Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
File: 59PkY_EcytBV0WYuAIwqlPQt6d4.mft (raw, json)
Hash identifier: ry8YwtSItY3kLUl/M4SZQPRnzx7lGzTqz4EjZqi39gc=
Subject key identifier: 11:DE:36:53:3A:23:8C:AD:F0:DA:2A:C8:78:47:30:49:AC:0D:5D:F1
Authority key identifier: E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
Certificate issuer: /CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Certificate serial: 019D3865C1974C8613827B297950FA2E4783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
Manifest number: 16D4
Signing time: Sun 29 Mar 2026 07:01:25 +0000
Manifest this update: Sun 29 Mar 2026 07:01:25 +0000
Manifest next update: Mon 30 Mar 2026 07:01:25 +0000
Files and hashes: 1: 59PkY_EcytBV0WYuAIwqlPQt6d4.crl (hash: EfTf8HUfgix0tVYWUt9ofJAnDvKYfkj/qOQz0Miwglg=)
2: KMWFIlQC6ib8yekqMVKEQLoSRCk.roa (hash: 29tTxMBE8uiY+In8DyCrSX4qq9Iv9YNEkKYRZQmc7CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c1:97:4c:86:13:82:7b:29:79:50:fa:2e:47:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Validity
Not Before: Mar 29 07:01:25 2026 GMT
Not After : Mar 30 07:01:25 2026 GMT
Subject: CN=11de36533a238cadf0da2ac878473049ac0d5df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b2:ae:a8:01:90:60:81:4c:28:27:9c:61:aa:
d0:7c:03:81:b3:81:9d:5b:80:8a:75:74:1f:2f:f8:
32:4d:7c:2e:b0:39:24:ef:97:07:f0:d6:ec:9e:86:
18:d6:82:a7:ff:5f:a3:ce:c1:e7:4f:3d:1e:92:36:
d1:c4:d1:35:4d:a2:3f:46:2d:2b:f5:81:c2:96:d3:
bc:56:8e:7d:12:91:d9:fd:cd:4f:f5:4b:d1:52:a2:
19:d9:a6:82:97:bc:57:fb:a0:13:85:9c:3f:0f:68:
6b:f0:81:6d:0e:74:4d:c1:59:c1:83:e3:d2:8f:2e:
00:e9:d1:c6:af:53:af:8f:ef:2b:dd:de:29:8f:b1:
95:54:54:db:2d:36:6f:10:a4:ee:9c:b3:e5:eb:ba:
39:0d:12:22:67:e9:20:14:00:b0:2d:fc:9b:b1:31:
07:b4:d3:f8:01:39:39:5c:e8:69:fc:a1:39:ee:f8:
d1:93:03:6e:9d:a1:10:b4:7a:f2:bb:e6:ff:94:aa:
d4:28:ce:56:c8:95:cb:11:46:c8:ee:16:55:4c:24:
fb:3d:e7:1d:bf:eb:97:c8:79:ab:2a:b9:86:e1:46:
5d:ad:d1:98:cc:72:a2:9a:3c:86:71:63:66:e4:7e:
7f:b5:13:20:62:90:df:5a:f2:86:55:31:60:6d:39:
ef:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DE:36:53:3A:23:8C:AD:F0:DA:2A:C8:78:47:30:49:AC:0D:5D:F1
X509v3 Authority Key Identifier:
keyid:E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cc:c6:31:86:b5:e5:7a:55:d0:d6:18:f0:57:81:b1:f6:72:
97:8e:30:ca:67:4f:e0:be:b9:d8:1c:42:f4:65:f9:43:df:b8:
fe:4d:20:da:dc:c8:ac:f6:bb:8b:21:e4:37:40:57:95:da:f0:
79:07:f9:8a:41:72:e4:90:f6:96:8d:b8:9f:40:79:46:3a:c0:
18:2e:45:9c:d6:e5:76:ec:96:32:e0:a5:6c:41:90:b0:79:ff:
0e:c4:ed:61:01:f4:d5:c2:21:41:f6:11:3f:d6:6e:94:77:21:
ed:de:bb:34:1d:61:51:6d:6b:23:ad:bf:d1:54:c5:be:bf:da:
97:a1:0a:dc:0d:42:dc:80:5f:c6:6d:65:3f:68:ef:21:54:80:
75:bb:b4:13:f2:64:21:20:ba:47:a2:8e:3e:54:b8:bc:20:d6:
40:4b:e2:0f:91:1d:6e:39:ac:5b:03:56:73:fd:70:e3:43:22:
c5:b7:9c:a8:c5:79:36:ee:95:01:48:39:40:02:93:bb:f9:7d:
ff:56:46:7a:4d:b2:93:50:90:24:ca:94:f9:59:58:8c:bd:b9:
37:0f:27:06:e3:2d:33:d1:ce:88:6d:ff:c2:dc:81:6d:1b:41:
71:6e:41:30:42:ba:eb:94:65:4b:c8:13:03:5f:95:28:a5:e8:
6d:6e:9f:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZcGXTIYTgnspeVD6LkeDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZDNlNDYzZjExY2NhZDA1NWQxNjYyZTAwOGMyYTk0ZjQy
ZGU5ZGUwHhcNMjYwMzI5MDcwMTI1WhcNMjYwMzMwMDcwMTI1WjAzMTEwLwYDVQQD
EygxMWRlMzY1MzNhMjM4Y2FkZjBkYTJhYzg3ODQ3MzA0OWFjMGQ1ZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirKuqAGQYIFMKCecYarQfAOBs4Gd
W4CKdXQfL/gyTXwusDkk75cH8NbsnoYY1oKn/1+jzsHnTz0ekjbRxNE1TaI/Ri0r
9YHCltO8Vo59EpHZ/c1P9UvRUqIZ2aaCl7xX+6AThZw/D2hr8IFtDnRNwVnBg+PS
jy4A6dHGr1Ovj+8r3d4pj7GVVFTbLTZvEKTunLPl67o5DRIiZ+kgFACwLfybsTEH
tNP4ATk5XOhp/KE57vjRkwNunaEQtHryu+b/lKrUKM5WyJXLEUbI7hZVTCT7Pecd
v+uXyHmrKrmG4UZdrdGYzHKimjyGcWNm5H5/tRMgYpDfWvKGVTFgbTnvmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHeNlM6I4yt8NoqyHhHMEmsDV3xMB8GA1UdIwQY
MBaAFOfT5GPxHMrQVdFmLgCMKpT0LeneMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84YTZiNmUtOWJiNy00NWZjLTk3YmUt
MjJiODQ5OGI1MTViLzEvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi84YTZiNmUtOWJiNy00NWZjLTk3YmUtMjJiODQ5OGI1MTVi
LzEvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbczGMYa1
5XpV0NYY8FeBsfZyl44wymdP4L652BxC9GX5Q9+4/k0g2tzIrPa7iyHkN0BXldrw
eQf5ikFy5JD2lo24n0B5RjrAGC5FnNblduyWMuClbEGQsHn/DsTtYQH01cIhQfYR
P9ZulHch7d67NB1hUW1rI62/0VTFvr/al6EK3A1C3IBfxm1lP2jvIVSAdbu0E/Jk
ISC6R6KOPlS4vCDWQEviD5EdbjmsWwNWc/1w40MixbecqMV5Nu6VAUg5QAKTu/l9
/1ZGek2yk1CQJMqU+VlYjL25Nw8nBuMtM9HOiG3/wtyBbRtBcW5BMEK665RlS8gT
A1+VKKXobW6f6A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:35 2026 by rpki-client