Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: gA9MHdq5LRwTEUtHZKN4SO2+YhKXN4F0nHibeENozoQ=
Subject key identifier: 35:C1:95:E1:E7:82:55:0D:B0:C1:36:26:02:24:08:C3:FC:16:88:FA
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 01A165A216A928EDABB5BF87070C94F0F2A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 090F
Signing time: Thu 22 Oct 2026 22:01:23 +0000
Manifest this update: Thu 22 Oct 2026 22:01:23 +0000
Manifest next update: Fri 23 Oct 2026 22:01:23 +0000
Files and hashes: 1: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (hash: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo=)
2: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: skRQ05rYEeT+anzLGQDHYRDTbBYed+unXCpwOswGG84=)
3: btsbBPG_XDlQ3e5fMtVbLStYwh8.roa (hash: XdV1d+wt2UtCqheQtg2DA5+JgtI45RV6xN6JsyMCDQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:a2:16:a9:28:ed:ab:b5:bf:87:07:0c:94:f0:f2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Oct 22 22:01:23 2026 GMT
Not After : Oct 23 22:01:23 2026 GMT
Subject: CN=35c195e1e782550db0c13626022408c3fc1688fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:c2:47:dc:04:a9:6d:d1:ac:c0:4b:37:b3:
d5:9e:c9:40:bd:fd:37:18:6c:11:f0:ab:c9:96:d9:
81:8f:0a:0f:7b:78:75:61:f9:c0:37:46:f5:64:6e:
93:4d:1b:18:2d:1c:a7:54:37:ee:30:b1:29:c2:25:
9e:2a:0a:b0:15:5f:0e:36:03:8b:c9:a5:1f:ea:ee:
51:ee:e6:c7:c7:e3:73:23:0c:e6:fd:a5:ab:f6:8c:
15:25:ed:5d:e4:70:18:3e:e1:a3:9d:1f:42:35:06:
8c:ec:c2:99:1f:72:22:5e:1a:8f:e6:a4:cf:e9:2e:
57:1d:1f:1b:34:80:19:0a:92:95:06:b9:2c:a7:25:
54:5f:7f:c6:18:fe:97:ba:4c:65:49:ab:d6:96:10:
a3:aa:5c:89:c6:ce:6a:50:4a:8c:82:1b:6f:8e:25:
32:9b:69:1b:23:ff:22:fc:fc:83:34:5a:1f:6d:61:
ce:2d:95:2c:67:1e:0b:c7:d3:20:f3:e1:d0:9a:d1:
b2:44:ee:9d:c3:05:3a:ac:8e:a4:30:6b:40:a2:69:
b9:35:59:4e:35:d2:45:d0:3c:10:d5:64:a4:43:08:
dd:c1:56:a5:cb:9f:ff:28:fb:6b:de:21:f7:74:a1:
07:5a:fa:37:31:e8:00:da:de:16:95:e5:c6:13:f7:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C1:95:E1:E7:82:55:0D:B0:C1:36:26:02:24:08:C3:FC:16:88:FA
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:1b:a9:b6:2e:2b:82:bf:ad:9e:87:28:78:60:f8:9c:2b:ba:
f1:79:fc:ba:0b:bb:56:bf:53:39:92:e4:b9:3b:b5:08:33:7a:
8e:6e:43:7a:df:eb:29:1d:3c:84:36:a8:90:1e:ab:f8:4c:f8:
0f:f9:b3:2b:06:04:37:86:9c:3e:4d:4c:8c:9f:ef:54:42:22:
54:d4:a6:47:df:7e:6c:34:0c:a0:f9:77:a0:8d:6a:1b:72:da:
23:3d:a3:53:f0:71:88:e4:7a:74:43:55:85:96:97:22:23:4d:
86:e2:6d:bb:97:ad:a1:6b:17:fb:7d:cb:46:a8:38:13:0b:87:
45:f4:dc:15:5f:49:94:5e:7c:9d:90:19:db:e8:e5:cb:c9:38:
e3:b7:60:ad:68:0f:58:24:1c:c5:88:5a:ce:5e:74:4b:6e:2b:
c0:13:c5:af:28:8a:9a:e3:02:f8:2e:5b:f7:9f:fa:ea:60:9a:
db:08:b5:b8:1a:88:85:9e:79:77:96:ac:b4:cd:ea:d3:f4:c6:
ba:b1:56:00:30:24:76:9e:3d:18:01:06:9f:38:da:2e:1e:1a:
02:f5:3e:4c:76:d7:fc:72:08:a9:b7:45:b0:be:68:c5:04:41:
db:5d:ed:ce:3e:d4:42:df:17:09:40:20:dc:c6:fb:66:95:91:
16:24:eb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:51:08 2026 by rpki-client