Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: gweY2a6N/Y7bFfBkiux2KDBrwxmNtFp+K6YJYAE2KbU=
Subject key identifier: 02:2A:9C:E6:65:DB:B9:FA:33:D5:8E:72:CD:63:BA:B9:B1:FB:ED:89
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 019F9059FAEA2A74F5F4E63A0D8767B71FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 081C
Signing time: Thu 23 Jul 2026 19:00:43 +0000
Manifest this update: Thu 23 Jul 2026 19:00:43 +0000
Manifest next update: Fri 24 Jul 2026 19:00:43 +0000
Files and hashes: 1: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (hash: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo=)
2: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: E+rZqXkDd17VAzn2ZbeigmZWWgEnERwRp1qeKJzIFno=)
3: btsbBPG_XDlQ3e5fMtVbLStYwh8.roa (hash: XdV1d+wt2UtCqheQtg2DA5+JgtI45RV6xN6JsyMCDQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:fa:ea:2a:74:f5:f4:e6:3a:0d:87:67:b7:1f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Jul 23 19:00:43 2026 GMT
Not After : Jul 24 19:00:43 2026 GMT
Subject: CN=022a9ce665dbb9fa33d58e72cd63bab9b1fbed89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:41:44:cd:c9:8f:6b:56:32:08:2e:2f:7c:8b:
bd:e3:f7:c8:df:85:87:71:5a:7c:22:a6:b4:3b:f3:
df:bc:e9:ef:7f:6b:25:da:a9:ab:ab:b3:62:6c:1e:
72:2e:68:f2:61:81:0d:91:42:b7:ee:e0:db:3a:95:
4f:5b:d4:37:00:be:12:26:c0:71:4b:49:3f:8b:54:
01:90:92:73:7f:4a:87:18:0d:22:22:99:bf:15:f1:
b3:66:60:1c:5c:55:4f:aa:5d:81:dd:58:e9:0d:62:
a1:31:b2:4f:77:ff:70:94:58:ba:5f:0d:14:3c:3c:
27:5b:d8:60:bb:16:de:94:7a:d1:63:3b:f2:ae:5b:
49:95:11:8a:dc:1a:ce:75:61:72:4b:64:25:85:c9:
68:62:6e:3d:6a:23:f6:c1:9d:2d:d6:32:52:17:32:
79:94:f3:6a:11:ff:c0:a1:d1:7d:67:b4:34:55:d0:
4e:ae:dc:af:19:67:65:e0:1e:cf:91:cb:bf:03:9e:
93:e5:5a:b3:9e:a3:68:d9:89:bf:f6:c1:94:14:73:
9c:c5:49:14:66:2a:f0:c1:89:49:73:4e:80:63:af:
76:e9:ce:e0:e3:c2:1b:a4:e3:b2:03:bf:fb:af:7d:
34:6b:e4:36:4a:b9:d7:56:ee:14:54:a8:2d:ff:33:
6e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2A:9C:E6:65:DB:B9:FA:33:D5:8E:72:CD:63:BA:B9:B1:FB:ED:89
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bc:b3:87:ba:aa:6a:e4:79:70:81:7b:bd:20:e9:a1:1e:c2:
6a:a4:0a:70:d2:7c:b8:9d:76:e5:db:0e:10:81:df:f8:c7:8e:
3f:68:49:11:0d:ab:e6:cc:85:4d:bc:19:95:ee:1b:ab:8b:bf:
79:35:24:66:70:6f:9f:55:d9:7f:e7:c8:fb:5c:ef:d7:4c:16:
d4:5d:7c:31:f3:5f:a0:9e:af:4e:cf:05:b1:7e:70:09:bc:bd:
98:8c:fc:cd:48:1c:3a:4e:ce:a0:3a:50:be:16:ec:e5:a6:b2:
77:1b:c0:ec:11:1d:d9:50:32:b6:28:63:f3:a6:c4:52:54:9a:
72:cc:b1:4f:d5:45:e6:09:89:bc:f3:56:aa:c0:42:ad:38:9e:
5b:58:a6:24:40:27:18:f7:db:30:79:68:ab:20:38:c0:e1:3c:
20:a4:8c:bc:7e:86:7e:28:d1:ec:32:f6:6b:c8:fd:30:a7:c5:
9e:2c:5b:9f:8e:e9:5f:16:81:0f:c5:a4:02:94:56:83:10:0b:
fc:8b:b2:6d:bc:7f:20:32:5d:a2:38:dc:95:66:e5:c8:ed:d7:
4b:77:b0:42:77:c0:00:29:65:b2:b0:bd:51:8c:7e:15:65:0d:
2c:2b:d4:5e:f7:6d:fe:65:8f:86:22:69:dc:82:6e:af:59:ec:
07:ba:e4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:25:55 2026 by rpki-client