Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
File: 58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json)
Hash identifier: 8DaCfwfn6RP0fE6GUjTpd1ZMWH7xitNqNtnRgJDDoz0=
Subject key identifier: 76:29:CF:55:5F:2E:B3:5C:09:2B:88:61:58:B9:24:E0:F2:DC:2A:51
Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
Certificate issuer: /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Certificate serial: 019D37C11EF9D3A59DFB4A24223BC3AD1128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
Manifest number: 0BD1
Signing time: Sun 29 Mar 2026 04:01:36 +0000
Manifest this update: Sun 29 Mar 2026 04:01:36 +0000
Manifest next update: Mon 30 Mar 2026 04:01:36 +0000
Files and hashes: 1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: D+Y3r/qo3CjAfWf1DeJIZAVvAX0IU4HH5Wbt1VZAEjE=)
2: kjD9MNfC0BPcwkyPzs0CEhSag-I.roa (hash: e8QlVBviEv2pFqVxAanGI81u7if0cNyxjU/3EXVOJq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:1e:f9:d3:a5:9d:fb:4a:24:22:3b:c3:ad:11:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Validity
Not Before: Mar 29 04:01:36 2026 GMT
Not After : Mar 30 04:01:36 2026 GMT
Subject: CN=7629cf555f2eb35c092b886158b924e0f2dc2a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:2e:ee:57:d9:01:cf:2e:66:ae:c5:67:63:
a7:80:a1:ca:02:7a:e2:5c:72:cb:ba:c7:47:b7:8f:
e8:40:f6:66:85:df:25:10:72:10:5f:c2:ef:1c:85:
9e:de:32:f5:c0:55:b0:8b:f2:2a:47:a9:a5:d7:e2:
36:0a:0c:50:49:53:cd:50:65:c3:23:c1:90:4a:34:
e0:eb:17:90:85:c3:9a:01:24:72:b7:58:88:21:83:
24:e0:be:1c:a7:73:35:38:96:7b:06:e3:14:8d:40:
06:60:61:e6:0f:60:5e:13:f8:10:52:e2:5c:78:d6:
fc:9b:57:63:32:1e:51:f7:39:e2:4a:51:3c:18:d9:
e7:05:dc:fe:e4:66:ba:2e:a1:20:33:d1:5f:47:f7:
a4:be:13:52:ce:99:d1:31:bb:e5:58:ed:34:f2:9e:
49:d9:3b:52:a1:b5:59:03:52:83:54:2a:3e:4a:b1:
c0:7b:21:55:d5:d4:b6:63:49:fb:8a:6e:3a:36:3d:
c2:da:28:ec:30:11:15:94:d2:62:15:2d:e6:cd:17:
46:6a:b5:95:ad:53:c9:a4:f4:26:84:4c:29:bb:f1:
8c:ba:6d:ff:19:ac:c3:b2:63:a1:d7:08:db:bd:c6:
85:3c:67:08:9e:a4:e1:df:70:52:03:08:8b:31:a0:
65:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:29:CF:55:5F:2E:B3:5C:09:2B:88:61:58:B9:24:E0:F2:DC:2A:51
X509v3 Authority Key Identifier:
keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c7:31:fc:34:a4:55:34:3a:af:58:4b:97:d5:fd:52:71:d3:
15:28:88:36:02:68:2d:9c:a3:3b:ce:74:1b:31:85:36:0a:12:
29:2a:e3:41:82:3c:3c:e0:f6:1f:b4:34:47:7c:97:17:e6:78:
68:3a:08:94:c4:27:62:39:29:35:4d:c5:b7:c8:fd:4f:ca:48:
fe:da:85:3c:cc:ac:7b:9a:5a:c8:28:a5:42:8c:76:c2:80:98:
cf:f2:4c:4c:2b:1c:49:a9:89:8f:8f:71:b4:6c:10:be:ab:99:
56:cf:6d:22:72:99:a6:fd:d8:4c:7f:55:95:61:f2:48:07:b4:
64:6f:6c:e0:8a:ec:e7:fc:a8:3e:4e:55:ce:90:10:6a:8b:1e:
10:f2:46:d4:86:ad:ca:81:83:35:7c:48:ec:5a:29:b7:3e:47:
26:c9:ac:d7:a6:2c:b2:24:9c:98:e9:88:75:c8:9c:d8:94:86:
8a:c5:a4:01:72:78:8b:85:d5:c6:0a:09:34:3d:1b:12:2b:de:
d1:3f:c2:1f:28:f1:bd:c8:ce:be:54:5d:b3:5f:54:77:a2:b4:
f1:8c:31:f2:a5:72:62:62:a8:96:cc:ca:84:70:22:a9:27:19:
87:b8:45:76:01:54:68:6c:03:b1:4c:82:a7:85:81:5b:3d:47:
6e:63:46:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:49 2026 by rpki-client