Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: 9KZqHVw9+aafZvJD8aBU8lW07aDU558+CEjl5LrZqXw=
Subject key identifier: 90:E9:BF:00:40:AF:59:E6:7D:48:7B:0E:26:16:60:C6:EC:18:F3:20
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 019F82D5CF4E06DA8A92140ECDDC4EEB7C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 0815
Signing time: Tue 21 Jul 2026 04:01:17 +0000
Manifest this update: Tue 21 Jul 2026 04:01:17 +0000
Manifest next update: Wed 22 Jul 2026 04:01:17 +0000
Files and hashes: 1: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (hash: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo=)
2: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: SVXoKyGfNf3MUaoXJf1fvE3H4DC4N/7fBrjW14bpgIY=)
3: btsbBPG_XDlQ3e5fMtVbLStYwh8.roa (hash: XdV1d+wt2UtCqheQtg2DA5+JgtI45RV6xN6JsyMCDQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:d5:cf:4e:06:da:8a:92:14:0e:cd:dc:4e:eb:7c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Jul 21 04:01:17 2026 GMT
Not After : Jul 22 04:01:17 2026 GMT
Subject: CN=90e9bf0040af59e67d487b0e261660c6ec18f320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:87:ed:e2:48:af:b0:69:69:96:fa:bf:2c:
1f:ba:ca:ff:71:7d:b7:91:77:d9:f8:3c:ed:21:a3:
ea:3b:8f:db:f1:5d:85:6f:05:23:f6:b3:b2:b8:53:
ac:d6:5f:31:80:21:bc:91:1c:c6:db:d9:92:3d:9f:
76:2d:0f:e6:c5:ba:6f:8e:a5:a0:31:ec:54:87:6d:
d2:b2:a3:ec:7f:2f:ca:2f:44:0a:12:d3:5c:79:c5:
9b:fd:7c:38:0e:df:b7:30:4e:ee:3c:47:cb:53:02:
fb:70:66:ef:11:8e:72:5f:d2:a3:a6:fd:2b:76:a2:
e3:aa:fe:09:ca:ec:9e:ce:fc:3b:32:ae:d1:bb:bc:
3b:56:05:b7:56:38:5b:df:d0:0c:f0:8f:43:98:96:
e1:92:cd:38:db:7c:54:52:dd:b9:33:df:dc:66:d4:
14:2f:5d:24:0f:05:3d:7c:7a:50:ab:7e:a0:be:33:
63:3d:f2:f7:3d:41:fb:6c:f4:7a:2b:92:a2:c2:44:
85:fa:ed:98:7e:90:ae:0b:ff:44:4f:63:6e:79:35:
f5:78:36:c4:66:db:08:62:fa:d4:94:e9:ec:be:c2:
6b:19:29:3d:9e:92:d8:02:84:73:d3:3c:d2:4d:a2:
34:1a:5c:c8:b5:6f:77:61:fa:df:fa:e7:71:d4:12:
82:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E9:BF:00:40:AF:59:E6:7D:48:7B:0E:26:16:60:C6:EC:18:F3:20
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5e:46:00:c9:a6:ba:3e:92:4a:41:ed:00:ca:6b:81:85:be:
6d:29:df:83:25:94:34:e4:f6:c9:cb:49:bf:8e:ba:48:2e:7f:
7a:1d:0b:f1:b3:f3:5b:90:36:2b:1c:ea:54:75:c2:2c:9d:fb:
47:64:75:76:57:e6:9c:ba:46:89:51:c7:a0:86:76:f3:e3:75:
23:86:43:87:37:4a:8a:82:01:6c:84:3d:18:95:25:b7:b3:84:
7c:74:49:95:83:2c:42:cc:86:fa:0d:5d:40:b1:57:cb:fb:0c:
94:e1:ad:a4:4b:83:34:cc:08:0e:62:56:ac:9d:94:7d:8c:1b:
98:a2:72:52:b3:99:54:44:ac:ed:42:0b:bf:60:c4:48:d8:50:
47:33:78:22:11:97:e5:94:24:5c:2f:6d:0c:93:bd:39:fa:36:
1e:90:fa:d5:cb:3b:90:e2:6f:c3:f9:d6:14:aa:fd:67:b3:28:
66:5f:c1:b5:96:52:74:c4:6c:46:9d:db:88:74:c9:4c:7a:c3:
0e:21:5c:eb:eb:43:d1:f8:4c:a5:03:3c:56:14:45:bb:23:a1:
c5:ff:0b:e7:a8:34:a1:01:0e:ac:e0:9f:3e:8e:ba:03:90:11:
bc:c9:1a:35:40:71:a7:18:01:6a:5e:d6:65:e4:90:c3:36:58:
19:cf:e6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:21:28 2026 by rpki-client