Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
File: k059UV3emgPC3Ic4mi_KTn1YxOw.mft (raw, json)
Hash identifier: RvlPuBWxh9JV+UMomyVBplS6+UpN/hjHyCiRNKVb9YU=
Subject key identifier: 2A:7B:DB:48:E2:ED:73:0F:BD:95:5D:4B:CD:74:26:EE:64:51:90:1B
Authority key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
Certificate issuer: /CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Certificate serial: 019CAA21D74236B982E03812615FA12073DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
Manifest number: 1540
Signing time: Sun 01 Mar 2026 16:01:10 +0000
Manifest this update: Sun 01 Mar 2026 16:01:10 +0000
Manifest next update: Mon 02 Mar 2026 16:01:10 +0000
Files and hashes: 1: 8C0-ccpIqHmAeIjDW496VrjvKOE.roa (hash: MxDBkMG/iI6Rw/citiI0TMMCR7WPdW1yRCJFeLdpPMQ=)
2: k059UV3emgPC3Ic4mi_KTn1YxOw.crl (hash: iz5+fX8KnHEUn8LmyUDIqsRp398+bdMpR6fuZ86dD2I=)
3: lzJxr3OaH_yk9VA1VyatZwJOBt8.roa (hash: 6DTksgX0M5lhtZAJh3VGJo/0CDrM2xhsttRRqVDddYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:d7:42:36:b9:82:e0:38:12:61:5f:a1:20:73:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Validity
Not Before: Mar 1 16:01:10 2026 GMT
Not After : Mar 2 16:01:10 2026 GMT
Subject: CN=2a7bdb48e2ed730fbd955d4bcd7426ee6451901b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:38:6f:8d:92:5e:06:36:27:b1:65:66:fd:
91:8d:45:1c:be:cf:57:48:71:a6:2b:2b:b7:ed:d7:
90:08:f1:dc:61:64:e7:a5:7f:84:16:a9:6a:e7:fa:
ad:45:e3:da:43:bc:fb:fd:da:bb:6c:85:8f:df:14:
55:43:e4:50:92:63:30:9c:8b:75:5d:d1:04:7b:fe:
52:f6:5b:76:55:4e:3a:56:0e:7f:e1:f1:80:fa:65:
87:c0:00:9a:7c:d8:1c:4a:da:52:62:b8:63:32:92:
9f:25:1a:aa:8e:c7:72:e9:fc:39:dd:ff:33:60:e0:
a8:da:99:99:c6:0f:7a:fa:c2:8a:ea:c4:76:79:e9:
c3:03:e9:23:f4:1d:7b:9a:0f:5d:36:f6:62:4e:7a:
4c:8b:67:10:fc:6b:ca:16:d8:6e:b7:45:19:f7:17:
5d:e9:69:75:7c:6f:90:b8:a0:75:2a:84:8c:c5:39:
39:a1:61:a5:6b:d9:45:9a:41:6d:8d:b2:75:57:c1:
4c:3a:ad:35:7b:92:52:08:f6:ae:47:b2:40:87:8e:
eb:f6:4f:89:15:d3:2f:6d:0b:48:bd:80:f6:a5:33:
d5:8e:db:71:f8:12:3c:86:85:28:78:f2:70:02:0e:
b3:6e:63:6b:87:ca:4e:8b:b9:e7:b0:7c:ce:18:c7:
3e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7B:DB:48:E2:ED:73:0F:BD:95:5D:4B:CD:74:26:EE:64:51:90:1B
X509v3 Authority Key Identifier:
keyid:93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d6:46:ba:15:60:3e:df:58:00:b4:39:10:3a:df:5c:15:f6:
8a:37:34:2a:68:42:b7:1e:1e:79:df:f5:9e:0a:c3:1a:7d:dc:
16:bc:84:40:b2:ce:94:08:8c:12:cc:75:8f:69:65:5c:7c:72:
ed:67:fb:e7:ac:33:3c:ae:4e:c5:60:97:eb:ea:fc:5b:f4:f3:
25:72:ee:d1:29:23:e0:47:6b:39:80:6b:2e:50:06:9b:de:b2:
ba:92:26:b8:74:5e:d5:ca:ff:5c:3b:57:ac:47:39:eb:de:0f:
38:58:d4:c0:74:78:f0:cf:7e:28:59:85:a9:86:2e:0a:6b:67:
11:90:22:81:0b:71:d6:66:1c:ad:b2:ca:4d:66:4e:64:42:ba:
39:12:f8:18:82:92:30:cb:be:a1:e7:d0:c7:d6:ae:4e:8c:91:
dc:e5:a3:f3:f5:d9:dd:13:5c:40:6e:87:ec:11:8f:69:0d:aa:
94:89:b0:ab:5d:6f:e9:56:13:88:28:5f:5f:6c:4f:55:9e:17:
f9:08:c7:68:13:db:c2:ee:a4:f1:cb:55:e4:5b:bd:08:14:47:
5b:80:6e:76:18:9f:7d:ae:6f:b9:98:47:a8:eb:12:3b:43:f8:
ce:b5:80:37:37:b3:25:5d:82:7e:fd:b9:76:e5:65:63:47:40:
8f:a6:f8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:17 2026 by rpki-client