Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
File: 59aKnrhqgmTp3cMSKEm4DMNC9dw.mft (raw, json)
Hash identifier: Z//KfpCZXtQ0wzsletnYWaDKrVrPD/Cl6+qrQxcy1mA=
Subject key identifier: 5B:4F:11:42:BA:7A:B0:40:16:24:5F:42:15:2B:14:02:90:30:26:88
Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
Certificate issuer: /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Certificate serial: 019F927F5F14E643F89FBB5F1144D1ED3211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
Manifest number: 16E1
Signing time: Fri 24 Jul 2026 05:00:48 +0000
Manifest this update: Fri 24 Jul 2026 05:00:48 +0000
Manifest next update: Sat 25 Jul 2026 05:00:48 +0000
Files and hashes: 1: 59aKnrhqgmTp3cMSKEm4DMNC9dw.crl (hash: amNG+tj8f29tvEcGyACeh6KdjhkPb9T6vcCq58hu9Qk=)
2: 5D_6V1jfsiELpRkCmEhi7rdCKRg.roa (hash: /d0M4c6YWxQ0V8Mp5iLPG6sVPAc4eaY42hLJi+0oXvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:5f:14:e6:43:f8:9f:bb:5f:11:44:d1:ed:32:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Validity
Not Before: Jul 24 05:00:48 2026 GMT
Not After : Jul 25 05:00:48 2026 GMT
Subject: CN=5b4f1142ba7ab04016245f42152b140290302688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:18:b7:ab:5e:a7:4b:2b:62:2a:98:d3:88:
f7:d2:4b:a4:89:86:49:21:70:bc:26:b3:bb:0a:ab:
ed:1b:6f:39:3f:66:ba:19:97:b1:c1:0d:02:eb:79:
ed:0a:49:b7:b4:ac:9d:96:8c:82:be:9f:6c:a7:d8:
9a:8b:04:bf:48:0e:1a:d4:bc:ec:54:88:97:e6:72:
e5:5c:8c:a9:b0:1d:c0:3e:5a:8f:f2:9a:82:18:2e:
67:41:e5:2d:d7:bc:8f:20:54:25:43:28:bb:4b:5f:
c6:26:54:17:b2:55:ed:03:2b:ee:28:e5:8f:8c:1f:
ed:ac:12:88:0a:69:bc:83:f9:15:0a:9f:4e:1a:ec:
66:71:3e:fa:eb:69:20:ad:5d:e0:ba:74:3a:09:ff:
78:38:5d:0b:50:72:71:9a:65:c4:ae:66:4b:7d:48:
18:57:00:93:68:bf:f0:89:00:10:ff:d3:88:c8:65:
15:b7:79:db:12:09:b1:20:97:bc:64:f9:d9:b0:c3:
07:21:c7:2c:16:c1:bb:6f:1e:f2:7d:69:08:a6:d2:
e2:cd:98:0c:c3:c5:07:fe:c4:59:8a:e3:1b:57:e8:
db:52:1e:af:d3:cf:c3:79:f3:79:ba:61:40:15:5e:
78:81:db:76:be:f5:84:00:6d:58:1a:ba:ed:66:21:
01:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4F:11:42:BA:7A:B0:40:16:24:5F:42:15:2B:14:02:90:30:26:88
X509v3 Authority Key Identifier:
keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d9:d2:b5:54:d2:7a:61:8a:08:ee:03:1f:0d:41:4e:fb:3e:
59:86:d3:f6:bd:36:67:10:bc:83:22:7c:9f:d9:e8:4b:96:97:
13:b3:92:0d:e4:30:d2:f8:e6:91:17:46:51:14:7a:b2:4d:10:
f4:8b:67:18:c3:1b:b3:f2:ad:30:64:b1:06:60:97:70:e5:25:
97:e0:2c:d9:b8:fd:61:4d:a6:0c:4a:3d:5d:ac:6c:42:ec:39:
f0:b2:c5:a2:23:7b:c2:a9:2d:36:2d:66:ec:06:8c:c0:2f:65:
28:08:e3:d6:fb:ab:cd:4a:16:99:07:fd:c0:1b:f9:de:17:78:
5b:c9:92:54:2b:e3:c6:96:0d:bd:7c:a8:b9:ed:86:ab:ee:5b:
d0:09:53:ae:e3:47:da:6b:16:6f:c6:f6:c1:3a:e9:a4:ab:54:
8d:40:43:10:c6:49:4d:1d:cc:d5:52:23:67:a4:63:ef:00:fc:
ac:03:aa:de:48:a7:a7:11:4c:34:c6:52:cc:73:c8:f2:c7:da:
59:32:15:4a:ff:78:24:79:21:85:aa:4f:c9:26:7a:b7:a1:3c:
76:59:40:77:b3:db:5c:3b:eb:0f:d7:51:5c:e4:0f:39:e3:cc:
e7:46:2b:6b:d9:f3:6d:2a:e6:bd:ac:6c:09:f0:26:ab:48:e1:
29:a9:2a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:40:59 2026 by rpki-client