Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
File: k059UV3emgPC3Ic4mi_KTn1YxOw.mft (raw, json)
Hash identifier: 7IlNnEIAlvZ0enIn7u8UPrtcCLsMdbFJzH5S2gzlloQ=
Subject key identifier: 63:22:43:85:FF:1C:7B:65:FD:3E:98:3B:84:7E:12:1C:C7:CC:E8:3B
Authority key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
Certificate issuer: /CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Certificate serial: 019D3909C9CC7B9960E4484A559D0EABA9F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
Manifest number: 158A
Signing time: Sun 29 Mar 2026 10:00:35 +0000
Manifest this update: Sun 29 Mar 2026 10:00:35 +0000
Manifest next update: Mon 30 Mar 2026 10:00:35 +0000
Files and hashes: 1: 8C0-ccpIqHmAeIjDW496VrjvKOE.roa (hash: MxDBkMG/iI6Rw/citiI0TMMCR7WPdW1yRCJFeLdpPMQ=)
2: k059UV3emgPC3Ic4mi_KTn1YxOw.crl (hash: ZbDx6qKfjwQHKyGMDTPh7nqUz3NHQR6R83CkUNBSTOc=)
3: lzJxr3OaH_yk9VA1VyatZwJOBt8.roa (hash: 6DTksgX0M5lhtZAJh3VGJo/0CDrM2xhsttRRqVDddYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c9:cc:7b:99:60:e4:48:4a:55:9d:0e:ab:a9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Validity
Not Before: Mar 29 10:00:35 2026 GMT
Not After : Mar 30 10:00:35 2026 GMT
Subject: CN=63224385ff1c7b65fd3e983b847e121cc7cce83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:05:38:c2:ee:de:07:c9:a6:47:17:2f:49:e3:
f2:ae:14:b9:f6:61:6e:55:1d:38:d3:e6:96:5c:60:
01:44:85:56:7c:13:cd:64:6a:49:3c:c0:bb:6e:19:
68:8a:05:a1:06:d6:47:40:f1:ab:30:62:28:10:41:
2d:7f:ec:7d:00:9b:73:0a:e0:70:27:a4:93:80:e7:
2d:2c:7e:38:9a:98:17:8f:62:33:8d:06:e7:af:e2:
39:f6:7f:1d:d6:7f:de:5d:02:38:1b:84:f3:f5:15:
67:61:c3:3e:4c:1d:cc:2c:8e:bb:05:1c:33:ea:a6:
16:97:00:c3:99:03:12:0c:f1:69:ab:52:91:21:9f:
da:9a:fb:28:9e:3e:32:c3:e8:1a:a1:ba:f4:d3:fc:
e8:75:86:9b:34:f5:f7:e4:d6:0c:b2:21:e5:39:a5:
64:51:98:ca:47:2b:c2:31:87:2a:80:b5:42:ca:76:
ca:70:89:2f:e5:d5:1e:1e:17:3e:80:bb:cb:b1:e2:
d5:46:56:31:8e:1e:10:49:d8:5f:ad:1f:87:94:6e:
ef:7b:0f:b8:64:e2:66:91:fb:2a:d6:c8:80:8e:3f:
e3:71:1f:3a:57:8e:c5:f8:ab:d4:35:c5:5b:4d:b0:
43:ba:1f:64:30:ab:2c:8f:f1:3c:3c:44:fd:aa:f2:
32:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:22:43:85:FF:1C:7B:65:FD:3E:98:3B:84:7E:12:1C:C7:CC:E8:3B
X509v3 Authority Key Identifier:
keyid:93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:39:be:3d:22:dc:0b:35:01:e8:60:f6:9c:cc:9a:e4:11:6f:
d3:fb:76:9c:fb:2f:01:d6:99:b6:e6:5d:23:e1:8f:df:aa:d3:
7c:60:21:9f:f9:85:f6:09:9e:e1:ab:5a:67:e5:3c:2a:12:c8:
45:df:34:35:00:3e:29:43:91:8d:38:c1:da:6e:38:65:ed:86:
cf:93:b1:0a:7f:39:fe:6f:20:12:2c:10:e3:c1:5d:2a:8b:a2:
30:41:c0:44:39:17:4b:69:52:b3:8f:0c:77:07:17:03:1a:ce:
75:58:4d:04:e3:60:dc:ec:8d:97:db:3c:4a:bd:96:26:88:f1:
70:93:10:e9:18:bc:4e:ce:f7:9b:43:f9:24:4b:f4:a1:2f:41:
ce:5e:f1:63:af:ea:ba:8a:f7:38:14:09:d5:2d:ea:00:8b:38:
4e:3e:bc:68:e0:0b:04:29:19:fc:d3:15:1c:02:c5:31:a0:11:
01:23:b0:c0:a6:26:a1:a2:a1:2d:17:0b:ca:fa:0a:1b:5c:60:
02:d2:fe:8e:d6:f1:02:e5:da:50:79:82:5c:54:26:f6:b4:e7:
2f:61:68:bb:43:76:12:75:a0:92:8b:57:95:bb:5a:87:a4:96:
e6:76:ae:f0:aa:72:6c:09:52:f2:09:8c:b7:18:77:ff:e9:c0:
78:8a:2e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:33 2026 by rpki-client