Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
File: 59aKnrhqgmTp3cMSKEm4DMNC9dw.mft (raw, json)
Hash identifier: AtJ21xD9Dtcft9ZJ5wExyptkJ3l6PJTT4f4TchS9gfg=
Subject key identifier: 29:F2:13:ED:78:DD:C8:D6:DB:B7:F7:40:72:05:96:7D:79:74:FD:A4
Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
Certificate issuer: /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Certificate serial: 01A000937ADEF99015F1F988EE962120ED7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
Manifest number: 171A
Signing time: Fri 14 Aug 2026 14:01:00 +0000
Manifest this update: Fri 14 Aug 2026 14:01:00 +0000
Manifest next update: Sat 15 Aug 2026 14:01:00 +0000
Files and hashes: 1: 59aKnrhqgmTp3cMSKEm4DMNC9dw.crl (hash: PjS0snQH0ptKGp12Gz9GrfiHoB75EcOIM5Q9ex/jnJU=)
2: 5D_6V1jfsiELpRkCmEhi7rdCKRg.roa (hash: /d0M4c6YWxQ0V8Mp5iLPG6sVPAc4eaY42hLJi+0oXvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:7a:de:f9:90:15:f1:f9:88:ee:96:21:20:ed:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Validity
Not Before: Aug 14 14:01:00 2026 GMT
Not After : Aug 15 14:01:00 2026 GMT
Subject: CN=29f213ed78ddc8d6dbb7f7407205967d7974fda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:48:5a:6a:cc:72:fb:df:15:a5:3d:45:40:5d:
6c:68:3f:c9:cd:9f:f1:a0:23:ea:91:a3:2f:8d:6b:
63:86:98:9f:7d:5e:fa:a2:0f:ba:32:e7:4d:09:cd:
3a:15:ae:a0:b2:2b:30:62:30:f5:e3:36:62:0a:d4:
1f:a7:f3:ed:68:c2:5c:13:9e:75:94:8e:a2:11:48:
8f:1b:84:c1:79:56:d0:c0:23:0a:7f:d5:0d:64:bc:
fd:0d:2d:6f:f7:07:eb:5f:40:17:8a:f5:a7:77:3a:
fa:a7:78:39:85:d3:03:4f:a3:14:15:d3:90:ff:13:
d4:c1:69:02:82:24:71:42:e6:28:96:e1:ae:c4:11:
45:fb:69:97:13:42:41:20:db:3f:2b:9f:b7:ca:0f:
e3:fc:27:75:85:ae:7e:d0:df:24:a6:59:81:dc:a1:
eb:2a:c5:a7:60:d3:d6:c4:df:31:d7:ec:ba:f8:65:
9e:57:d0:5d:c0:02:c6:84:04:83:f5:a4:d9:9c:86:
b5:fb:19:d9:d3:f1:6a:43:d8:61:8b:a8:49:93:ba:
9d:66:52:6b:09:96:6a:1b:33:a0:8d:c0:13:e3:87:
94:f1:8d:26:7a:78:2b:e1:d3:01:0c:13:63:6c:ea:
e4:90:2c:dd:58:1c:97:0e:03:53:cd:cb:cf:a5:b5:
f2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F2:13:ED:78:DD:C8:D6:DB:B7:F7:40:72:05:96:7D:79:74:FD:A4
X509v3 Authority Key Identifier:
keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:08:2d:8e:c5:9e:88:bd:84:ec:21:88:21:d8:6a:32:07:18:
0e:58:f0:c1:e1:91:99:2c:d0:c6:a2:67:4b:7f:23:e7:0d:69:
03:ba:ad:54:6d:b7:fd:7a:53:79:d8:6b:8b:81:46:81:44:45:
54:79:ab:ad:b4:58:93:0e:ee:1b:6b:5e:b8:d6:25:44:9f:ab:
fe:11:55:4a:f3:4e:d3:8c:b3:9a:80:8e:01:3d:e0:51:f8:07:
5d:84:80:46:5d:15:9c:87:e5:38:3e:1a:f4:fa:6a:bd:97:b3:
fa:50:04:9f:55:9a:4b:b4:55:e4:44:bf:bd:59:45:78:97:bc:
f6:45:e0:85:71:ad:7e:83:b5:7f:d9:78:d3:71:ac:df:34:65:
7a:51:24:9c:46:5b:ef:e6:e0:f8:e1:c8:fd:44:93:cf:f5:74:
32:2e:ae:06:a5:ee:47:6f:68:50:fe:cf:f0:e7:c1:7b:06:1e:
f1:03:62:c6:d6:b3:10:64:bf:67:04:26:15:35:d8:14:8c:2b:
67:c4:b2:ad:48:95:03:25:5b:53:d6:20:e0:c3:48:47:31:02:
7b:35:31:22:21:05:39:62:55:5e:68:62:3c:29:75:2c:a4:59:
31:9d:38:d4:d5:26:87:e7:e5:20:4f:b0:5f:18:9d:18:88:ac:
93:c0:cb:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAk3re+ZAV8fmI7pYhIO19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZDY4YTllYjg2YTgyNjRlOWRkYzMxMjI4NDliODBjYzM0
MmY1ZGMwHhcNMjYwODE0MTQwMTAwWhcNMjYwODE1MTQwMTAwWjAzMTEwLwYDVQQD
EygyOWYyMTNlZDc4ZGRjOGQ2ZGJiN2Y3NDA3MjA1OTY3ZDc5NzRmZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70haasxy+98VpT1FQF1saD/JzZ/x
oCPqkaMvjWtjhpiffV76og+6MudNCc06Fa6gsiswYjD14zZiCtQfp/PtaMJcE551
lI6iEUiPG4TBeVbQwCMKf9UNZLz9DS1v9wfrX0AXivWndzr6p3g5hdMDT6MUFdOQ
/xPUwWkCgiRxQuYoluGuxBFF+2mXE0JBINs/K5+3yg/j/Cd1ha5+0N8kplmB3KHr
KsWnYNPWxN8x1+y6+GWeV9BdwALGhASD9aTZnIa1+xnZ0/FqQ9hhi6hJk7qdZlJr
CZZqGzOgjcAT44eU8Y0mengr4dMBDBNjbOrkkCzdWByXDgNTzcvPpbXydwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnyE+143cjW27f3QHIFln15dP2kMB8GA1UdIwQY
MBaAFOfWip64aoJk6d3DEihJuAzDQvXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81NjVlYTEtMmEzNi00NDAzLTk0MWUt
ZjBkNDBmMDI5NjczLzEvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81NjVlYTEtMmEzNi00NDAzLTk0MWUtZjBkNDBmMDI5Njcz
LzEvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQgtjsWe
iL2E7CGIIdhqMgcYDljwweGRmSzQxqJnS38j5w1pA7qtVG23/XpTedhri4FGgURF
VHmrrbRYkw7uG2teuNYlRJ+r/hFVSvNO04yzmoCOAT3gUfgHXYSARl0VnIflOD4a
9PpqvZez+lAEn1WaS7RV5ES/vVlFeJe89kXghXGtfoO1f9l403Gs3zRlelEknEZb
7+bg+OHI/USTz/V0Mi6uBqXuR29oUP7P8OfBewYe8QNixtazEGS/ZwQmFTXYFIwr
Z8SyrUiVAyVbU9Yg4MNIRzECezUxIiEFOWJVXmhiPCl1LKRZMZ041NUmh+flIE+w
XxidGIisk8DLGA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:05 2026 by rpki-client