Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
File: 59PkY_EcytBV0WYuAIwqlPQt6d4.mft (raw, json)
Hash identifier: QRzEmeSEu8dSqtbTkm/ih6HC5rS8AhmH6+Fsn2O2FQ8=
Subject key identifier: 51:1E:4C:6E:E9:CD:47:AE:5E:05:0E:AC:A5:C5:E4:CB:4E:F1:B2:7C
Authority key identifier: E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
Certificate issuer: /CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Certificate serial: 01A1C4E758D69210B99955891BB18E681CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
Manifest number: 192F
Signing time: Tue 10 Nov 2026 10:00:58 +0000
Manifest this update: Tue 10 Nov 2026 10:00:58 +0000
Manifest next update: Wed 11 Nov 2026 10:00:58 +0000
Files and hashes: 1: 59PkY_EcytBV0WYuAIwqlPQt6d4.crl (hash: rq7CN4+xMGOnbpnAraFaGGkQ5wwqVDUPCIPc2OTMuv8=)
2: KMWFIlQC6ib8yekqMVKEQLoSRCk.roa (hash: 29tTxMBE8uiY+In8DyCrSX4qq9Iv9YNEkKYRZQmc7CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:e7:58:d6:92:10:b9:99:55:89:1b:b1:8e:68:1c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Validity
Not Before: Nov 10 10:00:58 2026 GMT
Not After : Nov 11 10:00:58 2026 GMT
Subject: CN=511e4c6ee9cd47ae5e050eaca5c5e4cb4ef1b27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:d7:70:cd:8d:a6:06:2c:93:d4:42:93:7b:
8d:0e:47:b1:b3:3b:d9:54:e8:47:ee:76:13:64:37:
82:f0:78:64:6a:25:fb:9d:83:93:1d:2b:0e:a7:ff:
f1:06:63:33:a6:9f:2f:ed:29:cc:4c:65:36:39:8f:
f5:dc:8b:64:5e:f9:2a:45:36:1d:1b:7e:43:b8:0b:
a4:ac:37:14:82:74:48:ba:ff:f3:8d:5a:12:01:94:
01:a1:82:75:7d:2f:5d:b0:a8:75:cb:48:92:32:45:
f5:9e:2c:68:09:21:57:4e:f8:53:c4:f1:30:0e:0c:
be:7d:17:d1:c1:6f:69:1e:7c:31:23:88:86:78:1f:
b2:30:60:8e:75:28:97:ed:9a:0c:56:b8:5f:2d:ee:
ab:21:c1:7e:40:f4:d1:92:07:56:fa:4c:c9:5c:13:
56:6f:26:15:bb:eb:d3:12:46:7e:8e:df:e4:b4:09:
a7:93:82:84:d7:fb:18:5b:9f:22:bc:b9:f6:cf:29:
d9:5f:f7:59:f3:d7:a0:5a:7f:1b:4d:02:3a:4f:e4:
50:ab:4a:cd:d7:04:b2:2b:6f:4e:f7:f7:b7:0b:3c:
fe:47:ae:61:71:51:15:fe:02:05:c2:25:ba:7d:cb:
85:ee:7a:cd:c6:84:7f:85:fb:d2:32:bf:41:e0:ce:
99:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1E:4C:6E:E9:CD:47:AE:5E:05:0E:AC:A5:C5:E4:CB:4E:F1:B2:7C
X509v3 Authority Key Identifier:
keyid:E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:74:a4:77:3a:7f:0a:72:09:bc:8c:c4:15:4e:4d:37:e0:95:
d5:35:53:b8:90:1a:34:f7:46:ca:79:2f:61:a8:3b:be:20:b8:
b6:88:84:e6:68:d6:cc:16:13:3b:d8:be:ee:18:2c:64:f4:d3:
a1:13:43:82:28:7d:e4:a9:d2:43:76:d3:9a:9a:7b:b5:ae:94:
02:da:ac:e7:83:ce:07:7e:e7:95:f0:fd:7a:a9:42:3f:48:5a:
82:df:65:aa:73:5a:ec:75:2e:ef:3b:5a:28:85:12:c4:1c:0c:
6a:2f:7b:b0:c0:97:60:6d:b7:e1:10:52:a7:26:b7:66:72:73:
9a:4c:a6:42:5a:dc:18:35:7e:7f:cb:7c:92:ed:7c:e4:6a:c3:
48:fa:c1:ac:26:1d:c3:13:37:79:de:2d:47:d8:ea:43:0b:13:
4a:20:d4:68:0a:95:69:cd:46:6b:47:32:58:a4:3a:62:41:c3:
73:94:0c:a2:25:ad:fd:0c:41:b5:a9:8e:a6:13:e0:56:9c:00:
64:e7:7f:c5:d5:43:41:b5:11:86:2f:bc:92:5c:ab:11:0a:39:
04:4b:3a:7b:32:df:42:ce:d1:7e:2e:df:9c:da:f8:13:9d:f0:
f4:07:c4:66:d1:aa:34:f3:e5:99:75:f7:f1:11:90:27:c7:b3:
be:a9:72:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 13:31:43 2026 by rpki-client