Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
File: 59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft (raw, json)
Hash identifier: 4I3lUEEgmXEXtP9pZc/pzWTpSo2B/nj3JBle13aXVjI=
Subject key identifier: A0:74:12:18:17:93:89:00:E1:AA:A5:4E:D7:F7:BA:B6:35:C9:5A:B8
Authority key identifier: E7:D1:9A:8F:D9:85:41:ED:89:17:0A:90:40:19:77:A4:BE:0B:EC:37
Certificate issuer: /CN=e7d19a8fd98541ed89170a90401977a4be0bec37
Certificate serial: 019D2B853C437C6F823B0C96F159B2CF1F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
Manifest number: 2D
Signing time: Thu 26 Mar 2026 19:00:45 +0000
Manifest this update: Thu 26 Mar 2026 19:00:45 +0000
Manifest next update: Fri 27 Mar 2026 19:00:45 +0000
Files and hashes: 1: 59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl (hash: kLYw2EqD7fAQgH32/gWlOU3Ej7CVRPYGppiTvcntbw8=)
2: Pzk4TDA-h9RVuxch0U3icXkl6Rw.roa (hash: oUr86fQqVuN8AdhLCsQUi45dZ5KEwK640rHZ20VyoXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:3c:43:7c:6f:82:3b:0c:96:f1:59:b2:cf:1f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d19a8fd98541ed89170a90401977a4be0bec37
Validity
Not Before: Mar 26 19:00:45 2026 GMT
Not After : Mar 27 19:00:45 2026 GMT
Subject: CN=a074121817938900e1aaa54ed7f7bab635c95ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2f:a0:d4:e1:09:ea:42:6d:16:aa:dc:de:c9:
fc:cb:56:c2:7c:e3:95:b1:ac:bb:96:73:a2:c7:3e:
bf:c6:f4:a4:92:3c:ec:17:7c:3f:b6:aa:0b:b7:ec:
8f:1e:73:8c:60:d8:5a:36:bf:50:42:aa:c5:18:b8:
25:bf:ef:1f:e1:1d:e6:07:37:e8:e1:36:24:d6:3d:
df:47:e2:50:ce:e1:ba:99:97:b9:e4:a0:b2:2f:9a:
f6:5b:b6:27:30:fb:04:c0:01:15:81:03:ec:56:4a:
78:9e:53:6b:99:f1:32:17:4a:60:f1:4f:cb:fa:2e:
c1:93:96:f3:76:da:ff:fc:8d:c1:dc:44:0d:00:11:
7f:33:c6:ce:b7:ee:67:55:56:9c:c2:5e:91:12:0a:
f0:bf:41:d9:10:0b:97:5b:9f:a5:2a:01:61:0c:71:
11:15:6c:63:cf:19:c3:37:7c:e7:7d:a9:e1:c1:d8:
63:e7:06:3d:83:66:f3:8f:95:a0:81:ff:97:4a:c9:
58:60:77:b8:2e:3a:c9:f5:2e:4f:e6:c4:89:09:d0:
6b:64:fa:96:49:0c:92:1a:1f:b9:3a:8b:24:99:c2:
da:e1:00:18:06:4e:2c:fc:f7:93:fd:c6:89:55:a4:
2c:f0:87:3b:99:c4:2e:04:3c:4e:fd:5b:a4:b5:eb:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:74:12:18:17:93:89:00:E1:AA:A5:4E:D7:F7:BA:B6:35:C9:5A:B8
X509v3 Authority Key Identifier:
keyid:E7:D1:9A:8F:D9:85:41:ED:89:17:0A:90:40:19:77:A4:BE:0B:EC:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:97:94:91:03:f9:e5:1e:26:37:15:51:22:66:d2:00:02:f3:
00:64:d8:da:26:9c:98:57:01:45:ab:2d:46:5d:9f:8d:5f:80:
47:e6:f0:3a:ad:c6:59:f8:cc:fc:59:5d:1f:1e:29:16:3a:04:
c9:57:9f:26:2a:80:d5:60:f1:27:25:4c:47:ae:55:65:4b:33:
24:e4:0e:10:07:21:02:87:b6:fa:f4:0b:6d:17:ec:0b:4e:23:
9f:6b:4e:c8:18:1c:51:1c:37:94:d7:3c:d5:1f:03:7a:49:50:
6d:10:cb:9d:6d:fc:c3:4c:06:78:af:e5:c7:7b:bf:58:16:61:
b6:62:96:a8:3e:3d:d9:57:9b:76:ad:e8:f1:98:fc:80:5e:7f:
4e:61:f9:aa:21:98:21:dc:0d:c5:f8:7b:13:29:38:70:5a:53:
0f:d7:d8:cf:54:74:c8:fc:90:ed:c8:7c:8c:00:3c:d5:3c:4d:
c5:79:dc:2d:9b:bb:b6:5d:be:59:cf:f4:0f:b5:2c:6a:72:d4:
14:ee:7e:1e:06:f9:75:47:6a:55:7d:e9:eb:0b:d5:f9:0b:e7:
28:73:ae:a5:14:5e:bc:db:21:b9:93:87:b5:50:c4:7e:96:d4:
5d:01:75:0c:8b:6d:90:cd:6a:ae:96:29:bb:14:fc:71:6b:6b:
ad:34:34:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:13:11 2026 by rpki-client