Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
File: 59aKnrhqgmTp3cMSKEm4DMNC9dw.mft (raw, json)
Hash identifier: FR0JOusSYozOobF2+b2vwJtF7+V4zKoGYszPrdR5E9I=
Subject key identifier: F2:D0:06:F3:70:68:77:80:34:18:72:3E:A0:61:A4:52:46:9A:86:12
Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
Certificate issuer: /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Certificate serial: 01A11898B0ADB49F8516C30FE0413C8686D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
Manifest number: 17AB
Signing time: Wed 07 Oct 2026 23:00:22 +0000
Manifest this update: Wed 07 Oct 2026 23:00:22 +0000
Manifest next update: Thu 08 Oct 2026 23:00:22 +0000
Files and hashes: 1: 59aKnrhqgmTp3cMSKEm4DMNC9dw.crl (hash: tQB36bns7wVmr1T8FXb86/PShgiQPG5UufdDw7Rqiiw=)
2: 5D_6V1jfsiELpRkCmEhi7rdCKRg.roa (hash: /d0M4c6YWxQ0V8Mp5iLPG6sVPAc4eaY42hLJi+0oXvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:98:b0:ad:b4:9f:85:16:c3:0f:e0:41:3c:86:86:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Validity
Not Before: Oct 7 23:00:22 2026 GMT
Not After : Oct 8 23:00:22 2026 GMT
Subject: CN=f2d006f3706877803418723ea061a452469a8612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3c:67:73:c2:07:b4:cb:0b:5e:aa:4a:db:19:
72:f4:ec:95:4f:46:3b:9c:1d:16:ca:d7:5c:0c:83:
06:03:ab:53:c6:4a:1d:f8:c3:0e:c0:de:f7:67:2b:
67:c2:4e:98:5e:78:07:c0:9e:11:7c:6d:6a:7a:5c:
50:d0:cb:04:bb:da:65:d0:3d:fb:28:d7:6b:85:8d:
d2:dc:a4:87:ee:88:b9:1b:5b:00:8c:22:22:5a:f6:
75:2c:bc:68:c5:7d:18:e3:e9:f2:99:ce:df:f4:44:
3f:70:d7:98:1b:33:2d:08:40:a0:a7:52:ae:4e:7f:
f7:3a:7f:64:82:11:c9:ef:d9:52:59:54:4d:a9:ff:
a4:ce:fe:39:8b:51:5a:30:4a:ad:4f:22:b2:41:2d:
c7:dd:00:64:51:c6:d0:4a:fb:73:5a:da:f7:d3:71:
84:9d:b8:e3:f7:fe:68:4b:7c:b9:e5:97:06:48:68:
df:16:8a:32:a2:7a:4f:e7:81:77:18:b4:6e:4c:a9:
8f:25:4b:a3:01:17:a4:2e:52:c0:f2:58:e7:7d:ae:
73:51:ad:ff:b1:1e:81:f3:aa:fd:b8:e4:e8:a5:74:
6a:49:a4:f8:17:7a:12:59:8c:20:85:a8:34:44:cf:
39:79:d0:f2:89:78:2d:96:9d:40:ee:13:32:27:2a:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D0:06:F3:70:68:77:80:34:18:72:3E:A0:61:A4:52:46:9A:86:12
X509v3 Authority Key Identifier:
keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b5:51:7e:b9:48:0c:8e:1a:36:68:cc:ae:86:7c:a7:75:32:
56:d8:82:61:1e:ac:9c:fa:3a:60:27:87:96:bc:49:ab:49:3e:
d8:5f:be:a8:ed:61:9c:fe:49:13:e9:66:8b:96:cc:62:39:61:
99:a9:64:98:98:59:47:d4:d2:7d:fb:dd:5b:68:6e:49:bd:04:
f0:fc:17:58:e1:00:cd:bf:ac:c6:78:0b:01:7b:23:92:ab:bd:
73:9f:d3:51:93:dc:9b:0b:0a:dc:2c:5d:2f:c6:0d:a2:9b:05:
83:e8:75:88:cb:e3:e8:fd:54:6f:60:4a:23:3b:35:65:86:99:
77:f9:d0:1e:b8:fd:7a:10:9e:b9:06:f7:62:53:5e:d1:ec:e4:
8b:ea:b7:3b:51:ae:71:43:4a:d3:13:a6:28:b4:2d:d7:02:a0:
b1:d9:30:28:b4:60:50:9a:d8:09:cf:fa:11:d0:7e:32:36:13:
44:a3:78:be:8d:eb:df:78:45:b4:cd:f5:4c:6d:36:bf:3a:9a:
49:ae:5b:95:52:aa:45:b1:d8:1b:b3:95:f4:a9:d5:3e:ec:b1:
22:3a:87:c1:20:4e:c5:34:03:8f:ee:05:b7:85:ea:c5:25:d7:
9d:ed:92:54:f9:64:e5:dd:1a:28:6b:aa:ff:81:cf:f0:e2:06:
0e:66:3c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:08:40 2026 by rpki-client