Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
File: 59aKnrhqgmTp3cMSKEm4DMNC9dw.mft (raw, json)
Hash identifier: mBxi9mWMEyc+X62fBnhPUqihSJXFDY5o64pcMjZjkCM=
Subject key identifier: 36:15:AC:15:92:D2:9D:6B:10:74:BB:68:55:CB:A7:55:8A:13:DB:AA
Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
Certificate issuer: /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Certificate serial: 019D39E5788DE864387BB6C1730C7F1F4D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
Manifest number: 15AA
Signing time: Sun 29 Mar 2026 14:00:32 +0000
Manifest this update: Sun 29 Mar 2026 14:00:32 +0000
Manifest next update: Mon 30 Mar 2026 14:00:32 +0000
Files and hashes: 1: 59aKnrhqgmTp3cMSKEm4DMNC9dw.crl (hash: A64aLJQZV0bXMp7ixvtxplZNvfzeospQ90uxWjlFhmc=)
2: 5D_6V1jfsiELpRkCmEhi7rdCKRg.roa (hash: /d0M4c6YWxQ0V8Mp5iLPG6sVPAc4eaY42hLJi+0oXvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:78:8d:e8:64:38:7b:b6:c1:73:0c:7f:1f:4d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Validity
Not Before: Mar 29 14:00:32 2026 GMT
Not After : Mar 30 14:00:32 2026 GMT
Subject: CN=3615ac1592d29d6b1074bb6855cba7558a13dbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d0:5f:dd:f2:f9:11:65:58:fc:61:5a:fe:a5:
35:bb:a1:b0:80:32:a8:03:16:9d:ca:75:e3:6c:8c:
10:c3:f3:fd:83:bc:76:84:e1:05:99:61:59:22:03:
6e:f2:27:b2:ee:1a:00:70:ae:81:ec:02:60:aa:0f:
b3:af:3b:10:d2:0e:57:03:7b:01:21:4c:bf:4d:79:
fd:35:d0:02:0b:b5:40:c2:09:75:a6:8c:31:24:94:
62:80:b1:b2:4f:b9:4c:dc:77:3d:2f:cb:31:1c:30:
4e:00:e2:d2:48:37:44:ee:f6:2b:26:44:6f:bf:bd:
85:6a:46:1e:99:b7:e0:dd:27:56:bc:db:79:0d:57:
e5:ed:71:51:ce:26:6f:c7:84:b2:16:64:1c:f0:bf:
d3:07:46:02:5e:e9:8d:33:f5:c4:63:09:6c:73:03:
ea:e9:ed:27:bf:0c:32:c8:67:f7:bc:d6:6f:7a:c7:
42:a7:9d:8e:f8:e8:04:da:a6:ba:33:14:fb:3d:a4:
03:19:8f:52:92:69:ff:c4:6f:30:9d:3b:13:77:d1:
fd:70:79:85:fd:43:13:e0:05:c0:73:6a:0b:27:1e:
51:85:eb:8d:3d:cc:a0:1b:8e:be:72:19:89:6e:15:
23:ce:a9:b5:39:48:fe:4b:08:f0:98:5a:ca:2e:b6:
6f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:15:AC:15:92:D2:9D:6B:10:74:BB:68:55:CB:A7:55:8A:13:DB:AA
X509v3 Authority Key Identifier:
keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:93:e3:1c:38:2f:92:76:8a:ee:d0:ae:19:4e:d6:89:ed:0b:
9a:12:7f:55:46:fa:ab:17:60:02:9b:82:68:26:1b:77:60:98:
29:1f:4e:59:8f:ed:4c:b2:d2:be:91:db:7b:15:ec:84:68:87:
74:04:1a:b5:ce:60:0a:67:5b:65:3c:f6:53:ef:f1:42:7d:89:
57:3d:7b:69:95:04:76:bb:5e:b7:69:4d:b9:27:c2:53:cf:21:
56:69:05:e0:fc:6b:14:bc:37:2e:cc:48:db:80:56:a1:66:29:
7f:ef:8a:5c:d4:1e:0d:cb:af:98:77:63:cf:ff:b9:89:da:26:
f4:0f:ce:3f:17:5e:0f:0f:3f:e2:56:0c:5b:c5:14:70:a3:70:
de:0b:16:cf:45:fd:62:ff:59:c8:c4:46:7f:b7:2a:6e:b7:6f:
b4:72:ae:29:51:3e:42:4c:41:62:83:e4:78:07:c3:5e:7c:6f:
35:10:42:52:ae:40:26:20:4a:85:38:65:6f:e2:15:37:80:1b:
5b:33:ff:06:fb:48:37:fb:44:fb:25:47:67:9b:16:17:3b:31:
6c:b1:24:47:02:de:e2:7c:de:c4:4a:db:e2:5e:cc:67:55:a8:
b2:ef:84:ed:f4:c4:1f:6a:88:40:5b:10:1f:21:b4:bf:84:cd:
27:9d:b4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:12:18 2026 by rpki-client