Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
File: 59PkY_EcytBV0WYuAIwqlPQt6d4.mft (raw, json)
Hash identifier: QWAeYZdR1nuhB4Cu2v8X5LO7pFor+/RV6sILrk0EO/M=
Subject key identifier: 10:48:C6:8B:B8:84:0E:F2:B3:F5:FA:68:DA:84:C3:D9:E6:68:D9:67
Authority key identifier: E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
Certificate issuer: /CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Certificate serial: 019D27046EF0491E7127BA346E6BC3710461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
Manifest number: 16CB
Signing time: Wed 25 Mar 2026 22:01:35 +0000
Manifest this update: Wed 25 Mar 2026 22:01:35 +0000
Manifest next update: Thu 26 Mar 2026 22:01:35 +0000
Files and hashes: 1: 59PkY_EcytBV0WYuAIwqlPQt6d4.crl (hash: QBcd7zeV6cTyj2esj0Ca+F1JlUmFwm/Reoz9y/jJu6A=)
2: KMWFIlQC6ib8yekqMVKEQLoSRCk.roa (hash: 29tTxMBE8uiY+In8DyCrSX4qq9Iv9YNEkKYRZQmc7CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:6e:f0:49:1e:71:27:ba:34:6e:6b:c3:71:04:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Validity
Not Before: Mar 25 22:01:35 2026 GMT
Not After : Mar 26 22:01:35 2026 GMT
Subject: CN=1048c68bb8840ef2b3f5fa68da84c3d9e668d967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:7d:ed:e1:c0:ed:5f:8d:f9:ba:07:bb:8c:
4d:c3:16:a4:41:41:0d:b8:9f:5c:89:91:f1:7d:55:
4c:e5:6a:08:8e:4d:0f:c2:62:12:40:cc:be:b6:ef:
9f:c5:78:a7:37:f2:c0:9d:00:d9:09:f8:2a:61:fd:
b3:f5:c9:56:af:28:3b:a4:50:28:2e:d6:98:a8:d6:
8a:21:05:11:2f:0a:e1:89:58:66:a5:dd:af:7f:fc:
f1:93:50:d0:9e:4a:1b:40:f4:f5:de:24:21:6c:00:
e6:cc:ff:e8:ee:67:93:f1:53:a2:2e:b5:9f:34:9a:
f2:de:da:47:8f:f0:b2:21:e7:1f:dc:af:83:bf:7e:
7b:28:56:67:aa:56:56:e3:d2:0b:56:d8:00:fd:01:
42:90:e0:27:c2:61:3e:5a:d8:51:5b:53:c8:63:bd:
a7:fe:77:a5:bf:33:c9:00:ee:69:cf:ec:35:e1:65:
1c:68:38:39:12:63:c5:49:6b:ae:7a:e9:51:5e:e1:
a0:9d:54:34:41:9b:6c:88:a5:00:64:1c:34:e6:85:
f6:4d:68:29:d7:0a:cf:4d:4e:ae:75:1a:70:c3:98:
37:5b:47:7d:a2:67:1c:a9:0c:69:ee:ca:2f:8f:2c:
89:98:45:21:dc:65:6c:45:c5:1f:27:56:b4:dd:a5:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:48:C6:8B:B8:84:0E:F2:B3:F5:FA:68:DA:84:C3:D9:E6:68:D9:67
X509v3 Authority Key Identifier:
keyid:E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9d:ff:65:6a:10:81:a6:76:d8:cf:1a:bc:68:89:0e:68:98:
cb:50:8e:8d:e8:35:02:9b:63:57:4f:24:fa:44:25:14:80:b5:
7f:2c:ca:3f:f0:7e:c9:71:b8:98:c6:65:b0:0a:c7:4b:47:5d:
b9:b6:4e:b8:8e:d0:fb:d8:62:d0:f0:1e:60:1f:4a:cf:95:24:
7d:68:02:99:74:ac:22:a3:4f:60:ca:6f:52:f1:23:e4:86:b1:
d3:31:6d:88:b6:2a:62:c0:37:df:ee:b0:08:f8:e2:6f:d6:89:
d3:aa:7d:0c:6d:3a:e8:62:14:ee:2b:e2:15:fc:a8:0d:a3:e3:
f0:53:2d:58:58:b2:49:91:e1:a2:07:2b:48:3a:03:28:4c:b8:
cf:ca:6e:26:2d:53:c2:6b:77:85:f3:f0:2b:33:44:9c:a3:12:
be:ac:cc:da:97:2f:75:4f:cf:02:6a:1e:63:76:1c:af:33:1d:
cc:c9:ce:34:94:1d:0b:23:b7:12:6a:8f:2e:24:ab:38:d0:dd:
a0:7a:29:09:c4:b9:72:9b:25:5e:3b:df:43:dc:9b:72:12:c1:
8e:ac:26:c5:9e:f5:b5:d1:5e:7c:f1:cb:bb:67:20:04:0d:36:
1d:51:33:2a:c0:d1:ab:1b:ff:02:75:65:f3:4b:51:f7:ae:5e:
16:a0:54:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:47:29 2026 by rpki-client