Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
File: 59aKnrhqgmTp3cMSKEm4DMNC9dw.mft (raw, json)
Hash identifier: Ub/hTYDXwZp6soiSf7JHuDGuyAR+0XvumZLhInNCoeU=
Subject key identifier: 52:A2:5B:0A:99:5B:31:11:29:26:52:4D:D7:78:35:A9:A4:6C:09:8C
Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
Certificate issuer: /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Certificate serial: 019D9A7530D447B7707D2F56AA6A20FEFE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
Manifest number: 15DC
Signing time: Fri 17 Apr 2026 08:01:04 +0000
Manifest this update: Fri 17 Apr 2026 08:01:04 +0000
Manifest next update: Sat 18 Apr 2026 08:01:04 +0000
Files and hashes: 1: 59aKnrhqgmTp3cMSKEm4DMNC9dw.crl (hash: BpDWBjuvdFgmUubRdS5/37Vn6lESFGvPqFOmgt7Md/Y=)
2: 5D_6V1jfsiELpRkCmEhi7rdCKRg.roa (hash: /d0M4c6YWxQ0V8Mp5iLPG6sVPAc4eaY42hLJi+0oXvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:30:d4:47:b7:70:7d:2f:56:aa:6a:20:fe:fe:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Validity
Not Before: Apr 17 08:01:04 2026 GMT
Not After : Apr 18 08:01:04 2026 GMT
Subject: CN=52a25b0a995b31112926524dd77835a9a46c098c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c1:a7:a6:d8:18:3f:d6:fc:40:52:60:f9:4a:
c3:83:a4:94:4e:b0:ec:69:6f:02:5f:2b:5f:85:f0:
6b:41:71:5f:90:c1:4b:cd:4d:a4:77:66:3b:a8:91:
9b:20:49:75:78:b7:dd:46:b0:53:ea:fc:71:1c:d5:
93:0e:49:8c:4d:8a:b2:1e:1c:14:27:61:ab:03:68:
54:53:77:d8:52:55:1f:0a:96:82:c0:5f:d1:ab:81:
71:c3:61:7a:6a:2e:4e:8f:c5:d0:5e:25:77:a0:30:
9e:74:75:49:c6:de:ee:f5:f6:a7:e5:67:b2:a2:32:
a7:26:f8:3d:b5:42:19:f6:5f:a3:2e:30:14:9d:12:
74:71:a9:44:38:e5:87:82:37:89:51:d5:27:f1:43:
9b:1f:47:ab:24:8b:c6:e9:ba:98:d3:00:e4:ea:80:
34:3f:2c:ab:45:a4:a7:33:7b:e6:1b:99:4d:2b:90:
96:43:bc:22:ed:00:8f:c0:82:bf:ed:48:17:bb:32:
ec:18:52:db:88:d0:73:10:05:e6:08:e6:af:2e:4d:
6f:b0:5b:88:3a:4a:e4:08:c9:6e:e9:ad:05:bd:bd:
31:d8:86:a1:75:7f:82:a0:f1:ca:f9:09:75:b8:77:
26:1f:dd:c1:2e:9a:85:47:38:8b:36:3d:eb:30:dc:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A2:5B:0A:99:5B:31:11:29:26:52:4D:D7:78:35:A9:A4:6C:09:8C
X509v3 Authority Key Identifier:
keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6c:9a:05:5d:3e:8c:bb:59:80:1f:01:c8:63:e4:a6:85:b5:
db:75:9d:a5:a8:18:eb:b2:54:55:29:40:25:a9:81:fd:c1:b9:
49:22:47:52:67:ed:84:bc:06:44:a4:66:51:d3:d3:f7:f0:f2:
3a:cd:be:3b:6d:a2:30:87:1b:08:57:b5:22:28:43:3d:8d:5f:
d2:50:a6:8b:c0:9b:61:2a:39:35:0e:c7:8f:85:d0:4d:a3:9b:
4b:91:fe:c5:f6:6a:0d:9e:bd:bd:61:5c:ce:ec:e1:39:f1:40:
a7:6b:3a:aa:db:7e:2c:fd:3b:5e:10:5d:6e:e3:eb:08:7f:93:
c3:df:16:82:22:38:4a:dc:f3:e4:3a:a6:e7:51:f7:1d:c2:4e:
61:e5:a2:7f:ae:94:0f:02:b0:e5:15:2d:e0:97:5e:eb:d8:a9:
ad:c0:54:0c:03:d9:3a:03:f8:5c:bb:52:92:d0:2d:b3:e4:c2:
dc:71:91:94:da:a2:77:c7:19:35:da:00:c5:a8:da:f5:a5:3a:
49:c7:7d:44:99:36:67:0a:1e:0d:bc:c2:59:76:18:52:fc:ad:
61:a5:c8:77:6b:22:28:69:ee:d6:c0:31:eb:c3:32:ab:11:0c:
26:4a:5e:13:37:a2:f3:72:25:ff:5b:1f:b0:35:5c:eb:41:29:
0f:5e:a5:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adTDUR7dwfS9Wqmog/v4/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZDY4YTllYjg2YTgyNjRlOWRkYzMxMjI4NDliODBjYzM0
MmY1ZGMwHhcNMjYwNDE3MDgwMTA0WhcNMjYwNDE4MDgwMTA0WjAzMTEwLwYDVQQD
Eyg1MmEyNWIwYTk5NWIzMTExMjkyNjUyNGRkNzc4MzVhOWE0NmMwOThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28GnptgYP9b8QFJg+UrDg6SUTrDs
aW8CXytfhfBrQXFfkMFLzU2kd2Y7qJGbIEl1eLfdRrBT6vxxHNWTDkmMTYqyHhwU
J2GrA2hUU3fYUlUfCpaCwF/Rq4Fxw2F6ai5Oj8XQXiV3oDCedHVJxt7u9fan5Wey
ojKnJvg9tUIZ9l+jLjAUnRJ0calEOOWHgjeJUdUn8UObH0erJIvG6bqY0wDk6oA0
PyyrRaSnM3vmG5lNK5CWQ7wi7QCPwIK/7UgXuzLsGFLbiNBzEAXmCOavLk1vsFuI
OkrkCMlu6a0Fvb0x2IahdX+CoPHK+Ql1uHcmH93BLpqFRziLNj3rMNxOYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKiWwqZWzERKSZSTdd4NamkbAmMMB8GA1UdIwQY
MBaAFOfWip64aoJk6d3DEihJuAzDQvXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81NjVlYTEtMmEzNi00NDAzLTk0MWUt
ZjBkNDBmMDI5NjczLzEvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81NjVlYTEtMmEzNi00NDAzLTk0MWUtZjBkNDBmMDI5Njcz
LzEvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2yaBV0+
jLtZgB8ByGPkpoW123WdpagY67JUVSlAJamB/cG5SSJHUmfthLwGRKRmUdPT9/Dy
Os2+O22iMIcbCFe1IihDPY1f0lCmi8CbYSo5NQ7Hj4XQTaObS5H+xfZqDZ69vWFc
zuzhOfFAp2s6qtt+LP07XhBdbuPrCH+Tw98WgiI4Stzz5Dqm51H3HcJOYeWif66U
DwKw5RUt4Jde69iprcBUDAPZOgP4XLtSktAts+TC3HGRlNqid8cZNdoAxaja9aU6
Scd9RJk2ZwoeDbzCWXYYUvytYaXId2siKGnu1sAx68MyqxEMJkpeEzei83Il/1sf
sDVc60EpD16lwA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:41:08 2026 by rpki-client