Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
File: 59aKnrhqgmTp3cMSKEm4DMNC9dw.mft (raw, json)
Hash identifier: vcJgJKAnIsRREsPX/nlG9kFB8RmL/p45cq6nx72NvEo=
Subject key identifier: F2:79:AE:A4:01:CD:EE:F6:BD:73:79:D5:35:D6:CB:33:23:1D:59:F2
Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
Certificate issuer: /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Certificate serial: 019F18D6E385D8B1CEF8FF7AF4D770FF18D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
Manifest number: 16A2
Signing time: Tue 30 Jun 2026 14:02:43 +0000
Manifest this update: Tue 30 Jun 2026 14:02:43 +0000
Manifest next update: Wed 01 Jul 2026 14:02:43 +0000
Files and hashes: 1: 59aKnrhqgmTp3cMSKEm4DMNC9dw.crl (hash: 1Gr6LH/lDQIkq8z+glCUGFO5kbYAIEy9s0eyUvEJ5gM=)
2: 5D_6V1jfsiELpRkCmEhi7rdCKRg.roa (hash: /d0M4c6YWxQ0V8Mp5iLPG6sVPAc4eaY42hLJi+0oXvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:e3:85:d8:b1:ce:f8:ff:7a:f4:d7:70:ff:18:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Validity
Not Before: Jun 30 14:02:43 2026 GMT
Not After : Jul 1 14:02:43 2026 GMT
Subject: CN=f279aea401cdeef6bd7379d535d6cb33231d59f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:57:4a:2c:9a:92:4b:ba:d3:fd:6e:55:e3:
76:3c:3b:ce:fe:61:af:46:d4:b3:d3:ad:a3:73:2f:
85:fa:17:a4:98:ed:2d:20:88:44:6f:62:ec:73:bd:
3f:98:fc:37:c7:72:d8:cc:ef:ef:62:1e:5b:e9:46:
45:8a:bd:0c:2e:39:4e:b7:91:2d:9a:64:a0:a2:12:
63:f6:2b:9e:14:04:e0:4b:e8:7e:8f:15:48:d4:01:
5f:f6:72:20:fc:a2:73:00:ca:6b:db:81:13:db:f1:
f8:e7:35:9b:f1:7f:a7:56:cc:b4:d5:9c:2f:3d:34:
59:8c:ca:97:42:ec:54:df:d4:ff:cb:65:1a:e6:d1:
6f:99:fb:4d:ba:fe:ab:9a:66:5f:d8:cc:fd:56:93:
55:56:0d:4b:ba:87:a0:fd:45:c1:3f:ac:b9:56:2f:
10:a8:1a:93:fa:8a:16:28:79:a4:ac:59:a9:09:8b:
20:06:bc:80:f2:fd:e0:03:22:7e:8e:27:f5:d0:4e:
0d:00:c8:89:c3:a5:0b:91:35:d6:50:df:57:d5:9d:
f2:15:6d:e4:aa:15:3a:c7:8c:12:d4:7d:a4:31:2a:
8e:2d:ee:01:7f:8f:8b:3d:b4:1d:5f:02:a5:98:5b:
9e:86:c3:8d:c7:f7:00:c0:a8:d9:ea:2e:97:38:85:
b4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:79:AE:A4:01:CD:EE:F6:BD:73:79:D5:35:D6:CB:33:23:1D:59:F2
X509v3 Authority Key Identifier:
keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ef:33:6e:52:e8:fe:4b:9e:24:c7:fe:03:18:f2:12:25:73:
7d:13:b5:fd:5c:2a:76:2d:49:0c:e8:8e:7e:71:71:5f:a5:52:
a5:04:82:35:57:53:ed:70:18:bf:f4:58:7e:11:ad:77:5f:b8:
c6:13:22:4a:ca:be:0c:12:c5:0b:d6:bc:6f:97:01:ff:62:11:
5e:b9:63:76:ab:83:e6:b8:ef:7e:c7:70:e2:6a:70:35:fa:02:
72:2f:84:74:49:e6:64:75:7f:b9:c9:99:a4:8b:90:fc:00:1b:
57:1f:37:5f:a7:36:15:40:ef:be:bb:47:02:8c:c5:f6:1b:88:
34:3f:1e:e9:2e:04:18:d4:f1:71:95:55:18:c5:f8:c1:f7:1b:
53:d7:70:f8:27:bc:07:a4:de:60:c1:ba:48:41:d1:0d:3e:d3:
38:b8:0f:2e:59:79:31:17:b7:da:3b:0b:80:b0:6d:e4:0c:84:
65:18:ee:fb:26:ac:ac:38:ab:25:21:11:97:77:47:ba:0c:1d:
38:e5:20:f8:e1:be:86:80:56:c4:40:76:b8:68:3f:81:6b:d1:
27:aa:40:57:7f:af:e0:3e:f7:be:43:7b:ba:80:19:f3:e6:7d:
01:36:f3:32:6b:41:c7:68:60:f2:61:01:33:f3:fb:6a:16:c7:
2f:9e:ea:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:20:00 2026 by rpki-client