Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.mft
File: K59zaHqFPjIkksNpEsGGUUHB7NA.mft (raw, json)
Hash identifier: ZgEH8ZnZiNbjDuwYKSnGPEsACdZAVJlqBNhwcYwT4uQ=
Subject key identifier: 4C:4A:05:A9:3E:92:CC:B4:1C:CA:74:AB:1F:98:51:96:37:67:C0:20
Authority key identifier: 2B:9F:73:68:7A:85:3E:32:24:92:C3:69:12:C1:86:51:41:C1:EC:D0
Certificate issuer: /CN=2b9f73687a853e322492c36912c1865141c1ecd0
Certificate serial: 01A0268EF34A01E1BB1ED0CCCC5F3B8A5C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K59zaHqFPjIkksNpEsGGUUHB7NA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.mft
Manifest number: 64
Signing time: Fri 21 Aug 2026 23:01:37 +0000
Manifest this update: Fri 21 Aug 2026 23:01:37 +0000
Manifest next update: Sat 22 Aug 2026 23:01:37 +0000
Files and hashes: 1: K59zaHqFPjIkksNpEsGGUUHB7NA.crl (hash: SPq0hcuRiqbmfvs8l7TZaXwHAU+BYWW3yU9AUTnIVQM=)
2: XEKXrUtUSEHKeRecg-HKhQKGsRA.roa (hash: 9+YjXqvRCQzbgAOAmscmNkEvHBqrZxLodjNclOm5rLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K59zaHqFPjIkksNpEsGGUUHB7NA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 23:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:8e:f3:4a:01:e1:bb:1e:d0:cc:cc:5f:3b:8a:5c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9f73687a853e322492c36912c1865141c1ecd0
Validity
Not Before: Aug 21 23:01:37 2026 GMT
Not After : Aug 22 23:01:37 2026 GMT
Subject: CN=4c4a05a93e92ccb41cca74ab1f9851963767c020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:10:fc:df:9c:e5:e3:51:eb:b6:58:52:bd:
d8:f6:f3:b0:73:12:92:8c:d1:43:66:63:d0:55:69:
bb:f1:cb:91:83:da:0d:af:c1:df:85:85:f2:cc:30:
f8:ee:c2:62:be:06:1e:40:58:c7:eb:7e:80:b3:99:
f9:38:16:14:e3:9d:00:6b:67:ff:c2:be:a7:17:29:
80:8c:96:02:c3:a1:ec:f0:5a:a0:34:ea:c1:e4:b0:
4b:63:d6:5a:84:e9:13:6a:96:78:0b:63:b1:c2:6f:
6a:82:b1:2b:93:fe:7b:ef:50:39:68:c0:72:fc:fd:
84:63:ee:28:45:91:c4:0b:22:76:bc:f8:dc:0b:fc:
15:3e:c8:a3:94:b4:e0:9f:4e:3d:c5:b5:af:4b:5f:
eb:2d:3d:58:67:07:45:45:3a:b4:5d:20:04:14:a7:
2d:dc:d2:be:2f:41:0a:89:21:67:1c:4c:83:a9:3f:
00:74:32:51:e0:4e:b9:50:d5:e0:21:14:f0:0a:48:
24:a3:4d:fd:bd:c3:32:92:05:88:cb:53:c6:dc:e8:
a5:4e:95:8c:22:83:71:42:52:e8:ea:12:7f:12:49:
68:0c:bb:f9:3c:a0:f6:01:70:9d:a5:39:2e:68:0d:
23:fb:fa:0b:99:99:52:f4:39:3d:94:08:3b:1e:44:
a9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4A:05:A9:3E:92:CC:B4:1C:CA:74:AB:1F:98:51:96:37:67:C0:20
X509v3 Authority Key Identifier:
keyid:2B:9F:73:68:7A:85:3E:32:24:92:C3:69:12:C1:86:51:41:C1:EC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K59zaHqFPjIkksNpEsGGUUHB7NA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3a:19:dd:d6:2b:1c:a4:8a:55:69:fe:6b:75:9d:70:3f:32:
bd:8f:38:fd:d0:2f:07:5f:81:fa:98:8d:d9:b6:d6:12:43:6e:
e3:b2:dd:cc:af:d6:e2:53:2f:ee:f7:6e:66:34:31:6f:fa:c3:
d8:db:aa:72:36:e4:48:a1:d3:b8:a2:02:3d:ba:df:24:23:4e:
62:dd:49:e6:8a:8e:45:1d:64:72:14:ed:9f:bb:fe:3b:1b:a8:
be:a7:a2:9d:c7:4e:eb:1e:90:5d:06:b4:a2:5c:a4:a4:b7:00:
64:1a:3a:ae:ff:5a:41:bb:70:df:a5:39:cb:2d:9b:e5:ac:6d:
49:78:46:69:ea:d6:2f:0d:53:af:c4:bf:bd:7d:56:be:31:38:
96:59:b0:fa:b9:86:18:98:31:4b:82:9d:71:e9:7d:d1:fa:b0:
b7:c7:41:d9:44:e0:b5:a8:6a:c3:55:0b:5a:01:7c:1c:99:16:
a2:2f:42:34:bf:42:95:17:ce:65:17:1e:1d:b1:7c:f9:69:15:
38:1b:91:2c:e8:e2:6c:05:2a:bf:5d:dd:ff:3c:4a:f0:83:bd:
47:a5:5b:7c:3d:c2:59:15:23:c3:77:b4:13:3f:d3:c6:71:c0:
f3:38:52:2c:ac:bb:5f:07:e4:af:eb:10:ea:39:02:8a:6a:b7:
c0:d6:d3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:01:12 2026 by rpki-client