Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
File: 59PkY_EcytBV0WYuAIwqlPQt6d4.mft (raw, json)
Hash identifier: MClX8ZkZ5TmxDb8yiB+xB7Q4ROGbr1V/vb4Hxc4a96w=
Subject key identifier: 4F:FC:2C:F8:18:8A:8E:B5:61:B8:5A:8C:88:2A:E0:AE:E9:A7:78:FC
Authority key identifier: E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
Certificate issuer: /CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Certificate serial: 01A0C40DD193D58BB2DF204B830D95160C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
Manifest number: 18AA
Signing time: Mon 21 Sep 2026 13:00:35 +0000
Manifest this update: Mon 21 Sep 2026 13:00:35 +0000
Manifest next update: Tue 22 Sep 2026 13:00:35 +0000
Files and hashes: 1: 59PkY_EcytBV0WYuAIwqlPQt6d4.crl (hash: NjPvkyueVPrNuXBbVG/v1UdjWz/e9zfQPqWEWpszYsI=)
2: KMWFIlQC6ib8yekqMVKEQLoSRCk.roa (hash: 29tTxMBE8uiY+In8DyCrSX4qq9Iv9YNEkKYRZQmc7CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:d1:93:d5:8b:b2:df:20:4b:83:0d:95:16:0c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Validity
Not Before: Sep 21 13:00:35 2026 GMT
Not After : Sep 22 13:00:35 2026 GMT
Subject: CN=4ffc2cf8188a8eb561b85a8c882ae0aee9a778fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3c:cc:79:cd:5c:00:66:34:7a:98:27:9a:ba:
54:94:70:51:be:55:be:60:14:1b:28:3b:15:ad:86:
ce:a6:f4:c6:f5:a2:3b:4c:52:83:0a:c0:01:e7:38:
c1:7e:e6:74:da:9a:10:e3:a8:05:de:41:65:2a:86:
4c:95:da:58:73:62:d2:af:06:d3:72:22:da:44:89:
96:18:38:c9:35:b2:06:3c:7e:7c:5c:05:0d:61:d3:
46:20:7c:97:31:15:a0:56:eb:94:a3:19:db:e3:bb:
b1:bc:bc:a7:e5:fd:f2:cf:70:c7:f9:53:1c:58:16:
82:69:fd:a8:8f:f8:1f:4e:71:27:60:ce:e4:1d:a4:
6a:1d:d1:a0:71:33:54:dc:db:50:ad:77:fe:a1:77:
49:e0:de:af:cf:80:e9:b1:c9:99:7e:eb:f0:53:e8:
b8:95:f9:ec:b6:7a:65:37:64:0f:5c:2f:a1:52:7d:
a4:22:7a:2f:ff:ff:55:16:b7:12:7f:0e:b8:00:b6:
bd:dc:af:80:f2:48:16:8c:9c:8f:de:9c:c0:1b:f6:
a0:bc:d5:7d:42:0e:9d:ac:df:d6:4d:74:07:01:a8:
bc:8e:a6:f5:58:fb:01:50:4a:55:30:8d:6f:50:9f:
45:fd:eb:9d:17:26:d2:d1:22:da:83:2b:94:10:de:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FC:2C:F8:18:8A:8E:B5:61:B8:5A:8C:88:2A:E0:AE:E9:A7:78:FC
X509v3 Authority Key Identifier:
keyid:E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8a:58:b4:ec:28:a6:86:60:43:75:6a:82:bd:6d:cd:27:9f:
7e:84:79:77:62:a3:22:df:d1:61:56:71:9c:fe:91:dd:cd:b4:
eb:d8:4b:54:d4:f1:89:9a:b4:be:70:1d:72:07:86:7e:0c:72:
df:df:9a:47:5c:c3:b1:f6:6f:bd:1a:60:89:75:93:57:7a:02:
98:72:dc:72:21:e3:46:91:0f:2c:d4:e0:33:af:0a:18:23:74:
46:58:43:a0:9c:e0:32:cc:a7:a1:0c:de:e8:50:f2:db:01:4b:
10:76:61:cb:a6:2a:03:3c:9b:cc:2f:4d:0c:58:ae:37:2f:01:
2f:62:cc:bd:1a:fb:c4:32:42:17:8a:72:50:49:03:35:de:3b:
af:85:b4:fa:54:c6:4f:b1:34:aa:73:77:64:c5:17:91:75:d4:
be:84:38:40:41:44:a1:6a:08:b1:24:17:56:70:ca:92:a9:68:
7d:50:99:6a:27:e1:a8:7b:ec:fc:fb:e5:e7:91:9b:45:1d:83:
c1:f0:ff:24:cd:f5:24:ba:48:12:9c:bc:04:ea:56:b0:c3:30:
62:b6:2a:fc:8d:9d:dc:3e:2a:34:0d:97:dd:92:bc:fb:e3:40:
27:64:10:ec:c1:dc:65:90:1c:3d:b2:7d:47:9f:5d:cc:3f:2b:
83:c2:06:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDdGT1Yuy3yBLgw2VFgwyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZDNlNDYzZjExY2NhZDA1NWQxNjYyZTAwOGMyYTk0ZjQy
ZGU5ZGUwHhcNMjYwOTIxMTMwMDM1WhcNMjYwOTIyMTMwMDM1WjAzMTEwLwYDVQQD
Eyg0ZmZjMmNmODE4OGE4ZWI1NjFiODVhOGM4ODJhZTBhZWU5YTc3OGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjzMec1cAGY0epgnmrpUlHBRvlW+
YBQbKDsVrYbOpvTG9aI7TFKDCsAB5zjBfuZ02poQ46gF3kFlKoZMldpYc2LSrwbT
ciLaRImWGDjJNbIGPH58XAUNYdNGIHyXMRWgVuuUoxnb47uxvLyn5f3yz3DH+VMc
WBaCaf2oj/gfTnEnYM7kHaRqHdGgcTNU3NtQrXf+oXdJ4N6vz4DpscmZfuvwU+i4
lfnstnplN2QPXC+hUn2kInov//9VFrcSfw64ALa93K+A8kgWjJyP3pzAG/agvNV9
Qg6drN/WTXQHAai8jqb1WPsBUEpVMI1vUJ9F/eudFybS0SLagyuUEN4KTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/8LPgYio61YbhajIgq4K7pp3j8MB8GA1UdIwQY
MBaAFOfT5GPxHMrQVdFmLgCMKpT0LeneMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84YTZiNmUtOWJiNy00NWZjLTk3YmUt
MjJiODQ5OGI1MTViLzEvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi84YTZiNmUtOWJiNy00NWZjLTk3YmUtMjJiODQ5OGI1MTVi
LzEvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIpYtOwo
poZgQ3Vqgr1tzSeffoR5d2KjIt/RYVZxnP6R3c2069hLVNTxiZq0vnAdcgeGfgxy
39+aR1zDsfZvvRpgiXWTV3oCmHLcciHjRpEPLNTgM68KGCN0RlhDoJzgMsynoQze
6FDy2wFLEHZhy6YqAzybzC9NDFiuNy8BL2LMvRr7xDJCF4pyUEkDNd47r4W0+lTG
T7E0qnN3ZMUXkXXUvoQ4QEFEoWoIsSQXVnDKkqlofVCZaifhqHvs/Pvl55GbRR2D
wfD/JM31JLpIEpy8BOpWsMMwYrYq/I2d3D4qNA2X3ZK8++NAJ2QQ7MHcZZAcPbJ9
R59dzD8rg8IGFQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:58:57 2026 by rpki-client