NGI1ZjU5NzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdmxQMum7kKJKC8f6adxvI4ICE0R
1tbpJBIfJ7dqfYzYnl5RaNLRmoCbuYQ3ivjIdGnngkD64IH7fLSi8UQyXak7xN0M
3lQ44gPE+GE0mkZGwdYcsE/yAlgFJkEbVRDfZtsPmYb9aPdaArjA7qsdGaWg9+in
5pV02w0bmLqEbAJgJwQgty0Cdj2dbjvwNFReqo4WigvC8jdrZxXoHhDnJC/qhOv6
UV3N/ddTKTmlXpH8DpeBBQbmC2GZXJ0gGqy3vKovi9xomDCZkzHO9eTYHgip+YBw
biu+I4q7G8idK6Bywo+2sJ9imrHhjbvfnydpeXwY8Vwa1+0wEni+CCbMMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZZmbEI2AUUtqJnZ/g4UJS19Zd+MB8GA1UdIwQY
MBaAFEufMec1KocHuYxtJzSOi8ST0amvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84NWZkMzEtZmU5MS00Mzg5LWFiNjct
MzY1MWU0MGYxNDM2LzEvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84NWZkMzEtZmU5MS00Mzg5LWFiNjctMzY1MWU0MGYxNDM2
LzEvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmf4j+7+M
AsxBHheS2wHMKwuc9pN7T/r5gCXOU+4OandJMHYaosLflndg8qMYZa7V56MMcf7h
ve2l4p2kbIpzazXN8ULTLlpVyZSjZd37JRvUVHbx5+z4N1M/sqc+HeeOCwf0BMyO
II1Ba9/2WdqgirdwbrDmySjh196JqIio9OoiBXLCAHb56vbvYg2D3LTvWtz5Lm7w
Gax6qDVNl1MvsIW7jev/qGyDW6d0kkRYGnj68fZCham4pWGqaL3oHMgY+zMF3S2K
5UQfMp6/0jLXYxI7MeFpFQCwdUZKpzbN1hHu5m3hdEutEi81XlNKUtcrU7OppGig
930EvimohRvfag==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:46 2026 by rpki-client