Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: p6PhBN5HorpOneQTbO/lELwe3c9Yu9bosdt1PNUzQ6c=
Subject key identifier: 8D:38:62:0E:0C:15:C0:22:94:B9:4C:57:D9:90:4E:D4:82:30:BB:E4
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 01A0D6B9914192434E5A9715C39197F8C3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 08C5
Signing time: Fri 25 Sep 2026 04:01:20 +0000
Manifest this update: Fri 25 Sep 2026 04:01:20 +0000
Manifest next update: Sat 26 Sep 2026 04:01:20 +0000
Files and hashes: 1: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (hash: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo=)
2: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: 89ASqg0sVEzrpYY8NhwEHlp5Z9TR9WwVN5KvQES+qlM=)
3: btsbBPG_XDlQ3e5fMtVbLStYwh8.roa (hash: XdV1d+wt2UtCqheQtg2DA5+JgtI45RV6xN6JsyMCDQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:91:41:92:43:4e:5a:97:15:c3:91:97:f8:c3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Sep 25 04:01:20 2026 GMT
Not After : Sep 26 04:01:20 2026 GMT
Subject: CN=8d38620e0c15c02294b94c57d9904ed48230bbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:17:e4:ba:b3:6a:f7:16:20:2d:36:a6:a1:1d:
7c:88:4f:97:91:61:da:17:d6:66:0c:14:2a:97:45:
c2:de:75:4b:fd:06:be:d9:9e:f9:2b:09:c5:6a:07:
d5:4e:2a:55:90:88:55:a1:ff:f3:15:bd:b1:a4:f3:
fc:0c:27:37:28:cd:68:64:bb:35:d9:01:13:6e:de:
ea:86:88:c9:94:eb:47:60:cb:e1:29:6d:98:9c:f8:
a2:75:e8:ab:ff:d8:e9:d2:ee:ec:f7:dd:9b:31:76:
56:57:72:a1:bc:34:16:ac:00:0b:9b:3f:fb:4a:6a:
50:cd:fc:e1:56:fc:f8:23:53:55:c8:c8:2c:33:22:
21:ba:74:37:ed:2e:0b:63:ff:c6:d6:47:ce:be:c1:
67:92:15:70:7e:d8:57:01:09:b0:4c:56:3d:af:55:
f8:d3:9d:0e:ec:e2:58:fe:3a:6c:a0:74:f6:c6:96:
a3:db:6e:e6:f8:dd:21:51:67:5a:76:ea:ab:9d:e4:
cb:53:9b:64:52:ee:f4:65:45:bd:a2:68:60:dd:c2:
0e:05:e6:b8:f1:6d:c5:46:de:c9:a0:25:dd:58:a9:
0e:2f:12:6a:61:ca:8f:86:c5:94:e4:79:13:03:d5:
ac:e9:57:d1:b9:17:8a:da:8c:80:ce:ef:38:e4:a6:
c2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:38:62:0E:0C:15:C0:22:94:B9:4C:57:D9:90:4E:D4:82:30:BB:E4
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3c:ba:85:d9:6d:14:3b:67:84:c5:52:15:48:78:cc:dd:ad:
e6:5f:15:83:6f:0f:c9:6f:12:a8:46:8f:9d:90:72:b5:48:51:
dd:da:b7:b8:0c:af:4d:4d:3b:11:f6:22:7b:58:70:27:e4:e6:
f5:e2:cd:b5:7b:7c:b7:ec:97:ff:37:48:03:2a:ad:86:35:a3:
1a:92:de:7e:fa:92:f3:58:f3:44:4f:1b:b5:03:6d:03:bb:c6:
5c:a8:dd:b1:b7:a9:e7:8b:19:f3:60:ed:dc:2a:41:b6:06:f6:
93:20:10:74:fc:8e:01:86:e1:05:e6:f7:5b:0e:f0:4a:6b:7c:
03:21:76:ad:77:dd:b0:05:0d:f1:be:43:c7:57:77:9a:37:bb:
69:de:6d:e7:8c:5b:31:21:11:3e:f2:cc:36:0a:84:37:f4:9f:
d0:08:68:da:75:7b:c2:a0:c1:c4:3f:37:af:09:6a:21:b2:19:
98:43:54:40:91:9c:f5:3f:e2:d2:a6:81:4a:62:de:fe:a7:42:
67:af:35:9e:b3:c6:c7:7c:3c:99:af:cd:e7:9c:21:02:e4:14:
c0:30:ea:82:f9:b9:ee:91:0c:e0:04:78:e3:9e:a2:20:14:f7:
31:1e:12:c4:00:e8:3d:8d:cd:70:74:97:fb:0c:d9:d7:55:5b:
76:78:54:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:53:23 2026 by rpki-client