Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: x1TNuj2Vpzc3qmh9rriKag7FUZTmFMQJatY58P3U9zM=
Subject key identifier: 5D:61:90:CC:E1:C9:0D:7C:98:0D:BA:1E:1D:3F:16:55:95:97:AF:E8
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 019E1EA2D39AB00B56490106D16EEDEAE566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 075C
Signing time: Wed 13 May 2026 00:00:47 +0000
Manifest this update: Wed 13 May 2026 00:00:47 +0000
Manifest next update: Thu 14 May 2026 00:00:47 +0000
Files and hashes: 1: 1-hMzdQcNiHlC1ILPCSFeyzc3V18.roa (hash: pQ5b3SKsH66K13eGB0zI0xg6+iC58sAtCToDI1E0I1c=)
2: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (hash: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo=)
3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: tHyd9Os2aHLtAEofve22/We+BMzct/vp2nf77jRx/1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:d3:9a:b0:0b:56:49:01:06:d1:6e:ed:ea:e5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: May 13 00:00:47 2026 GMT
Not After : May 14 00:00:47 2026 GMT
Subject: CN=5d6190cce1c90d7c980dba1e1d3f16559597afe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2c:67:f4:30:9a:16:27:c2:ba:62:cf:9f:9c:
4c:a3:be:10:fb:f9:39:6d:5b:bf:7c:ad:ef:d8:42:
6e:78:00:e2:08:91:54:b1:14:55:03:8c:23:08:c4:
cc:59:7a:81:ea:76:7e:22:db:d4:57:40:a1:09:2e:
02:32:1e:5b:b4:3b:6a:82:6f:0f:8a:b0:43:c9:02:
f7:d5:cc:ce:50:33:a0:fe:a7:70:f5:ef:74:29:46:
df:a3:9d:39:9e:76:6d:d1:9b:cb:a8:63:9e:ec:c8:
9b:14:a2:34:ec:58:0a:53:52:61:92:1a:28:18:06:
34:51:dc:a9:b3:bc:15:18:b2:54:22:a6:11:2c:d0:
53:ed:ee:f9:e4:a3:9e:fd:c1:ac:99:77:94:d2:f1:
75:3c:e9:76:67:ba:0e:57:da:37:d1:1a:cf:76:0f:
d2:0d:f6:fb:06:4c:38:1e:50:32:d5:c4:16:43:ff:
96:ac:bd:4b:53:6d:60:4c:63:f3:22:e4:c3:cc:f2:
35:6e:8b:18:07:e5:71:e4:25:ba:dc:54:37:65:b1:
b1:b0:77:bd:5d:7a:39:e5:b2:ab:66:80:83:ce:58:
72:b7:4c:7e:cf:39:e0:d3:e6:ef:5a:41:d6:83:d4:
2c:54:b6:ab:27:c1:20:e1:26:07:d5:e1:56:5b:fe:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:61:90:CC:E1:C9:0D:7C:98:0D:BA:1E:1D:3F:16:55:95:97:AF:E8
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:82:b9:8d:30:74:9c:10:c2:38:4a:c6:ca:65:3b:a1:2c:fe:
11:fb:79:ac:66:00:4e:19:3a:09:3f:08:d5:9a:72:58:40:a7:
a2:3f:7d:3a:51:83:71:6b:06:b5:09:50:8d:bb:f2:95:8d:0b:
a6:ba:49:25:67:c4:40:3d:99:d7:09:25:0a:91:86:00:00:70:
7e:9b:b8:ed:a4:36:0a:7d:ad:21:ac:5a:10:c3:ea:04:06:68:
5e:cc:b8:a2:dc:a6:04:a1:56:fd:f2:8c:b3:46:ba:c2:92:f1:
65:48:80:1a:b9:7d:37:76:83:15:16:c1:38:97:7b:79:10:30:
05:a5:79:1d:ba:1d:2f:a7:db:e9:60:ab:6b:02:fd:da:83:b0:
f6:43:02:cd:79:21:c2:7a:c2:85:2e:ae:62:01:bc:8f:de:ac:
eb:1d:bc:4a:aa:55:eb:5d:11:67:68:c7:b2:9c:4c:b0:85:ed:
20:04:2f:e8:c8:fc:5a:58:4b:63:f3:8e:c1:ba:6a:05:50:13:
22:25:48:43:2a:be:cf:e0:aa:21:07:07:93:77:61:91:58:53:
26:c1:db:e9:74:c6:c5:78:c1:d1:ff:c7:70:96:6b:6a:a7:1b:
8e:fa:6d:a0:a3:9b:69:d8:bb:e8:b7:80:23:dc:f3:14:bb:2d:
59:c6:88:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eotOasAtWSQEG0W7t6uVmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MmU3ZDg3OTIyMTI5ZGY5MGM0ODcwZGEyYTc3Mzg0MDQ3
MjQ4NTgwHhcNMjYwNTEzMDAwMDQ3WhcNMjYwNTE0MDAwMDQ3WjAzMTEwLwYDVQQD
Eyg1ZDYxOTBjY2UxYzkwZDdjOTgwZGJhMWUxZDNmMTY1NTk1OTdhZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCxn9DCaFifCumLPn5xMo74Q+/k5
bVu/fK3v2EJueADiCJFUsRRVA4wjCMTMWXqB6nZ+ItvUV0ChCS4CMh5btDtqgm8P
irBDyQL31czOUDOg/qdw9e90KUbfo505nnZt0ZvLqGOe7MibFKI07FgKU1Jhkhoo
GAY0Udyps7wVGLJUIqYRLNBT7e755KOe/cGsmXeU0vF1POl2Z7oOV9o30RrPdg/S
Dfb7Bkw4HlAy1cQWQ/+WrL1LU21gTGPzIuTDzPI1bosYB+Vx5CW63FQ3ZbGxsHe9
XXo55bKrZoCDzlhyt0x+zzng0+bvWkHWg9QsVLarJ8Eg4SYH1eFWW/5OKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1hkMzhyQ18mA26Hh0/FlWVl6/oMB8GA1UdIwQY
MBaAFEUufYeSISnfkMSHDaKnc4QEckhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80ODc5NjItODU4OC00ZjBhLWJiN2Qt
YWFhOGQzYTk0MGFjLzEvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80ODc5NjItODU4OC00ZjBhLWJiN2QtYWFhOGQzYTk0MGFj
LzEvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIK5jTB0
nBDCOErGymU7oSz+Eft5rGYAThk6CT8I1ZpyWECnoj99OlGDcWsGtQlQjbvylY0L
prpJJWfEQD2Z1wklCpGGAABwfpu47aQ2Cn2tIaxaEMPqBAZoXsy4otymBKFW/fKM
s0a6wpLxZUiAGrl9N3aDFRbBOJd7eRAwBaV5HbodL6fb6WCrawL92oOw9kMCzXkh
wnrChS6uYgG8j96s6x28SqpV610RZ2jHspxMsIXtIAQv6Mj8WlhLY/OOwbpqBVAT
IiVIQyq+z+CqIQcHk3dhkVhTJsHb6XTGxXjB0f/HcJZraqcbjvptoKObadi76LeA
I9zzFLstWcaINQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:35:09 2026 by rpki-client