Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
File: 59aKnrhqgmTp3cMSKEm4DMNC9dw.mft (raw, json)
Hash identifier: 6NK7cuMiMRbROxn94l1Kn69AK1OVwtey8+EQu4d4QQA=
Subject key identifier: 2B:E1:96:76:39:C6:BF:C0:CB:DD:A6:21:15:16:B0:10:5A:B6:2E:A6
Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
Certificate issuer: /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Certificate serial: 01A1509A7E05B5321137CB03E302971F5FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
Manifest number: 17C8
Signing time: Sun 18 Oct 2026 20:01:04 +0000
Manifest this update: Sun 18 Oct 2026 20:01:04 +0000
Manifest next update: Mon 19 Oct 2026 20:01:04 +0000
Files and hashes: 1: 59aKnrhqgmTp3cMSKEm4DMNC9dw.crl (hash: dpinltFal48La/dAL9GORlHKEZ7PBu1XdMDdOzcNU28=)
2: 5D_6V1jfsiELpRkCmEhi7rdCKRg.roa (hash: /d0M4c6YWxQ0V8Mp5iLPG6sVPAc4eaY42hLJi+0oXvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:9a:7e:05:b5:32:11:37:cb:03:e3:02:97:1f:5f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Validity
Not Before: Oct 18 20:01:04 2026 GMT
Not After : Oct 19 20:01:04 2026 GMT
Subject: CN=2be1967639c6bfc0cbdda6211516b0105ab62ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a0:52:30:2f:68:ce:43:5c:ab:32:14:8a:4d:
12:46:58:8d:52:a2:9d:a2:f2:97:fd:40:31:e6:e8:
27:56:4c:5d:15:2a:d6:28:99:5a:c7:2c:30:b3:1b:
44:2f:6d:d3:ae:58:9d:99:a0:11:21:f5:80:42:fd:
47:5b:3b:09:1b:a8:7a:55:d4:7a:e0:db:7a:4b:c2:
c1:ff:55:4a:48:44:50:d3:99:ae:3c:74:88:61:10:
1a:bb:d4:e7:c1:4a:93:31:7d:69:05:b4:f1:28:b3:
f9:fa:15:50:ec:3c:ea:67:d7:58:55:37:07:10:63:
14:2f:ea:39:26:ce:53:35:40:6c:a2:5f:07:ce:c0:
bb:1b:b1:36:72:84:f4:bd:d8:e1:c1:c2:48:a8:b1:
c3:8d:27:44:5a:3a:8c:1e:61:84:76:fb:18:80:cc:
0c:1b:34:1a:6c:f5:1e:d8:bf:62:14:47:87:18:45:
d1:2a:2f:f5:fb:e6:d7:e6:4e:8c:38:ab:64:1b:70:
20:98:c1:41:0b:f5:17:87:0d:a2:f8:f9:bf:a7:d7:
01:a3:91:33:73:f9:bc:a6:3b:67:34:45:cb:83:22:
cf:e9:23:d3:30:9e:b6:63:8c:84:de:85:46:eb:14:
4a:77:92:c0:69:fe:4e:fe:c0:59:73:a0:f5:fa:55:
49:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E1:96:76:39:C6:BF:C0:CB:DD:A6:21:15:16:B0:10:5A:B6:2E:A6
X509v3 Authority Key Identifier:
keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4c:88:90:fc:50:bc:52:2d:35:cb:ee:b0:f0:61:33:ae:86:
ef:ce:b0:b4:4c:64:6d:48:5e:77:1b:83:63:c2:7a:de:23:99:
36:a7:b0:ad:51:d2:8c:1f:59:e2:07:7e:08:dd:95:59:3f:6b:
d2:83:27:46:89:7b:e2:18:6d:55:d3:2a:10:04:df:d2:ee:ea:
cb:7d:4c:b7:1d:d1:6f:5a:25:0c:ca:5e:55:4c:3d:94:0d:74:
09:4b:f5:c3:88:8b:4a:15:ea:eb:50:ed:b5:8b:9d:01:c1:6e:
b3:33:a5:8f:17:67:d7:c0:54:94:d1:7e:61:4c:3f:65:38:56:
56:fd:77:a3:85:03:b6:7b:15:88:12:90:24:78:51:03:78:22:
4c:37:d4:17:9d:bb:e3:6b:c2:86:f7:c9:4a:33:51:43:a7:f9:
94:fc:77:a5:db:33:04:41:40:a0:0b:0f:1f:97:19:ea:b0:4d:
4a:86:8d:5e:55:17:a7:56:e6:eb:f6:7d:62:71:02:8c:74:ed:
23:ad:d9:9d:1d:23:01:76:62:fe:eb:97:14:57:75:34:58:75:
68:6a:61:25:47:91:93:da:d8:38:5f:d6:b4:0e:75:5c:12:54:
7f:9d:35:f3:02:a5:45:37:8b:6d:84:bc:cc:38:66:7e:22:2e:
38:8a:08:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 05:06:38 2026 by rpki-client