Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
File: 59aKnrhqgmTp3cMSKEm4DMNC9dw.mft (raw, json)
Hash identifier: 2ypeb0Jyem120UV7VsM0MnEbrsb6+cbfgBScYT8qZOw=
Subject key identifier: B4:80:AF:EC:BE:57:89:43:00:A7:E7:3B:5E:FD:F6:75:BB:2A:F5:F0
Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
Certificate issuer: /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Certificate serial: 019CACEB75588752B2165578E731575DE1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
Manifest number: 1561
Signing time: Mon 02 Mar 2026 05:00:37 +0000
Manifest this update: Mon 02 Mar 2026 05:00:37 +0000
Manifest next update: Tue 03 Mar 2026 05:00:37 +0000
Files and hashes: 1: 59aKnrhqgmTp3cMSKEm4DMNC9dw.crl (hash: LAM2EIYl09mnOO8Fw9oYv9NaErK7FZ5PsnT4zH4X6n4=)
2: 5D_6V1jfsiELpRkCmEhi7rdCKRg.roa (hash: /d0M4c6YWxQ0V8Mp5iLPG6sVPAc4eaY42hLJi+0oXvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:75:58:87:52:b2:16:55:78:e7:31:57:5d:e1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Validity
Not Before: Mar 2 05:00:37 2026 GMT
Not After : Mar 3 05:00:37 2026 GMT
Subject: CN=b480afecbe57894300a7e73b5efdf675bb2af5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:24:87:92:e6:93:e7:40:5d:b1:ce:04:dd:4b:
b3:00:b5:f2:75:f2:db:4a:c5:59:4d:8c:44:a5:dc:
a8:93:b8:2c:00:c4:fd:6c:6e:84:5f:9d:a9:9e:e6:
8e:c9:fa:8c:b0:85:6d:e4:d3:f6:c7:7b:a5:b4:c1:
37:f8:25:af:4a:f6:df:41:6c:5e:fb:79:42:41:85:
d2:56:30:1d:d8:e4:d2:f6:0a:a7:e0:9f:91:61:b0:
fe:4e:45:19:a6:fc:bd:d9:41:ac:13:7a:0a:7c:4a:
0d:4b:d9:20:56:a6:1e:5f:8a:e4:d5:f9:bd:4f:04:
7c:11:42:31:d3:3c:41:01:98:7d:c4:a3:45:c8:9a:
4d:b9:ff:43:72:ee:ad:04:d0:e0:bd:4b:82:25:39:
01:90:9b:38:5c:6f:e2:f4:e1:a3:09:31:04:16:0d:
23:94:df:12:c1:f8:66:89:2f:89:f7:25:87:e5:19:
2e:40:be:1e:6b:fa:51:d0:06:9e:14:23:a9:b6:1d:
f0:ef:29:ca:69:b7:ab:dd:47:89:53:c9:af:d0:f2:
bc:fe:41:fa:b9:33:25:58:10:ee:c1:d8:c0:99:07:
46:e7:eb:09:f8:02:8e:ca:ad:db:2a:f6:64:e4:2b:
e4:46:d5:af:a5:51:e5:54:17:11:94:63:45:a4:dd:
f1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:80:AF:EC:BE:57:89:43:00:A7:E7:3B:5E:FD:F6:75:BB:2A:F5:F0
X509v3 Authority Key Identifier:
keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:74:b8:3a:d1:40:56:91:14:c5:32:89:85:c2:64:1c:7d:39:
2f:da:5f:13:82:a5:23:04:77:f4:98:bb:90:9c:8f:7b:b3:21:
e5:43:d3:bd:f0:e1:c5:3b:65:88:de:32:e7:95:01:77:bf:a1:
3d:be:3b:7f:aa:19:e7:9a:54:78:d1:ed:0a:84:14:0a:a9:a0:
64:3f:dd:bd:34:e6:ca:0e:f4:91:74:0e:e3:a3:eb:73:af:3a:
e3:1e:d5:66:bd:19:da:d7:cd:e0:08:0f:2d:70:f4:b1:ad:90:
da:ae:a6:4b:dc:cc:ce:c5:8a:01:bf:97:bf:3a:d1:d2:5a:11:
b8:99:52:f3:bd:38:d1:22:0a:d2:02:4a:df:14:4c:ab:d6:d0:
05:e9:e3:17:20:d6:f4:45:ec:c0:cb:6f:33:bb:22:87:5d:6b:
d9:46:bc:8a:0f:c6:fe:01:23:b5:28:78:e6:ac:14:56:ff:ea:
02:0b:b0:f0:f3:b8:58:ef:14:39:ff:eb:db:30:64:59:37:4f:
31:d7:61:66:3f:08:63:f0:7f:e8:99:1f:5f:63:34:5a:34:ef:
6d:db:6c:11:db:9b:d6:df:d1:cf:fb:30:f5:53:81:ae:94:f9:
46:98:af:9d:cb:76:10:ee:30:73:60:33:01:30:20:a5:f7:25:
21:ee:b1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:04:44 2026 by rpki-client