Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: zausD1UmqVygYQ8p0PsOpdtxvDcMRKe2cq1Nx8f9fs0=
Subject key identifier: 0C:CF:B0:BE:53:B1:D7:23:4A:2D:FA:C3:A6:52:43:DA:BA:DA:26:99
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 019E8EA57961DFA78B00497536DEC86B1D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 0796
Signing time: Wed 03 Jun 2026 18:01:09 +0000
Manifest this update: Wed 03 Jun 2026 18:01:09 +0000
Manifest next update: Thu 04 Jun 2026 18:01:09 +0000
Files and hashes: 1: 1-hMzdQcNiHlC1ILPCSFeyzc3V18.roa (hash: pQ5b3SKsH66K13eGB0zI0xg6+iC58sAtCToDI1E0I1c=)
2: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (hash: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo=)
3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: EIKKOqo9ItuLpM0HwuVPiZlBJfnNMtBBRMsrj8X3GP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:a5:79:61:df:a7:8b:00:49:75:36:de:c8:6b:1d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Jun 3 18:01:09 2026 GMT
Not After : Jun 4 18:01:09 2026 GMT
Subject: CN=0ccfb0be53b1d7234a2dfac3a65243dabada2699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:b0:67:e3:f3:74:2e:ea:2f:19:99:0e:73:
d6:75:fe:b0:01:60:ef:97:97:f5:22:95:3d:98:9f:
10:19:17:a7:c5:c4:c5:2a:30:17:18:7e:43:3c:3f:
36:a8:6d:b4:11:bb:da:32:f1:ee:7e:4b:2e:28:6a:
b9:db:21:66:6b:9a:cc:63:00:2f:c5:89:0f:ee:e9:
f9:66:9b:fb:64:d7:04:96:20:f2:99:b5:e3:d1:d6:
e1:ac:ef:a4:79:ec:bc:68:0b:4f:d6:29:aa:b1:e2:
b4:b8:7c:76:07:1d:82:3b:68:ef:f0:e0:cb:81:84:
19:a3:f6:76:2c:5f:92:9b:5a:61:bc:e3:30:b3:1a:
56:d6:6e:bf:fd:c4:5d:b9:2d:d3:9d:3f:22:82:67:
2c:e1:a4:71:e3:3c:1a:46:0a:f5:1c:d6:e8:2c:50:
4d:25:5a:b9:ff:bb:9d:a9:e2:df:7c:43:c9:ae:e2:
4f:7a:29:3d:53:5a:d8:ae:a5:72:93:90:37:04:14:
37:86:44:35:03:46:ea:7a:57:1a:30:9d:23:ea:c3:
20:9a:1c:eb:70:85:25:03:01:27:f9:6b:66:10:e7:
75:a9:31:65:ab:9a:23:9a:86:ee:62:8a:91:51:23:
ee:84:86:b9:f7:0a:2b:9f:92:8f:a2:26:81:46:21:
c4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CF:B0:BE:53:B1:D7:23:4A:2D:FA:C3:A6:52:43:DA:BA:DA:26:99
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6d:a5:4b:9c:7f:7b:96:1c:aa:39:00:c3:df:14:c5:9e:c3:
6f:b5:db:e9:95:aa:95:91:d3:df:14:01:9b:a9:50:6d:af:a4:
06:06:d2:6a:fd:04:b6:cd:5a:f2:52:c3:0b:ae:fa:8e:62:f8:
f8:54:12:dd:2d:90:ed:75:80:5d:cf:90:af:a5:a3:38:1f:c4:
d3:f9:02:c8:b7:f0:68:f4:ca:e2:4b:25:7a:f2:5c:83:47:23:
f1:0b:2c:49:87:f9:ac:13:69:7f:fa:ee:53:23:a4:27:36:3d:
78:be:b2:3d:c5:3e:00:11:3c:9a:34:b7:55:e3:db:2b:3a:2b:
23:75:e0:d1:2e:05:56:53:aa:b6:c0:2c:b3:f1:38:51:a5:9c:
dc:29:e4:af:14:72:91:3c:2b:92:bf:3b:fd:d7:13:40:49:1a:
f2:ed:2c:de:7c:39:19:f4:6b:5f:23:34:a4:8d:bf:ab:68:4a:
43:ab:13:db:fc:83:a1:06:8a:69:61:f5:81:be:d8:38:42:24:
c2:b2:d3:ac:42:ed:0f:8d:1d:7c:0d:79:04:87:98:fe:08:72:
8b:99:a2:ae:42:a3:78:84:40:db:6e:8b:b7:27:37:aa:dd:05:
55:d1:d1:a6:b1:31:7b:4d:0e:04:e5:a3:16:bd:44:d0:f2:0a:
53:db:1e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:59:35 2026 by rpki-client