
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
File: 58NBW98cAUrhwY58_TPFbwGP7ug.mft (raw, json)
Hash identifier: ADx6T0i744IQcGaxouKVcIgMtoW9T9rDy8iiLivlMpE=
Subject key identifier: 27:A0:68:14:58:D3:47:70:9A:FC:89:47:19:0D:A5:28:71:BE:1E:FA
Authority key identifier: E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
Certificate issuer: /CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
Certificate serial: 019CAB6BDD84FF8F5A763050B8F9C7AEA7AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
Manifest number: 17DB
Signing time: Sun 01 Mar 2026 22:01:38 +0000
Manifest this update: Sun 01 Mar 2026 22:01:38 +0000
Manifest next update: Mon 02 Mar 2026 22:01:38 +0000
Files and hashes: 1: 58NBW98cAUrhwY58_TPFbwGP7ug.crl (hash: DuW9Cb++RlAsGFEkjQFHFHQjM7B33ore0VBhxS6yKSk=)
2: gSOpCTMsxm1sebqZJUK3o9Zr9Zs.roa (hash: 9TkioDxaCkLwzYPNkh8yoUAHXHZVA478tyWocCq/RYY=)
3: rY66itDDLvcle-1MpYTgXG_M4zo.roa (hash: knoTBDvlJ1a2MSnUjOh4TAK/Rthq7es3OkAljnFYzRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:dd:84:ff:8f:5a:76:30:50:b8:f9:c7:ae:a7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
Validity
Not Before: Mar 1 22:01:38 2026 GMT
Not After : Mar 2 22:01:38 2026 GMT
Subject: CN=27a0681458d347709afc8947190da52871be1efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:16:8b:2e:ca:9b:9a:49:c1:c4:7b:83:26:
a9:94:4f:52:ce:99:b6:90:0d:66:2b:48:a5:63:71:
08:43:b9:72:f4:94:ee:ee:3a:ea:d2:9b:37:a3:59:
d0:9a:27:66:dd:ea:20:35:77:18:30:1a:43:9d:a4:
5d:f8:d7:19:8c:70:2a:02:14:4e:7f:eb:a6:24:32:
6a:83:dc:d5:39:d8:01:a2:75:f7:32:6b:9d:59:4e:
86:8d:c7:20:cb:5c:90:b1:26:cb:f1:0a:b6:fe:c2:
ef:4f:88:a7:52:59:65:c4:c3:db:ae:1c:31:03:a2:
1d:92:bc:70:54:1e:83:3a:ec:c0:b4:db:5d:fa:10:
ea:b6:14:be:ab:3b:1d:ae:a8:e8:39:db:a1:0c:42:
b8:7d:c3:83:c6:5a:49:1e:7a:af:0b:f0:6b:2f:e1:
f2:25:8f:05:81:9a:89:8e:42:46:06:73:42:a1:bc:
0b:13:ae:44:56:1e:ff:b8:f8:75:40:b5:58:12:4c:
65:50:de:e2:23:04:c8:1d:1c:df:66:54:be:63:c0:
d2:51:01:01:1b:3c:7c:79:fc:34:9b:06:86:e1:4e:
59:71:d5:eb:7c:97:f6:eb:e5:01:d4:67:d6:3d:ca:
f9:e5:d0:8a:1f:e0:bb:0b:16:c1:96:72:6c:15:71:
28:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A0:68:14:58:D3:47:70:9A:FC:89:47:19:0D:A5:28:71:BE:1E:FA
X509v3 Authority Key Identifier:
keyid:E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e9:bd:21:9b:db:a1:73:f2:e1:ce:23:e5:29:5a:dc:0b:e0:
10:3f:00:c9:a0:cd:53:c4:46:a0:d6:d1:36:4b:ab:6b:18:6b:
1b:21:3e:21:50:81:8a:5e:de:42:89:e6:f1:92:aa:cf:15:1d:
bb:c2:21:4e:f5:2f:1f:9d:8c:72:be:be:c1:23:e3:dd:82:88:
f5:09:3c:0b:50:a0:3b:6f:40:4d:38:69:4c:83:e6:40:23:a2:
6f:45:1d:92:0d:f9:c7:47:72:22:b1:be:5e:58:35:d7:87:28:
8f:d6:aa:d2:80:64:df:d3:ca:38:b0:de:dd:d9:c1:c4:4d:27:
52:94:ac:68:29:59:53:c5:c9:92:ac:d4:30:86:fc:83:7e:bb:
5d:f6:47:0b:18:2c:8f:23:50:29:20:09:e4:2c:57:3b:c6:d7:
4d:d1:9b:81:ad:43:00:9d:fd:57:4c:2c:e5:2e:9b:0a:c9:fa:
c0:75:1c:5c:4a:0b:6a:7d:b3:cd:1d:2c:ee:f9:58:58:fa:f5:
d8:15:0d:a4:80:24:e8:af:ce:73:db:b4:c8:27:88:a4:e2:2e:
21:14:50:b1:55:fe:53:b5:f3:80:4e:76:34:37:5b:50:f8:f4:
71:49:25:9c:f1:4b:71:37:79:0c:cc:ff:05:f5:bb:97:ef:b4:
bb:65:67:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:29 2026 by rpki-client