Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
File: 59eZrg792Ybd53-zWtChCCPLly8.mft (raw, json)
Hash identifier: ON80pBl97lnpPSMpECElCzy3WCJ89k4hfznXeFkr0Vg=
Subject key identifier: 72:F8:73:E9:29:05:5F:BC:86:38:51:C7:CC:40:E3:EF:D1:DE:09:58
Authority key identifier: E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
Certificate issuer: /CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Certificate serial: 019F134108BAC31FA2ECF35C7C97771560B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
Manifest number: 198D
Signing time: Mon 29 Jun 2026 12:00:56 +0000
Manifest this update: Mon 29 Jun 2026 12:00:56 +0000
Manifest next update: Tue 30 Jun 2026 12:00:56 +0000
Files and hashes: 1: 59eZrg792Ybd53-zWtChCCPLly8.crl (hash: zR5HF7LOqK4Nd44Ikw13ZnhiYr9ao3DumFZ4+uUINaA=)
2: oy6YGnI1tgVRTk-nYNf6Oj1ty_A.roa (hash: n+xGlQJ9PKisT5uNbmDxJgPK8Ls92DjlJDEtC3P1OH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:41:08:ba:c3:1f:a2:ec:f3:5c:7c:97:77:15:60:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Validity
Not Before: Jun 29 12:00:56 2026 GMT
Not After : Jun 30 12:00:56 2026 GMT
Subject: CN=72f873e929055fbc863851c7cc40e3efd1de0958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:e0:40:eb:c0:11:7a:91:1c:28:eb:33:9f:
f5:58:52:b3:60:37:cc:83:4f:1a:85:b4:ae:2d:7c:
1a:73:ed:84:2b:31:28:63:93:96:eb:9b:ee:f1:54:
a1:49:4e:f8:e1:0c:fa:33:d7:2e:11:72:69:4a:ea:
97:15:a5:28:a0:fe:c8:48:f5:e9:cb:1d:96:dd:58:
ed:f6:01:c3:54:ad:6b:f9:40:4f:7c:a5:87:68:d3:
24:ac:be:65:ba:41:4b:37:81:ad:1c:88:d0:19:2f:
15:65:d4:d0:05:a2:77:ca:38:2a:90:ee:4d:bc:81:
d3:f2:23:4a:67:86:1b:27:62:bf:17:1b:9b:84:ec:
f1:f4:c9:6a:82:31:76:97:40:f8:63:ac:74:17:08:
fe:34:e6:fe:f0:b5:df:6c:e0:d2:3e:63:39:02:3f:
02:80:8c:a5:66:9f:c8:41:29:bf:b1:7b:68:78:e9:
93:73:6f:29:dd:74:63:9e:f6:48:8c:5a:fd:7f:6d:
82:51:af:04:1f:83:32:e1:b4:48:2a:68:98:a8:a9:
2a:1e:b3:05:88:5d:1e:af:5b:ec:78:b8:8e:87:d2:
41:fb:3f:65:bb:d7:53:7e:cc:11:b7:1c:63:98:33:
75:32:e0:af:6c:8d:03:c5:3e:2c:7f:a4:ec:87:a7:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F8:73:E9:29:05:5F:BC:86:38:51:C7:CC:40:E3:EF:D1:DE:09:58
X509v3 Authority Key Identifier:
keyid:E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ad:99:c2:42:e3:1a:a8:6b:79:d4:68:0e:72:af:10:7b:5e:
75:5b:e0:cb:65:1f:36:ef:e1:60:73:88:07:cc:94:0d:9a:99:
4e:ac:00:40:9f:73:44:e6:fb:31:df:8a:95:37:4f:70:b8:82:
e5:57:ec:1f:22:2e:ac:ce:7c:7b:d3:57:b4:d7:d2:d8:8a:d8:
e7:ba:b5:32:27:b5:78:49:7d:d1:4d:a6:3e:8e:8c:7f:17:05:
5f:63:fa:1d:37:90:c4:6b:49:28:50:8e:00:8c:e6:3f:b7:e5:
9d:c8:56:3c:3a:86:fb:be:6d:7d:33:44:6f:55:39:7f:e4:cb:
60:96:42:b7:42:39:39:53:a2:3e:bd:b0:2b:52:0d:4e:4d:c7:
96:f5:1d:1e:39:7c:70:1b:2b:06:32:a4:0a:42:4a:e2:c9:68:
f1:67:74:f5:f2:40:d1:07:0a:73:77:e3:9e:80:29:e3:3f:7a:
c2:5e:68:39:ad:47:1f:a6:ef:a8:03:be:97:d5:e9:1a:77:be:
35:31:26:c9:57:80:28:a7:77:e9:dd:6d:e1:4a:43:5d:f0:71:
1a:72:b3:f1:0c:bc:58:c2:84:55:f2:cb:8b:ac:8c:2e:7a:45:
d0:7b:91:f0:f3:81:01:8f:80:04:14:d5:97:b3:c7:7b:7c:b5:
45:52:8c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 19:32:25 2026 by rpki-client