Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: sLNzZt86vDe0//S+mEGkLJHJwkQ7FjRo3Lxq4ONBwvI=
Subject key identifier: 8D:1B:80:6D:9B:09:A7:3A:7D:DF:C4:50:32:31:F3:5B:1D:7E:2C:1D
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 01A16B6D2AEC988F90D3C938938D380C8532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 0912
Signing time: Sat 24 Oct 2026 01:01:18 +0000
Manifest this update: Sat 24 Oct 2026 01:01:18 +0000
Manifest next update: Sun 25 Oct 2026 01:01:18 +0000
Files and hashes: 1: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (hash: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo=)
2: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: cEhDF/I+R4bpWut3lz8TyK8smTbKcFrKzUaulCj3W1E=)
3: btsbBPG_XDlQ3e5fMtVbLStYwh8.roa (hash: XdV1d+wt2UtCqheQtg2DA5+JgtI45RV6xN6JsyMCDQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:6d:2a:ec:98:8f:90:d3:c9:38:93:8d:38:0c:85:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Oct 24 01:01:18 2026 GMT
Not After : Oct 25 01:01:18 2026 GMT
Subject: CN=8d1b806d9b09a73a7ddfc4503231f35b1d7e2c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d5:a9:91:a0:18:47:d9:c4:07:c2:3a:b9:4d:
ff:f8:9b:b6:34:51:a1:c0:3c:17:ce:0f:18:69:f8:
28:64:f5:d5:68:0b:1d:28:f7:4f:ad:16:37:85:8c:
31:59:0b:d2:a2:a6:b3:5f:68:29:26:4e:8e:23:a7:
31:65:00:0f:78:b8:55:5c:1d:bc:5e:80:f2:74:88:
90:86:76:99:13:53:f4:67:ed:0c:e0:d8:0a:fd:2c:
00:a8:bc:5c:ec:5f:96:b8:a0:79:03:9d:5a:43:4d:
d1:74:a5:af:0b:e7:b0:a9:39:05:9d:60:b5:6f:91:
41:e8:7b:0a:d4:b1:20:3e:ce:f4:1a:2b:84:4f:7a:
b0:30:a6:55:46:61:e0:2d:dd:be:41:f6:61:70:2b:
ed:fa:04:98:01:15:85:c1:08:ad:25:12:c5:81:ac:
62:b1:c9:ab:52:6f:4c:9d:ec:46:ce:17:d9:40:0d:
e5:73:bb:2b:06:c8:11:12:af:89:18:88:4a:f4:66:
a8:21:bf:79:66:c1:81:09:54:89:70:6d:50:a2:97:
ef:50:d3:8a:ee:f0:6a:6f:24:a2:3a:ad:73:9f:a9:
89:12:26:b9:72:26:8e:86:99:c8:ef:48:a0:3f:3b:
10:54:5c:12:c3:6a:04:d1:62:07:01:91:30:00:cb:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1B:80:6D:9B:09:A7:3A:7D:DF:C4:50:32:31:F3:5B:1D:7E:2C:1D
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:10:08:67:d4:7e:dc:a3:eb:40:ae:cd:0f:87:0f:a3:d7:85:
4f:99:a4:88:96:58:b3:94:66:d5:8d:5b:dd:2c:31:4c:97:f0:
2c:c9:8f:ac:5a:e3:8c:0d:76:14:1b:94:48:83:bc:68:93:f8:
89:e8:70:8b:0d:98:b1:01:6e:7d:e8:55:89:be:46:65:82:44:
5c:55:6b:dd:0f:5d:07:32:99:0a:60:be:97:d1:7b:8d:8e:fa:
2b:62:bd:f2:27:12:b1:c4:c9:13:da:be:4e:b7:d3:6e:c0:5f:
3b:ca:2d:34:30:dc:54:a4:d1:53:38:43:98:1f:a7:87:58:72:
39:10:53:05:f6:97:b4:36:f7:7a:bc:80:e6:91:2a:42:be:5b:
40:26:1d:1c:1e:56:c9:dc:7e:e9:5e:49:0d:d3:82:5a:9d:ed:
b8:c0:6e:ea:09:d7:1b:8d:2a:3a:cf:dc:f0:84:ff:a9:16:59:
43:d8:1a:64:e8:f6:c3:e6:22:43:7e:d6:b8:f6:c2:99:d3:2f:
82:86:61:26:2d:ba:f8:2f:7d:d0:cb:ba:6c:36:5a:2b:c2:bd:
c1:c8:96:39:fb:19:96:d4:0f:1a:3c:4f:e0:56:7d:24:d1:c4:
c0:65:3c:08:a9:b2:88:47:0f:3a:60:b1:a1:4a:6f:72:b6:72:
83:9a:3d:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFrbSrsmI+Q08k4k404DIUyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MmU3ZDg3OTIyMTI5ZGY5MGM0ODcwZGEyYTc3Mzg0MDQ3
MjQ4NTgwHhcNMjYxMDI0MDEwMTE4WhcNMjYxMDI1MDEwMTE4WjAzMTEwLwYDVQQD
Eyg4ZDFiODA2ZDliMDlhNzNhN2RkZmM0NTAzMjMxZjM1YjFkN2UyYzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9WpkaAYR9nEB8I6uU3/+Ju2NFGh
wDwXzg8YafgoZPXVaAsdKPdPrRY3hYwxWQvSoqazX2gpJk6OI6cxZQAPeLhVXB28
XoDydIiQhnaZE1P0Z+0M4NgK/SwAqLxc7F+WuKB5A51aQ03RdKWvC+ewqTkFnWC1
b5FB6HsK1LEgPs70GiuET3qwMKZVRmHgLd2+QfZhcCvt+gSYARWFwQitJRLFgaxi
scmrUm9MnexGzhfZQA3lc7srBsgREq+JGIhK9GaoIb95ZsGBCVSJcG1QopfvUNOK
7vBqbySiOq1zn6mJEia5ciaOhpnI70igPzsQVFwSw2oE0WIHAZEwAMsHQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0bgG2bCac6fd/EUDIx81sdfiwdMB8GA1UdIwQY
MBaAFEUufYeSISnfkMSHDaKnc4QEckhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80ODc5NjItODU4OC00ZjBhLWJiN2Qt
YWFhOGQzYTk0MGFjLzEvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80ODc5NjItODU4OC00ZjBhLWJiN2QtYWFhOGQzYTk0MGFj
LzEvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBAIZ9R+
3KPrQK7ND4cPo9eFT5mkiJZYs5Rm1Y1b3SwxTJfwLMmPrFrjjA12FBuUSIO8aJP4
iehwiw2YsQFufehVib5GZYJEXFVr3Q9dBzKZCmC+l9F7jY76K2K98icSscTJE9q+
TrfTbsBfO8otNDDcVKTRUzhDmB+nh1hyORBTBfaXtDb3eryA5pEqQr5bQCYdHB5W
ydx+6V5JDdOCWp3tuMBu6gnXG40qOs/c8IT/qRZZQ9gaZOj2w+YiQ37WuPbCmdMv
goZhJi26+C990Mu6bDZaK8K9wciWOfsZltQPGjxP4FZ9JNHEwGU8CKmyiEcPOmCx
oUpvcrZyg5o9qw==
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:15:33 2026 by rpki-client