Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: /lUAiXd90Y58ZgfEM8J5bawcExOqUotRlAt/Xw6X43U=
Subject key identifier: 28:67:33:BA:3F:1A:1C:C1:DC:AF:2A:81:D2:26:9C:97:5F:9A:10:1E
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 01A06E70887705CB80F38E6971AC93F88C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 088F
Signing time: Fri 04 Sep 2026 22:01:03 +0000
Manifest this update: Fri 04 Sep 2026 22:01:03 +0000
Manifest next update: Sat 05 Sep 2026 22:01:03 +0000
Files and hashes: 1: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (hash: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo=)
2: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: ObHRKW2UiKWCaNg23emZ0H4yyth4lYonrax65ql37pA=)
3: btsbBPG_XDlQ3e5fMtVbLStYwh8.roa (hash: XdV1d+wt2UtCqheQtg2DA5+JgtI45RV6xN6JsyMCDQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:88:77:05:cb:80:f3:8e:69:71:ac:93:f8:8c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Sep 4 22:01:03 2026 GMT
Not After : Sep 5 22:01:03 2026 GMT
Subject: CN=286733ba3f1a1cc1dcaf2a81d2269c975f9a101e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:50:be:ef:35:58:f9:cc:36:03:20:37:53:
3d:3a:fc:aa:37:1e:51:b3:b7:16:91:19:20:01:58:
54:6d:16:14:16:fb:56:f9:8c:dc:ea:37:c9:4f:0b:
d2:7d:eb:ca:d8:f3:cd:fc:9a:6d:31:d9:ca:6b:d1:
c2:22:a9:32:b0:6c:c2:c6:a6:4e:3c:a3:58:47:ec:
b0:74:6f:dd:b2:a4:13:4e:f3:c9:0b:30:ad:30:77:
da:c6:75:78:2a:6a:31:4c:71:bd:36:44:19:e9:58:
9f:ba:a5:81:2f:27:6d:11:b5:92:16:66:17:03:3f:
ce:ac:a6:a0:00:83:b4:24:b9:67:fc:29:d6:5c:1e:
75:14:e0:54:6c:63:01:4e:04:8c:35:e6:0b:63:5b:
a7:86:bd:0f:db:34:98:6a:17:c7:16:49:1e:26:2a:
a0:b4:33:79:6c:de:74:2a:57:94:51:bc:32:8c:d8:
34:84:8e:77:5c:e6:2e:bd:e0:2a:00:51:21:51:f5:
53:48:57:e8:4e:be:c7:8b:21:fc:1d:55:1d:19:f3:
17:c2:dc:d2:0c:a3:57:60:0f:a8:07:ef:da:2d:ee:
91:ed:20:34:a1:8b:2c:78:ff:a1:ea:1a:53:63:c4:
3a:16:98:29:10:8a:fa:cc:70:50:36:bd:ed:d7:b4:
c9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:67:33:BA:3F:1A:1C:C1:DC:AF:2A:81:D2:26:9C:97:5F:9A:10:1E
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6d:7a:01:91:d3:a7:7d:e0:af:53:09:59:fa:3a:3e:fc:13:
e6:cf:3a:71:a9:45:0c:c6:1f:96:39:b2:c6:ef:ac:d2:04:9f:
71:40:0e:f9:62:79:0b:d5:44:26:48:61:c0:7a:69:0c:7a:32:
72:7e:81:9d:08:66:ca:4c:a6:36:ca:c9:b9:8f:d1:ee:26:32:
3e:1f:f6:28:29:35:d2:2d:a9:3b:7b:f8:fa:cb:00:4f:11:ec:
f3:20:87:56:1c:b2:a6:ce:72:8f:ea:4e:0c:f7:e1:8b:03:16:
dd:a3:d3:c9:e4:a2:7c:87:81:61:39:c5:b2:f2:62:97:a8:37:
74:91:f8:e9:f9:08:89:3f:d7:48:fe:60:32:a5:0d:56:35:c3:
a0:c1:81:e8:18:6a:8a:59:9e:a0:3e:99:33:ba:4f:10:de:a1:
e7:b2:c3:e8:71:b2:f6:34:cd:d0:2c:3c:32:fc:ac:62:a4:5a:
a0:33:0f:10:37:34:14:b4:fb:22:3b:86:31:b9:9f:d4:0c:c9:
8e:9b:58:1b:59:8b:8a:c2:34:d3:9b:f7:92:dd:6a:c6:1e:4c:
ab:0d:1a:71:f7:b9:9b:55:bd:56:54:a9:76:db:ff:5c:3a:24:
17:9b:0b:96:a0:6e:12:e1:f3:ad:7d:93:b7:26:85:11:a0:10:
b6:64:76:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:28:03 2026 by rpki-client