Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: iwG+LgtK9vJI06QBARlhze5Txxdqs3K2GGSm4VKhgM0=
Subject key identifier: 10:0D:61:2E:F5:6D:E1:C4:21:FC:4C:59:91:65:84:D0:A3:12:26:4B
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 019D38D29C9AFD46E4A322A559767B2D816D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 06E5
Signing time: Sun 29 Mar 2026 09:00:19 +0000
Manifest this update: Sun 29 Mar 2026 09:00:19 +0000
Manifest next update: Mon 30 Mar 2026 09:00:19 +0000
Files and hashes: 1: 1-hMzdQcNiHlC1ILPCSFeyzc3V18.roa (hash: pQ5b3SKsH66K13eGB0zI0xg6+iC58sAtCToDI1E0I1c=)
2: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (hash: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo=)
3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: UJTI4NV1nArKyh3QSOC7Yi4OtFHvOhBIcCda9Cqe9Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:9c:9a:fd:46:e4:a3:22:a5:59:76:7b:2d:81:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Mar 29 09:00:19 2026 GMT
Not After : Mar 30 09:00:19 2026 GMT
Subject: CN=100d612ef56de1c421fc4c59916584d0a312264b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:9f:80:d7:ae:f2:05:bd:97:9d:00:1c:bd:
cc:89:78:86:bd:70:ce:a2:61:5e:3e:37:a7:b9:fd:
ab:41:93:1f:c4:f9:8a:21:ae:b4:fb:fc:02:c1:eb:
b4:ac:8a:25:c1:b0:97:db:f5:ac:3a:52:e0:37:81:
6c:76:75:10:79:e9:be:f9:4d:2a:19:61:72:7b:32:
c5:fd:f5:7b:1c:60:82:c8:5c:4d:aa:22:27:82:0f:
57:38:23:6a:e5:e1:c9:39:c1:a3:1a:cc:5f:0d:89:
85:54:a9:94:1b:5a:f5:a9:98:98:4a:2b:86:c5:a6:
94:05:1d:38:9f:42:f8:f3:e0:80:27:45:49:f4:10:
f9:f8:4b:d8:47:2b:22:9b:ee:5d:8f:d2:28:e2:24:
dd:ff:43:74:bd:21:bd:5e:03:61:93:af:70:5d:b7:
c2:07:91:65:b4:cb:91:83:ab:a8:36:50:b1:13:24:
ff:42:35:0d:20:fb:d5:32:35:ef:56:e9:8a:44:a5:
a4:3b:8c:39:ce:9e:59:c3:01:d9:04:00:d3:b2:fe:
3c:7a:2c:f8:82:63:b9:dd:72:36:af:5d:a5:1b:97:
8d:09:6f:ae:de:4c:b2:ee:3d:18:ec:26:1d:dd:a1:
c8:2a:f7:5d:f9:25:cd:f2:46:37:4f:54:b8:94:3a:
09:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0D:61:2E:F5:6D:E1:C4:21:FC:4C:59:91:65:84:D0:A3:12:26:4B
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:28:74:f1:2e:33:e4:a2:5d:6d:04:b1:7f:01:6c:02:fe:30:
e9:80:55:da:4e:5a:29:41:9a:3f:d7:2f:05:03:b4:92:35:d5:
b3:31:a4:e4:d3:3a:c1:8d:40:06:c1:9b:9a:c5:13:ee:f3:fb:
d1:fa:9e:95:d5:3d:44:d8:eb:51:31:60:6f:19:d9:dd:0c:d8:
2c:5d:a2:0b:8e:cd:d8:78:b6:be:ab:47:ae:6c:ce:00:d3:27:
aa:c0:0e:a0:ff:5a:32:a8:8b:c4:90:20:b4:1d:b9:3c:8e:68:
0a:80:d5:96:60:e3:91:9d:36:c2:86:df:51:3e:f2:67:ac:ff:
77:77:95:88:46:7d:00:d6:25:72:5d:5e:39:5a:62:f6:82:53:
d9:da:95:58:73:6f:53:6b:8f:a1:bb:62:1a:1e:9a:4c:65:e6:
da:01:2e:15:04:27:94:a1:59:6c:6a:9c:ae:9a:18:b1:8e:79:
3e:aa:95:66:1c:62:5b:25:a9:e0:bd:4c:e7:48:b8:1b:5e:ca:
06:ea:fc:63:73:cb:68:ca:10:b7:7a:26:5d:8c:ec:99:0a:65:
58:39:e7:73:95:f7:c6:a9:21:17:4b:3b:e4:26:c4:51:81:2d:
28:e4:f2:59:89:40:cb:e2:e8:cc:03:87:59:75:a6:09:54:72:
cd:2c:5c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:18 2026 by rpki-client