Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: 5KYiL94QLS7AdjJKINd6BrGmvoGsvUSz7Pt2h8dNTF8=
Subject key identifier: 65:8A:14:57:70:5B:DF:41:7D:8A:D1:9B:7E:B7:91:0B:E6:57:45:47
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 019D2772B2678EF381E33B651C4EF0346404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 06DC
Signing time: Thu 26 Mar 2026 00:02:01 +0000
Manifest this update: Thu 26 Mar 2026 00:02:01 +0000
Manifest next update: Fri 27 Mar 2026 00:02:01 +0000
Files and hashes: 1: 1-hMzdQcNiHlC1ILPCSFeyzc3V18.roa (hash: pQ5b3SKsH66K13eGB0zI0xg6+iC58sAtCToDI1E0I1c=)
2: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (hash: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo=)
3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: IsiAO/EWcAT0D4s/eeikIDl/w22j5HEuHQ5j7i+jNc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b2:67:8e:f3:81:e3:3b:65:1c:4e:f0:34:64:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Mar 26 00:02:01 2026 GMT
Not After : Mar 27 00:02:01 2026 GMT
Subject: CN=658a1457705bdf417d8ad19b7eb7910be6574547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:84:eb:c0:cb:c4:b3:1a:7c:68:0f:c3:37:1d:
e7:26:fa:db:1d:48:7d:8a:07:7f:74:67:9c:c5:ee:
d0:3c:65:03:d7:67:1a:c1:41:8d:bc:63:8b:7a:df:
40:d9:df:76:62:39:d7:55:6a:69:60:7f:bd:0d:c6:
b5:22:73:c3:6d:bb:76:86:ae:6e:95:33:0b:6a:67:
87:25:a2:42:35:b5:59:a5:f6:a0:f8:3f:d9:d6:34:
4e:cf:a8:de:ae:82:3c:b3:3e:38:6b:a3:e7:f1:2d:
66:e3:fb:4a:49:c1:d1:92:8b:68:eb:77:b9:ca:a6:
02:f0:73:85:bd:5b:24:2e:96:75:c5:1b:05:55:25:
76:85:06:31:53:5c:76:a0:76:46:a7:4b:13:1d:c7:
e9:5d:e4:26:af:80:5c:ee:7f:11:58:cf:8f:8c:cd:
e1:22:76:df:cc:82:b6:35:8e:5c:7d:66:ef:d3:b4:
e7:b7:9e:db:d7:95:21:f1:9d:4c:2c:2d:36:a8:55:
ca:f7:30:fb:aa:c0:24:b4:4b:bf:3a:ec:ba:c7:7a:
89:12:68:2e:c7:ab:6d:70:2d:11:01:cd:d2:a8:8a:
18:42:93:a1:b0:57:d3:64:9c:19:38:c4:5c:61:15:
b4:a0:35:c8:ad:22:62:9d:e8:f4:fc:14:1c:d1:27:
99:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8A:14:57:70:5B:DF:41:7D:8A:D1:9B:7E:B7:91:0B:E6:57:45:47
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f1:52:03:36:14:f9:b8:e9:23:c7:e1:98:ac:82:c8:31:32:
75:84:4f:5b:f9:12:f6:af:0e:71:2b:36:c0:86:e5:6f:3b:13:
88:99:32:35:f1:f6:39:eb:17:17:1c:44:15:9a:87:ae:6d:01:
de:da:28:3f:e6:87:00:72:53:f8:12:f4:5e:7f:71:37:7f:52:
78:c1:16:46:7e:62:81:6d:b1:63:46:93:e8:f1:b6:c9:05:a6:
fb:b5:f5:19:cd:42:d9:08:10:d4:b0:e6:0a:24:ca:36:e3:41:
f1:56:c9:42:7f:2b:01:e4:1a:2d:16:36:0a:9d:a3:a9:2f:41:
d7:9d:8b:7d:2c:28:2b:7b:42:a3:33:5a:5d:a2:b9:c7:ff:9a:
11:2b:e3:3b:3b:b9:af:ae:7e:f1:77:ba:c1:2f:17:48:3f:49:
f4:b8:76:4c:2d:62:9f:09:fb:7f:82:82:84:ba:f1:64:2e:91:
56:f1:43:5d:c2:c7:4a:3f:3a:b1:8b:bf:6c:28:16:f7:d3:5f:
45:15:ae:50:c8:d9:23:e4:28:cb:33:87:71:98:66:fc:af:5b:
d3:7f:23:91:30:f1:b5:27:a7:91:b7:f7:bb:76:31:14:94:1c:
93:e1:f8:fe:23:3e:01:5d:0f:39:d7:91:ef:b5:51:fc:25:5a:
f8:a7:95:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:57 2026 by rpki-client