Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
File: 58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json)
Hash identifier: ra/mcxbfusd1ZQIDj6qUh57umIlRcz/1wUsxl78tEJI=
Subject key identifier: 56:9E:C7:4B:10:FB:13:32:A2:8D:3C:33:7B:29:05:B8:7E:72:40:ED
Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
Certificate issuer: /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Certificate serial: 019D2A3B97B03FB8A46BC401C11988A8740F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
Manifest number: 0BCA
Signing time: Thu 26 Mar 2026 13:00:41 +0000
Manifest this update: Thu 26 Mar 2026 13:00:41 +0000
Manifest next update: Fri 27 Mar 2026 13:00:41 +0000
Files and hashes: 1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: XQnKFmz/EX2LsM0wABLp09eyEgWcDsSXLKOY26H93zY=)
2: kjD9MNfC0BPcwkyPzs0CEhSag-I.roa (hash: e8QlVBviEv2pFqVxAanGI81u7if0cNyxjU/3EXVOJq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:97:b0:3f:b8:a4:6b:c4:01:c1:19:88:a8:74:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Validity
Not Before: Mar 26 13:00:41 2026 GMT
Not After : Mar 27 13:00:41 2026 GMT
Subject: CN=569ec74b10fb1332a28d3c337b2905b87e7240ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7d:6f:80:20:c6:39:e7:21:15:ce:a5:86:1c:
e3:9e:1f:d8:e7:f0:b4:f6:4d:41:6a:6e:0e:be:7a:
0a:2e:fa:bb:a8:a6:6e:2d:bb:2d:56:5d:72:69:fd:
1d:7d:36:c5:ed:65:8f:40:a9:7c:3f:7b:ad:26:d5:
c1:2f:88:93:71:5a:64:aa:92:ba:e7:f4:e3:23:16:
44:3c:9b:d4:f6:d6:d6:fd:29:ae:65:fa:99:f7:63:
16:59:9d:2c:6a:47:a0:8f:e6:eb:73:d2:75:ed:c0:
22:b6:a4:b2:5f:5f:03:6f:81:bb:db:7d:fd:06:49:
13:ed:46:0d:55:07:9f:03:2f:52:f8:fe:a5:7c:ab:
15:85:56:b7:bd:fb:34:c7:a5:d8:c4:a5:ec:c2:54:
e8:10:1c:d7:54:f3:94:2c:4b:14:98:04:5f:61:6c:
b1:bf:f9:16:43:64:f8:f0:cd:fe:b2:46:78:07:d5:
36:6b:fc:07:ed:5b:15:5c:06:e7:05:b0:4b:e8:b0:
ee:c8:c8:81:d3:09:97:21:6a:25:7d:1e:1f:31:aa:
b3:9c:07:6e:a0:c0:fc:d1:71:21:fc:66:59:76:04:
52:2c:ec:a8:12:a8:80:4e:8f:1b:2e:1a:8f:0c:25:
62:4e:14:ea:87:05:9c:b2:0d:e9:f0:2d:7e:b6:44:
04:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9E:C7:4B:10:FB:13:32:A2:8D:3C:33:7B:29:05:B8:7E:72:40:ED
X509v3 Authority Key Identifier:
keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9a:ce:4d:79:31:02:38:e0:66:c9:b5:d9:e8:c5:7a:28:9c:
f2:b1:6e:ca:8b:06:a6:5d:dc:8c:ca:64:eb:88:e1:13:cd:7e:
c2:24:9e:a7:fc:92:ea:16:54:d2:bb:2c:a0:8c:91:56:9b:7b:
3f:eb:e7:3c:a5:09:0d:ff:9e:11:ca:a5:36:8e:b3:bd:99:d4:
59:40:b0:f2:58:70:5c:a8:b1:0d:86:d7:8d:13:db:03:62:98:
d4:d7:c2:78:2f:91:49:e5:45:55:8b:98:e3:d3:ae:a2:c6:76:
90:71:c2:49:dc:34:a3:08:b9:3d:16:89:51:bd:08:33:02:58:
51:25:29:22:8d:eb:fc:95:c7:2a:59:37:92:ac:61:9b:6d:98:
30:e6:9f:ce:77:81:04:58:24:92:44:ba:16:9b:29:7c:69:6e:
10:32:4d:03:8f:32:b3:76:66:ce:e2:12:27:24:53:af:81:89:
49:cc:3c:f6:b0:69:26:d6:46:b6:34:e7:f4:5e:58:50:7b:48:
16:56:11:51:ec:0c:54:8b:9e:d8:d0:10:2a:b3:0b:e9:8c:19:
a1:02:9a:f7:cb:f5:fb:8c:7a:13:a3:fd:f2:a0:68:c9:a6:fc:
98:15:3a:e4:59:65:57:e4:08:72:80:66:6e:db:e5:42:8a:44:
ae:b5:da:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:54:40 2026 by rpki-client