Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft
File: 59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft (raw, json)
Hash identifier: +XCbwJnToyaGJenD1rNNkG1JWiAvwrn3vTYCjYeNdV0=
Subject key identifier: CF:97:1D:1E:E0:46:23:7E:1F:9C:0F:07:35:84:CE:45:E3:93:01:EA
Authority key identifier: 59:90:6C:43:E7:E7:D1:04:C7:C8:42:32:EF:2B:9C:DD:BD:72:90:A4
Certificate issuer: /CN=59906c43e7e7d104c7c84232ef2b9cddbd7290a4
Certificate serial: 1DDE0089101A140CFA1A3F3FC3B627D53ECA64D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZBsQ-fn0QTHyEIy7yuc3b1ykKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft
Manifest number: CC
Signing time: Wed 25 Mar 2026 10:09:25 +0000
Manifest this update: Wed 25 Mar 2026 10:04:25 +0000
Manifest next update: Thu 26 Mar 2026 12:14:25 +0000
Files and hashes: 1: 59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.crl (hash: St4g4KSTM4u319MuM5jRKySyKoUIGuW7TSVzwI64F+E=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.crl
rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZBsQ-fn0QTHyEIy7yuc3b1ykKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:14:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:de:00:89:10:1a:14:0c:fa:1a:3f:3f:c3:b6:27:d5:3e:ca:64:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59906c43e7e7d104c7c84232ef2b9cddbd7290a4
Validity
Not Before: Mar 25 10:04:25 2026 GMT
Not After : Mar 26 12:14:25 2026 GMT
Subject: CN=CF971D1EE046237E1F9C0F073584CE45E39301EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:4b:4f:4a:17:a4:92:ce:ca:ad:f4:2d:4f:
78:44:c5:d1:53:21:2d:4a:4d:2b:4b:d9:b9:13:78:
9c:7c:3e:e9:38:b0:f0:ef:48:a5:d6:dd:f0:97:89:
dd:d7:d2:1f:23:fc:39:db:99:a8:d4:50:12:11:cf:
52:3b:98:73:a3:33:05:41:51:4d:7f:d1:f9:8c:e9:
fc:09:a8:fd:f5:ac:29:c7:d9:00:8e:5e:aa:ae:b5:
4a:b3:01:af:39:25:cc:d4:5a:9a:3b:e1:65:72:ee:
cb:78:40:9f:67:c5:29:a2:2f:7e:8f:97:27:49:d7:
47:7b:97:95:ba:7a:d5:ea:7a:67:62:4c:c1:cd:28:
dd:ca:19:f6:34:55:7d:0c:6c:cf:e0:8b:55:86:30:
2e:d8:6e:ce:61:49:a1:54:9d:ce:2f:e6:07:76:e6:
19:cb:3d:f8:56:6d:d7:15:09:92:7c:c5:69:b1:0d:
a0:b9:c0:bd:be:db:b9:31:95:5f:91:f8:cd:4a:c2:
bb:bc:7c:85:b2:eb:b3:f3:79:38:53:20:e8:4a:13:
b2:a1:90:54:d9:12:e8:20:7b:b1:f3:58:48:00:4f:
7b:10:2f:89:d0:58:6f:74:68:c2:43:23:ec:da:bd:
4b:49:b4:69:44:3c:0c:db:79:5f:59:8f:81:50:93:
be:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:97:1D:1E:E0:46:23:7E:1F:9C:0F:07:35:84:CE:45:E3:93:01:EA
X509v3 Authority Key Identifier:
keyid:59:90:6C:43:E7:E7:D1:04:C7:C8:42:32:EF:2B:9C:DD:BD:72:90:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZBsQ-fn0QTHyEIy7yuc3b1ykKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9f:5f:02:80:58:08:65:ae:ce:35:ea:1b:6e:72:2f:2c:14:
dc:a4:d3:37:a6:f4:3f:d2:c8:eb:af:60:0a:5b:f8:49:8e:32:
fd:45:55:cf:c3:62:12:c9:2d:ee:cc:da:6b:2b:31:10:83:55:
dc:0d:b3:49:6f:ed:9e:ea:35:bf:12:80:2f:20:13:99:0a:16:
e2:44:b8:a4:e6:4a:8f:85:9f:74:06:85:d5:47:86:64:15:0d:
72:6d:db:d2:c5:bf:d7:86:49:94:5f:03:51:bd:9d:33:85:71:
c2:51:87:c6:7b:d3:fb:43:be:86:c6:fb:40:5f:0d:c6:3f:4f:
fc:0b:91:3b:a0:ce:9b:24:db:3c:28:76:de:23:c7:22:fa:41:
d2:71:97:99:1f:02:1c:90:47:80:40:32:bc:73:22:13:83:32:
03:09:7b:34:0b:37:0f:6c:e2:0a:e0:51:4c:2e:2f:3e:c1:ca:
a2:8f:eb:bd:bf:4d:6e:27:55:b4:37:52:cb:64:92:97:77:ea:
92:6f:1c:3e:f7:9d:40:17:53:7c:21:91:69:cb:32:f7:6b:5b:
8f:ee:65:ab:f7:7a:fb:59:fa:ee:40:af:9d:42:41:bb:1b:d5:
4e:cb:ca:3c:b9:d6:1c:d9:ff:8a:92:95:47:12:0f:6e:ac:67:
8e:17:0d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:22 2026 by rpki-client