
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
File: 59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft (raw, json)
Hash identifier: rHuz0A5HjVASZdFrkteDuUHOgaz/+SNcn5LiiU80+wg=
Subject key identifier: 22:2A:73:DC:1C:EB:B5:CA:BC:AC:BD:33:03:EC:CF:B4:7E:2B:09:43
Authority key identifier: E7:D1:9A:8F:D9:85:41:ED:89:17:0A:90:40:19:77:A4:BE:0B:EC:37
Certificate issuer: /CN=e7d19a8fd98541ed89170a90401977a4be0bec37
Certificate serial: 019E1CEBF64D5E46964AB5CEFC4FE14F60E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
Manifest number: AA
Signing time: Tue 12 May 2026 16:01:26 +0000
Manifest this update: Tue 12 May 2026 16:01:26 +0000
Manifest next update: Wed 13 May 2026 16:01:26 +0000
Files and hashes: 1: 59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl (hash: 1qtABQCwO30DJW79oWY/1xNk8NlmMjL4wFtbM/fwmQI=)
2: Pzk4TDA-h9RVuxch0U3icXkl6Rw.roa (hash: oUr86fQqVuN8AdhLCsQUi45dZ5KEwK640rHZ20VyoXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:f6:4d:5e:46:96:4a:b5:ce:fc:4f:e1:4f:60:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d19a8fd98541ed89170a90401977a4be0bec37
Validity
Not Before: May 12 16:01:26 2026 GMT
Not After : May 13 16:01:26 2026 GMT
Subject: CN=222a73dc1cebb5cabcacbd3303eccfb47e2b0943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:44:25:ad:1e:18:53:b1:56:19:80:98:c9:32:
f8:b4:2c:65:87:3d:cc:80:a0:aa:12:ee:06:fe:8c:
8d:70:52:c8:d0:87:3a:53:b3:a8:fa:0d:3a:b4:24:
4d:57:a6:24:70:d4:98:23:07:4f:5e:8d:0a:b9:8a:
4b:99:cb:41:d6:e8:5a:b0:a2:69:1e:1e:4e:f7:cd:
22:d9:aa:86:49:9c:9f:c0:b3:1d:ea:cf:8f:dc:2e:
ec:11:20:37:0a:5f:b6:f8:df:31:17:50:5c:b7:3c:
b6:50:59:f5:77:1d:8e:6d:37:30:48:df:56:f5:66:
4d:38:34:0c:aa:df:67:8b:d4:d0:db:e9:48:7c:ff:
41:80:53:69:40:cd:28:8c:b6:7b:64:8f:68:72:bf:
a9:7d:2d:a2:67:f1:df:52:ed:0d:5c:17:5c:94:d4:
eb:ab:06:8e:09:25:65:8c:4a:bf:d0:a5:8c:46:4c:
d2:cc:2c:4d:3c:8f:35:28:47:3a:30:35:ab:35:e6:
b0:06:fd:85:9c:53:31:53:a8:f6:90:7f:74:bd:8d:
7c:cf:6a:6c:8f:4f:50:e6:82:6a:ac:3a:61:ae:4f:
2b:9e:af:01:94:45:21:bc:63:86:1b:67:9f:1a:03:
2d:29:e2:1a:55:68:5e:4e:7d:bb:59:34:50:6f:e2:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2A:73:DC:1C:EB:B5:CA:BC:AC:BD:33:03:EC:CF:B4:7E:2B:09:43
X509v3 Authority Key Identifier:
keyid:E7:D1:9A:8F:D9:85:41:ED:89:17:0A:90:40:19:77:A4:BE:0B:EC:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:80:69:a2:da:ed:f1:a2:51:c9:3a:47:05:c3:3b:16:f7:61:
fc:7e:7d:11:c5:78:35:76:12:e8:cd:c0:7d:ec:f9:3d:a6:85:
d3:09:e0:5c:7c:88:99:73:c9:84:c6:8c:a7:29:e8:1a:10:c7:
35:f1:7d:dc:4d:28:f6:82:5f:a7:93:f2:c0:cb:48:5a:88:e5:
25:87:3d:96:2b:26:bb:08:4c:f7:9e:be:d8:c2:d3:bb:f2:8c:
04:e6:a8:15:9d:51:88:00:f3:f4:ec:08:39:d0:01:f4:65:e4:
7d:2d:3a:42:46:0d:30:5e:52:32:65:4a:61:04:89:67:6d:e2:
fc:84:c6:b7:2a:6e:e1:13:5b:51:9a:92:45:fa:4c:74:65:85:
0e:6e:fe:a6:58:da:19:8b:a8:ff:5b:46:90:5a:eb:64:ab:4f:
07:4e:66:26:09:8b:d4:94:8c:5c:a4:be:3b:b0:c9:79:0b:5d:
fa:3e:32:64:cc:58:a6:c9:b4:bf:cd:fb:ea:33:ef:7a:d4:56:
99:a0:54:0b:2c:a1:78:7f:f1:19:25:02:42:11:3c:4b:3e:13:
64:e4:25:bf:66:89:52:ac:e9:9b:65:d1:7c:af:19:7a:64:6a:
aa:90:3f:c0:61:16:9e:14:b2:ab:f0:61:73:b6:c3:81:67:1f:
f1:38:64:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c6/ZNXkaWSrXO/E/hT2DkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZDE5YThmZDk4NTQxZWQ4OTE3MGE5MDQwMTk3N2E0YmUw
YmVjMzcwHhcNMjYwNTEyMTYwMTI2WhcNMjYwNTEzMTYwMTI2WjAzMTEwLwYDVQQD
EygyMjJhNzNkYzFjZWJiNWNhYmNhY2JkMzMwM2VjY2ZiNDdlMmIwOTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkQlrR4YU7FWGYCYyTL4tCxlhz3M
gKCqEu4G/oyNcFLI0Ic6U7Oo+g06tCRNV6YkcNSYIwdPXo0KuYpLmctB1uhasKJp
Hh5O980i2aqGSZyfwLMd6s+P3C7sESA3Cl+2+N8xF1Bctzy2UFn1dx2ObTcwSN9W
9WZNODQMqt9ni9TQ2+lIfP9BgFNpQM0ojLZ7ZI9ocr+pfS2iZ/HfUu0NXBdclNTr
qwaOCSVljEq/0KWMRkzSzCxNPI81KEc6MDWrNeawBv2FnFMxU6j2kH90vY18z2ps
j09Q5oJqrDphrk8rnq8BlEUhvGOGG2efGgMtKeIaVWheTn27WTRQb+LnKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIqc9wc67XKvKy9MwPsz7R+KwlDMB8GA1UdIwQY
MBaAFOfRmo/ZhUHtiRcKkEAZd6S+C+w3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTlHYWo5bUZRZTJKRndxUVFCbDNwTDRMN0RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lNjJkYTMtYmM0Zi00N2IwLWJjOWYt
YjQyYTQxOGIzMDM2LzEvNTlHYWo5bUZRZTJKRndxUVFCbDNwTDRMN0RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9lNjJkYTMtYmM0Zi00N2IwLWJjOWYtYjQyYTQxOGIzMDM2
LzEvNTlHYWo5bUZRZTJKRndxUVFCbDNwTDRMN0RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoBpotrt
8aJRyTpHBcM7Fvdh/H59EcV4NXYS6M3Afez5PaaF0wngXHyImXPJhMaMpynoGhDH
NfF93E0o9oJfp5PywMtIWojlJYc9lismuwhM956+2MLTu/KMBOaoFZ1RiADz9OwI
OdAB9GXkfS06QkYNMF5SMmVKYQSJZ23i/ITGtypu4RNbUZqSRfpMdGWFDm7+plja
GYuo/1tGkFrrZKtPB05mJgmL1JSMXKS+O7DJeQtd+j4yZMxYpsm0v8376jPvetRW
maBUCyyheH/xGSUCQhE8Sz4TZOQlv2aJUqzpm2XRfK8ZemRqqpA/wGEWnhSyq/Bh
c7bDgWcf8Thkjw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:31:47 2026 by rpki-client