Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
File: 59PkY_EcytBV0WYuAIwqlPQt6d4.mft (raw, json)
Hash identifier: oTciVAxBE09cACIpyLJiAN6f3Tbc2mncmvehgldM6gM=
Subject key identifier: AF:95:93:F3:C3:FC:AB:4B:9A:5E:C0:92:8D:B7:5E:0B:B3:2B:5C:48
Authority key identifier: E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
Certificate issuer: /CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Certificate serial: 019FA82BDF618A40BDD85F8F7008936FAF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
Manifest number: 1817
Signing time: Tue 28 Jul 2026 10:01:15 +0000
Manifest this update: Tue 28 Jul 2026 10:01:15 +0000
Manifest next update: Wed 29 Jul 2026 10:01:15 +0000
Files and hashes: 1: 59PkY_EcytBV0WYuAIwqlPQt6d4.crl (hash: xWT/+xQZ5oWrmzwpepjFq8uupq0upngIiFee0Mkf5kk=)
2: KMWFIlQC6ib8yekqMVKEQLoSRCk.roa (hash: 29tTxMBE8uiY+In8DyCrSX4qq9Iv9YNEkKYRZQmc7CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:df:61:8a:40:bd:d8:5f:8f:70:08:93:6f:af:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Validity
Not Before: Jul 28 10:01:15 2026 GMT
Not After : Jul 29 10:01:15 2026 GMT
Subject: CN=af9593f3c3fcab4b9a5ec0928db75e0bb32b5c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a4:8e:91:53:97:89:87:7f:5b:87:bc:21:14:
5e:5d:c4:e1:e1:6d:e1:91:a2:14:ea:4f:36:e4:d4:
52:a8:32:db:34:04:6f:ac:52:f4:c2:41:8e:07:25:
42:62:09:d2:5e:fa:80:cc:11:8c:44:d0:ae:59:c2:
7d:39:11:19:ec:46:fa:c2:db:36:2f:83:f2:67:48:
70:66:c2:17:aa:a5:b2:cd:35:b0:4e:4b:fb:50:13:
9b:ea:bf:4b:99:c1:55:cd:94:58:c5:1d:f6:1a:9c:
80:3e:26:dd:ee:a6:5d:93:06:ea:c8:15:be:a5:73:
2e:a2:63:0b:7e:73:a6:f6:db:8b:6d:d0:2a:37:f4:
cf:48:91:97:b2:bc:32:33:5f:83:e8:38:0a:5f:bc:
ee:f5:e6:52:8a:dc:a1:44:15:98:8f:2a:e1:32:a0:
21:3e:8f:43:bb:ab:f4:f8:78:ff:90:23:ba:f0:31:
fa:b7:2f:40:0c:47:06:63:bb:3e:21:ef:37:87:6f:
26:a1:7d:88:1b:d9:1f:5d:b5:c4:45:3d:54:b4:5f:
53:48:48:c3:93:77:b9:fe:c4:d7:70:63:3b:6c:1f:
66:37:c6:2a:49:3c:e1:58:54:11:a2:b3:0b:09:a1:
cb:b1:32:40:de:a3:b0:06:59:cc:d1:62:55:90:15:
f4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:95:93:F3:C3:FC:AB:4B:9A:5E:C0:92:8D:B7:5E:0B:B3:2B:5C:48
X509v3 Authority Key Identifier:
keyid:E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:af:22:ef:7f:6a:7e:29:e7:c8:4c:9d:46:5a:da:62:39:e5:
ba:75:c9:d0:12:63:40:eb:47:f3:82:e4:b1:81:9f:37:8c:dd:
54:cc:00:c6:6e:9b:d0:59:9c:3a:3f:fa:97:7f:c2:cd:c5:55:
f4:ec:32:96:db:b5:3d:7d:0f:cf:96:1e:3d:2c:e9:1d:92:1e:
d2:f7:f9:c4:b6:d5:9a:43:00:d6:c5:83:f4:aa:36:d7:81:67:
6e:e6:f8:1d:ee:3e:0c:9b:14:14:48:ff:80:26:5a:d0:e0:75:
12:04:55:da:9a:df:f1:55:80:55:ee:33:c4:bd:1a:4c:42:d6:
88:cd:f5:d0:f2:09:36:26:80:10:62:14:40:33:4b:dd:c0:47:
13:f5:f8:1f:ee:e4:cb:3a:52:44:2a:c8:50:8a:d3:5d:8e:1f:
5a:34:30:b7:33:e9:ea:35:b1:9d:63:cf:55:63:9a:70:37:76:
0c:16:f3:6d:02:b3:16:df:1f:b1:04:c5:93:88:ce:05:42:11:
3f:71:d5:b6:2f:f8:5b:2f:b3:79:e2:61:a9:a2:80:55:6f:af:
0a:7e:84:ef:79:76:c9:7a:91:20:f4:3e:d0:ca:36:af:59:77:
07:fa:77:17:04:f5:eb:c3:69:17:f1:56:c0:d3:28:83:45:d7:
fd:2e:bb:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oK99hikC92F+PcAiTb69xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZDNlNDYzZjExY2NhZDA1NWQxNjYyZTAwOGMyYTk0ZjQy
ZGU5ZGUwHhcNMjYwNzI4MTAwMTE1WhcNMjYwNzI5MTAwMTE1WjAzMTEwLwYDVQQD
EyhhZjk1OTNmM2MzZmNhYjRiOWE1ZWMwOTI4ZGI3NWUwYmIzMmI1YzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqSOkVOXiYd/W4e8IRReXcTh4W3h
kaIU6k825NRSqDLbNARvrFL0wkGOByVCYgnSXvqAzBGMRNCuWcJ9OREZ7Eb6wts2
L4PyZ0hwZsIXqqWyzTWwTkv7UBOb6r9LmcFVzZRYxR32GpyAPibd7qZdkwbqyBW+
pXMuomMLfnOm9tuLbdAqN/TPSJGXsrwyM1+D6DgKX7zu9eZSityhRBWYjyrhMqAh
Po9Du6v0+Hj/kCO68DH6ty9ADEcGY7s+Ie83h28moX2IG9kfXbXERT1UtF9TSEjD
k3e5/sTXcGM7bB9mN8YqSTzhWFQRorMLCaHLsTJA3qOwBlnM0WJVkBX0IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+Vk/PD/KtLml7Ako23XguzK1xIMB8GA1UdIwQY
MBaAFOfT5GPxHMrQVdFmLgCMKpT0LeneMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84YTZiNmUtOWJiNy00NWZjLTk3YmUt
MjJiODQ5OGI1MTViLzEvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi84YTZiNmUtOWJiNy00NWZjLTk3YmUtMjJiODQ5OGI1MTVi
LzEvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAla8i739q
finnyEydRlraYjnlunXJ0BJjQOtH84LksYGfN4zdVMwAxm6b0FmcOj/6l3/CzcVV
9Owyltu1PX0Pz5YePSzpHZIe0vf5xLbVmkMA1sWD9Ko214Fnbub4He4+DJsUFEj/
gCZa0OB1EgRV2prf8VWAVe4zxL0aTELWiM310PIJNiaAEGIUQDNL3cBHE/X4H+7k
yzpSRCrIUIrTXY4fWjQwtzPp6jWxnWPPVWOacDd2DBbzbQKzFt8fsQTFk4jOBUIR
P3HVti/4Wy+zeeJhqaKAVW+vCn6E73l2yXqRIPQ+0Mo2r1l3B/p3FwT168NpF/FW
wNMog0XX/S67fA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:36 2026 by rpki-client