Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/bbea70-d9b9-4456-a352-526e6081eeff/1/58_GwHE9iA8Xja-Ve5gjMImuTVU.mft
File: 58_GwHE9iA8Xja-Ve5gjMImuTVU.mft (raw, json)
Hash identifier: hmQ3g4DEROcQODUtdJsq9ESRfIsKV9DlDO+MZeUWc0s=
Subject key identifier: 7D:3B:6F:35:8C:67:B3:78:5E:AF:D0:0C:43:78:99:53:67:45:B6:20
Authority key identifier: E7:CF:C6:C0:71:3D:88:0F:17:8D:AF:95:7B:98:23:30:89:AE:4D:55
Certificate issuer: /CN=e7cfc6c0713d880f178daf957b98233089ae4d55
Certificate serial: 01A0408554F3D928B700DBDE70494FF7C070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58_GwHE9iA8Xja-Ve5gjMImuTVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbea70-d9b9-4456-a352-526e6081eeff/1/58_GwHE9iA8Xja-Ve5gjMImuTVU.mft
Manifest number: 52
Signing time: Thu 27 Aug 2026 00:01:14 +0000
Manifest this update: Thu 27 Aug 2026 00:01:14 +0000
Manifest next update: Fri 28 Aug 2026 00:01:14 +0000
Files and hashes: 1: 58_GwHE9iA8Xja-Ve5gjMImuTVU.crl (hash: x6Nw3jtFVvG/qIXjDadGPK1rp4N+IJG//ok4SM4sISQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/bbea70-d9b9-4456-a352-526e6081eeff/1/58_GwHE9iA8Xja-Ve5gjMImuTVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/bbea70-d9b9-4456-a352-526e6081eeff/1/58_GwHE9iA8Xja-Ve5gjMImuTVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/58_GwHE9iA8Xja-Ve5gjMImuTVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:85:54:f3:d9:28:b7:00:db:de:70:49:4f:f7:c0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cfc6c0713d880f178daf957b98233089ae4d55
Validity
Not Before: Aug 27 00:01:14 2026 GMT
Not After : Aug 28 00:01:14 2026 GMT
Subject: CN=7d3b6f358c67b3785eafd00c437899536745b620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:d1:66:90:9e:66:ab:d5:e4:da:a1:51:40:
83:00:d7:53:33:7e:38:7f:94:f8:78:d3:73:01:5d:
23:9a:47:57:3c:b0:73:08:fd:88:14:ad:88:b8:70:
02:f0:9f:7e:1a:bb:aa:bd:02:94:02:55:d6:0f:9d:
93:23:83:a7:bc:80:f0:bf:69:b3:50:a7:b8:75:f0:
1e:3d:75:24:45:0e:13:c1:01:5f:d3:15:ac:63:b2:
b7:31:e2:10:8b:2d:31:68:14:f6:d8:fa:2c:80:1c:
4e:48:1f:04:fd:1f:9a:5d:ea:96:28:05:af:bc:7e:
46:2b:ee:df:c1:94:a2:59:d8:72:e8:c7:13:7b:37:
75:43:7b:55:87:92:24:37:fa:83:f1:be:e1:55:5f:
e0:ca:64:0f:33:8e:68:42:64:4d:bd:a6:e3:7c:a7:
78:49:a8:c3:71:db:27:fe:93:06:a3:30:f4:3e:07:
07:d9:5a:19:96:05:93:a1:1c:b1:bb:fe:f2:0c:ec:
1d:96:e1:3a:22:5d:57:f0:b9:d6:ff:e3:3a:0f:c3:
22:d2:af:2c:49:a8:54:1c:2a:53:73:4d:b1:43:9e:
d1:80:ca:45:17:fb:38:12:71:22:41:75:d9:8a:4f:
43:9f:27:ad:71:19:aa:3e:1b:46:89:ab:7f:14:be:
9c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3B:6F:35:8C:67:B3:78:5E:AF:D0:0C:43:78:99:53:67:45:B6:20
X509v3 Authority Key Identifier:
keyid:E7:CF:C6:C0:71:3D:88:0F:17:8D:AF:95:7B:98:23:30:89:AE:4D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58_GwHE9iA8Xja-Ve5gjMImuTVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbea70-d9b9-4456-a352-526e6081eeff/1/58_GwHE9iA8Xja-Ve5gjMImuTVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbea70-d9b9-4456-a352-526e6081eeff/1/58_GwHE9iA8Xja-Ve5gjMImuTVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d4:c7:3b:36:29:8d:77:47:5d:02:5e:ec:b3:4e:9e:2a:fa:
b0:57:7a:64:04:46:ed:91:d0:e1:3d:0e:0c:88:29:ea:83:36:
f4:2d:3b:98:e2:4b:83:d4:70:bd:c8:87:67:4b:6d:4e:14:26:
51:83:c0:10:3c:e9:cf:cf:16:d1:a0:f4:74:1b:83:2b:a1:54:
9a:31:34:a2:bb:aa:73:fd:54:d6:45:5a:d3:61:de:b2:de:ad:
d2:1c:af:7a:44:36:a8:cb:38:7e:0a:48:87:69:c7:f1:90:cb:
45:0e:df:dd:7d:9c:78:1f:c2:c2:aa:c1:1f:f7:ce:21:2b:d8:
39:ef:76:1d:17:bb:de:f9:3b:89:b0:fe:81:0d:87:83:0a:e0:
18:78:fe:e9:44:14:bc:19:06:66:a1:e8:8c:17:4c:08:70:4b:
ba:50:28:c7:bc:79:24:10:9b:eb:60:61:0a:ce:4b:62:cb:4b:
15:60:34:ef:0e:d3:38:87:79:d5:21:ff:e4:67:fa:e9:03:b8:
55:01:5f:28:a9:6b:4c:67:8b:a6:0f:d0:e0:18:c6:56:7c:39:
7a:24:4b:b4:9e:47:77:c3:40:1a:60:6d:92:4a:1c:36:be:a0:
c8:3b:b2:20:04:99:63:3b:fc:ba:b1:0a:d3:01:81:b9:da:57:
c8:53:27:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:45 2026 by rpki-client