Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: c9e8TsRGPlviTxM9u60px+kfrS5PmIby99AOkcvkXGw=
Subject key identifier: 75:76:C1:81:4B:24:48:B9:5D:85:05:FF:7C:69:99:F3:DA:62:76:0A
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 01A163B345577375ED852AF89B4551DBCC93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 090E
Signing time: Thu 22 Oct 2026 13:00:55 +0000
Manifest this update: Thu 22 Oct 2026 13:00:55 +0000
Manifest next update: Fri 23 Oct 2026 13:00:55 +0000
Files and hashes: 1: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (hash: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo=)
2: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: pKDEQOP19fMj8BdR1Xj7ctKoGI2oLIIzeBJ5lyn1Z+0=)
3: btsbBPG_XDlQ3e5fMtVbLStYwh8.roa (hash: XdV1d+wt2UtCqheQtg2DA5+JgtI45RV6xN6JsyMCDQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:b3:45:57:73:75:ed:85:2a:f8:9b:45:51:db:cc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Oct 22 13:00:55 2026 GMT
Not After : Oct 23 13:00:55 2026 GMT
Subject: CN=7576c1814b2448b95d8505ff7c6999f3da62760a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:16:7b:60:41:7a:4c:70:5a:e8:ec:e1:a7:
40:01:2f:ec:2d:43:7c:82:b1:55:38:db:53:08:78:
91:c6:18:2b:ff:a0:0b:26:63:3e:50:f8:8f:60:ff:
96:08:0f:ee:99:3b:0e:1e:08:68:49:c3:9f:56:81:
39:22:a6:c1:87:ea:07:5a:4f:55:bf:38:8a:68:7c:
a8:76:6e:da:ff:71:a7:38:8d:9b:87:6d:db:9a:2e:
fe:d5:fe:ce:9c:e4:49:c8:29:c1:00:93:99:57:c7:
8a:e9:49:fb:77:4a:13:82:3f:4a:2d:42:6e:c3:8e:
97:ca:f0:ff:a4:4f:38:1c:42:43:83:36:15:1c:3c:
12:90:e1:01:a8:6c:cf:ee:72:df:8f:ed:17:3b:a1:
2c:d7:0a:f2:28:66:d7:72:82:7e:53:88:1f:d4:3f:
12:94:66:4a:2c:3c:ab:05:d4:6a:a5:8b:08:0a:04:
81:5c:b6:8c:ab:1f:55:e2:94:5c:e1:89:38:f7:ce:
22:ee:8f:2f:4f:3b:9d:c6:fa:35:f1:23:6d:c9:bd:
5a:e7:d9:21:6d:1a:21:82:04:6a:b2:47:53:e1:59:
e0:b4:af:9a:ea:fa:e7:a4:26:8c:c8:38:8e:81:98:
73:85:dd:f6:93:39:5f:75:76:09:83:c9:f8:87:69:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:76:C1:81:4B:24:48:B9:5D:85:05:FF:7C:69:99:F3:DA:62:76:0A
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c9:76:50:03:3c:9c:1b:6e:ca:90:b6:5b:b1:b6:da:26:7f:
0d:b2:25:41:74:bf:54:ab:c5:56:ec:66:bc:b2:77:ae:90:fa:
9f:ab:2c:fe:87:7e:7a:3d:c8:10:3f:63:d9:74:bb:6a:09:fd:
52:ce:e5:76:f3:8f:65:e3:b3:f9:b7:d4:da:09:94:fa:eb:28:
9b:02:64:8e:14:81:16:69:f4:03:90:fe:a8:bb:cc:04:1a:4d:
fd:f6:e4:48:01:35:8f:5c:20:6d:ce:33:f5:09:7b:39:32:79:
3b:f0:e4:a1:18:cf:d5:c1:20:d2:eb:83:0a:56:c8:28:7f:98:
f1:db:16:68:4e:d5:98:e8:72:21:d6:f8:be:f5:eb:0e:69:1d:
56:bb:17:0d:fb:cc:fd:ab:58:8b:f7:4c:0e:d8:37:b3:b3:b2:
c3:6f:2f:7f:0b:31:80:39:ab:13:f5:6e:d4:73:73:d9:2d:72:
94:e5:54:64:94:2e:1a:19:7a:27:98:a3:35:9d:cd:19:52:3a:
a9:15:a3:19:40:4d:78:02:41:75:62:c9:bd:b9:80:60:db:99:
06:4e:7b:4d:e1:85:ec:a4:45:a0:a7:af:c1:e0:aa:6d:00:47:
a2:6c:81:f1:3b:9e:b9:d0:ee:2f:b2:61:49:70:5b:4a:80:53:
23:b3:e3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 19:21:39 2026 by rpki-client