Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
File: 58NBW98cAUrhwY58_TPFbwGP7ug.mft (raw, json)
Hash identifier: LkmWyTfUbn8qxg5IZSH1SMyFbY/Bf7SIUEMPzVInatg=
Subject key identifier: 61:4A:32:33:01:53:85:80:BB:41:C2:07:51:40:97:23:6D:3B:BC:28
Authority key identifier: E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
Certificate issuer: /CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
Certificate serial: 01A177A732EE5D581F0CB546A5F3B41E2ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
Manifest number: 1A57
Signing time: Mon 26 Oct 2026 10:00:08 +0000
Manifest this update: Mon 26 Oct 2026 10:00:08 +0000
Manifest next update: Tue 27 Oct 2026 10:00:08 +0000
Files and hashes: 1: 58NBW98cAUrhwY58_TPFbwGP7ug.crl (hash: s7yNmCQmWwGi0MT5IMlaJsoXg0KU62VvTMSJVfHbssc=)
2: gSOpCTMsxm1sebqZJUK3o9Zr9Zs.roa (hash: 9TkioDxaCkLwzYPNkh8yoUAHXHZVA478tyWocCq/RYY=)
3: rY66itDDLvcle-1MpYTgXG_M4zo.roa (hash: knoTBDvlJ1a2MSnUjOh4TAK/Rthq7es3OkAljnFYzRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:32:ee:5d:58:1f:0c:b5:46:a5:f3:b4:1e:2a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
Validity
Not Before: Oct 26 10:00:08 2026 GMT
Not After : Oct 27 10:00:08 2026 GMT
Subject: CN=614a323301538580bb41c207514097236d3bbc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5d:ee:34:b1:a7:39:30:b7:8f:4a:b4:25:fa:
88:f0:38:ad:f1:6d:e9:c5:5d:b8:1b:6e:3c:cb:02:
14:cb:47:ef:4a:c5:85:09:e0:86:59:f1:f1:aa:61:
dd:f2:0f:ba:e4:73:7b:ed:2a:ff:db:bb:47:9d:cd:
0e:7a:3b:70:23:38:67:f3:a2:7c:d4:03:f2:4a:15:
09:04:fe:de:f1:db:31:0a:56:9e:5f:10:3b:63:35:
de:62:64:a6:c8:eb:d3:b4:79:f4:d1:e6:40:09:a1:
99:05:b2:2e:db:65:9a:5b:e4:25:8f:19:04:6f:e9:
49:39:f5:57:10:79:32:dc:1c:f9:c3:d7:d0:ae:b1:
39:a9:cf:53:92:61:e9:40:38:ff:94:e1:a7:72:39:
a0:96:54:73:d2:7c:85:a6:35:4e:cb:92:9c:ba:53:
64:76:43:b1:2b:4b:08:e9:0d:92:ee:59:eb:91:b3:
79:83:3f:54:bb:7e:2a:00:1b:28:52:ba:cf:ca:7b:
26:1b:9c:00:aa:7c:29:6d:65:98:b5:ce:71:b9:75:
87:cc:e5:91:17:5c:3c:78:d4:56:f7:cc:10:ed:11:
f5:08:d9:75:ba:ec:b0:34:a9:6e:c9:3d:ba:a7:e7:
90:e3:b2:dc:cc:be:63:37:a7:c0:34:fb:ef:2c:67:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4A:32:33:01:53:85:80:BB:41:C2:07:51:40:97:23:6D:3B:BC:28
X509v3 Authority Key Identifier:
keyid:E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e1:64:fc:6f:a9:a3:ce:15:f1:ee:f7:ff:e7:39:4d:3f:c2:
63:71:92:f1:92:fe:cc:3e:8b:e0:c2:3e:ab:31:e3:e3:fb:f3:
8e:18:7b:72:12:05:31:16:69:53:b1:1b:6a:74:03:e9:ad:06:
d1:7d:24:31:16:52:ea:9c:b9:65:71:4b:d5:82:0d:f9:8e:e9:
c3:82:b5:b3:bb:f6:50:9d:a3:f8:e6:d8:e8:15:0a:e8:15:d0:
51:6e:4a:6c:d8:10:fb:c2:33:39:aa:83:04:b3:3c:1d:c8:57:
5d:9e:72:4b:56:7b:70:9e:e2:2c:15:ff:ee:67:e0:c9:da:46:
b9:fc:45:f0:84:36:74:e1:b5:cb:45:c9:4f:fd:95:ea:ee:70:
21:be:f7:cd:44:a5:d7:89:4f:bd:d1:7e:94:6a:99:d7:04:df:
97:85:f1:3f:f5:5b:99:85:b5:9c:d8:08:0d:23:fe:34:4b:9d:
d2:26:da:07:d8:3c:fb:46:ff:ae:6c:7e:3b:e8:3c:84:b3:64:
e4:89:cd:9c:3e:6e:fb:14:dd:c4:95:e7:fc:45:72:3a:f4:1d:
6c:20:bb:8d:ab:20:f9:a9:83:21:ba:ad:09:84:53:7d:15:1e:
d7:26:02:84:9f:05:a5:91:dc:19:e9:cc:b6:be:08:a6:78:57:
37:e4:68:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3pzLuXVgfDLVGpfO0HircMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YzM0MTViZGYxYzAxNGFlMWMxOGU3Y2ZkMzNjNTZmMDE4
ZmVlZTgwHhcNMjYxMDI2MTAwMDA4WhcNMjYxMDI3MTAwMDA4WjAzMTEwLwYDVQQD
Eyg2MTRhMzIzMzAxNTM4NTgwYmI0MWMyMDc1MTQwOTcyMzZkM2JiYzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F3uNLGnOTC3j0q0JfqI8Dit8W3p
xV24G248ywIUy0fvSsWFCeCGWfHxqmHd8g+65HN77Sr/27tHnc0OejtwIzhn86J8
1APyShUJBP7e8dsxClaeXxA7YzXeYmSmyOvTtHn00eZACaGZBbIu22WaW+QljxkE
b+lJOfVXEHky3Bz5w9fQrrE5qc9TkmHpQDj/lOGncjmgllRz0nyFpjVOy5KculNk
dkOxK0sI6Q2S7lnrkbN5gz9Uu34qABsoUrrPynsmG5wAqnwpbWWYtc5xuXWHzOWR
F1w8eNRW98wQ7RH1CNl1uuywNKluyT26p+eQ47LczL5jN6fANPvvLGeWQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFKMjMBU4WAu0HCB1FAlyNtO7woMB8GA1UdIwQY
MBaAFOfDQVvfHAFK4cGOfP0zxW8Bj+7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNThOQlc5OGNBVXJod1k1OF9UUEZid0dQN3VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jY2I1NmYtZGQwNS00NjE2LWE1ZjEt
NTYzMjQ2NjhhOTY0LzEvNThOQlc5OGNBVXJod1k1OF9UUEZid0dQN3VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9jY2I1NmYtZGQwNS00NjE2LWE1ZjEtNTYzMjQ2NjhhOTY0
LzEvNThOQlc5OGNBVXJod1k1OF9UUEZid0dQN3VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtuFk/G+p
o84V8e73/+c5TT/CY3GS8ZL+zD6L4MI+qzHj4/vzjhh7chIFMRZpU7EbanQD6a0G
0X0kMRZS6py5ZXFL1YIN+Y7pw4K1s7v2UJ2j+ObY6BUK6BXQUW5KbNgQ+8IzOaqD
BLM8HchXXZ5yS1Z7cJ7iLBX/7mfgydpGufxF8IQ2dOG1y0XJT/2V6u5wIb73zUSl
14lPvdF+lGqZ1wTfl4XxP/VbmYW1nNgIDSP+NEud0ibaB9g8+0b/rmx+O+g8hLNk
5InNnD5u+xTdxJXn/EVyOvQdbCC7jasg+amDIbqtCYRTfRUe1yYChJ8FpZHcGenM
tr4IpnhXN+RoLQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:57:48 2026 by rpki-client