Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
File: k059UV3emgPC3Ic4mi_KTn1YxOw.mft (raw, json)
Hash identifier: 31s3Nokt+m9oocAu9su0SLyfWakoV8iX/P027BC5deI=
Subject key identifier: DA:CF:7D:86:7A:42:32:45:CE:13:E1:42:24:4E:DA:EE:F5:7E:69:B4
Authority key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
Certificate issuer: /CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Certificate serial: 019D27A89CBF890B370A501020C90AF4EADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
Manifest number: 1581
Signing time: Thu 26 Mar 2026 01:00:54 +0000
Manifest this update: Thu 26 Mar 2026 01:00:54 +0000
Manifest next update: Fri 27 Mar 2026 01:00:54 +0000
Files and hashes: 1: 8C0-ccpIqHmAeIjDW496VrjvKOE.roa (hash: MxDBkMG/iI6Rw/citiI0TMMCR7WPdW1yRCJFeLdpPMQ=)
2: k059UV3emgPC3Ic4mi_KTn1YxOw.crl (hash: AQjMQ0iotqdh9Rbcq2DNvIhDmvW+0d2seJB+YFUwyWY=)
3: lzJxr3OaH_yk9VA1VyatZwJOBt8.roa (hash: 6DTksgX0M5lhtZAJh3VGJo/0CDrM2xhsttRRqVDddYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:9c:bf:89:0b:37:0a:50:10:20:c9:0a:f4:ea:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Validity
Not Before: Mar 26 01:00:54 2026 GMT
Not After : Mar 27 01:00:54 2026 GMT
Subject: CN=dacf7d867a423245ce13e142244edaeef57e69b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:32:ba:89:c1:c8:dc:52:63:fa:54:52:6f:ac:
91:fa:6d:6f:d0:ba:a4:89:19:09:5b:aa:26:0e:aa:
63:4b:ff:e0:83:c1:cf:bc:32:8e:bc:06:29:80:9c:
49:ab:34:67:ed:3c:07:8f:b7:1f:f2:51:49:a4:cc:
9c:cb:a9:42:9a:ae:3d:35:25:4e:91:9e:da:fe:dd:
21:1d:3c:07:ab:32:7f:03:7f:b3:c6:04:49:6f:4e:
1d:13:4a:fd:17:98:b6:33:ee:99:e5:07:4f:b0:c2:
46:31:16:21:44:7f:fc:49:b0:43:a9:74:e5:7f:10:
e9:fc:bd:b9:86:c4:1e:60:a8:30:ec:ab:ac:6f:91:
76:83:34:9d:4e:4f:3a:b0:06:82:df:96:2e:c1:ea:
d3:9e:6a:17:b0:60:aa:86:71:9c:2c:36:d2:02:24:
b2:fd:44:29:d3:27:19:5f:7f:a0:de:72:5b:0b:94:
e0:b8:de:08:c0:79:bc:70:f4:09:79:07:54:04:52:
5c:ad:ff:50:79:a0:84:ff:c9:35:64:62:91:55:28:
77:d4:5d:97:e8:05:15:bb:9e:1f:e7:46:7c:be:5e:
26:bf:5e:f7:ed:49:09:d4:b9:a4:c6:22:f8:1d:19:
17:82:31:5c:b2:f7:40:ea:0e:18:ab:cb:44:88:fa:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CF:7D:86:7A:42:32:45:CE:13:E1:42:24:4E:DA:EE:F5:7E:69:B4
X509v3 Authority Key Identifier:
keyid:93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e6:ff:90:9a:67:cd:e5:1f:19:4c:43:7e:a2:02:03:b4:c7:
34:fe:cc:54:af:7d:7d:23:d8:f7:7d:62:b2:d5:e4:ad:79:3d:
17:19:9c:2a:7c:63:0a:8d:07:55:46:99:f9:ac:b2:8a:df:30:
af:00:42:68:32:40:c0:2f:77:a1:1e:14:f0:e3:6e:dd:19:b3:
6e:92:21:c3:12:bb:9d:73:89:b1:35:c8:83:b6:a9:ec:7d:24:
38:8b:11:b6:16:7b:ac:28:77:3d:9c:3b:9f:94:31:eb:cb:08:
2e:07:54:c8:aa:72:52:e8:65:6e:e1:1e:01:19:9b:ed:4a:ff:
ed:6a:c3:6b:6d:f1:ea:44:9f:68:b8:1a:29:17:6f:32:9f:8d:
3b:03:5d:75:91:3c:fa:2a:05:ba:4f:0b:47:8d:15:e8:31:cf:
2c:b4:cb:52:0d:71:76:9d:12:8c:38:6a:b1:85:3d:57:0c:c9:
a2:c3:2b:bb:6f:af:11:be:3d:0d:65:10:15:32:8d:e3:13:0b:
dd:89:0f:d2:41:2c:86:dc:2c:5c:55:15:d1:e7:b7:3b:45:4c:
69:db:b3:4e:53:80:7f:c5:d1:a2:06:d7:d6:23:40:11:a8:72:
d7:95:1f:c8:45:55:f0:cc:2f:4d:74:de:56:08:76:d7:94:1d:
fb:bb:29:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:22 2026 by rpki-client