Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
File: 53OfCEQuIkRmIbiaV2ObNUK6NNw.mft (raw, json)
Hash identifier: i3sAs5VdaRPm4YzwrjcN5gaO6VWu9hlrhVL2BX49UH8=
Subject key identifier: 63:6D:17:62:47:F4:DB:3A:B2:E9:0E:FE:BA:7A:D5:9A:72:68:4B:01
Authority key identifier: E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC
Certificate issuer: /CN=e7739f08442e22446621b89a57639b3542ba34dc
Certificate serial: 019CAB346A505A562B32ECF535C8FFE1BBBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
Manifest number: 0663
Signing time: Sun 01 Mar 2026 21:01:04 +0000
Manifest this update: Sun 01 Mar 2026 21:01:04 +0000
Manifest next update: Mon 02 Mar 2026 21:01:04 +0000
Files and hashes: 1: 53OfCEQuIkRmIbiaV2ObNUK6NNw.crl (hash: 4MXqBSXx588j9YgSmHhdJZkhqRpa6s9mXYvd2fXNw7Y=)
2: nS12X_FMQVUUwkWnLYmgJW732kk.roa (hash: GXbiX9J7KWPFCiPzKs7zINZFOvfmZgRDxvmBON8Kk10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:6a:50:5a:56:2b:32:ec:f5:35:c8:ff:e1:bb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739f08442e22446621b89a57639b3542ba34dc
Validity
Not Before: Mar 1 21:01:04 2026 GMT
Not After : Mar 2 21:01:04 2026 GMT
Subject: CN=636d176247f4db3ab2e90efeba7ad59a72684b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:77:f7:e7:08:d2:3b:d9:ba:a4:2e:72:a7:b9:
ff:59:14:0d:01:05:b6:ba:ae:26:55:54:d2:b2:39:
ef:d1:f5:09:04:a3:51:d9:fe:65:0f:64:2c:78:1f:
25:1c:50:1e:cf:51:f8:e6:75:c2:01:da:2d:79:a4:
bc:32:61:9a:c1:48:65:87:1d:87:4d:bf:0c:ab:cb:
60:cf:bc:0b:97:64:1b:69:bf:04:c2:20:a3:36:08:
2a:f3:28:73:a0:d0:af:6d:26:4f:28:5e:d4:97:94:
11:cc:90:f4:bc:ea:72:d6:a0:a8:48:01:d8:00:0f:
ec:07:20:ef:18:f3:6e:46:69:e9:90:af:38:5c:a8:
f8:87:4b:94:6b:f8:0a:80:0b:b7:5d:45:7e:c3:a7:
12:d5:1e:b5:1f:80:86:f2:a8:7e:74:0d:44:80:ee:
04:cd:e8:3b:4e:ce:22:8c:62:bc:1e:75:31:7f:54:
d5:2d:0f:e5:ed:e6:4b:e4:e8:0f:95:5d:5f:7f:54:
dd:2a:6d:1d:37:4b:79:64:c1:67:76:50:a4:ee:32:
08:82:c5:24:fe:af:ce:5d:1d:c7:6b:a7:16:2f:a7:
c3:85:a7:da:90:9b:58:43:fb:5b:05:29:67:d9:8f:
5e:cb:c1:68:2d:8d:d8:31:78:3b:8d:b9:9b:01:44:
bc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6D:17:62:47:F4:DB:3A:B2:E9:0E:FE:BA:7A:D5:9A:72:68:4B:01
X509v3 Authority Key Identifier:
keyid:E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:eb:9a:8f:98:06:7e:3d:6a:f8:ec:67:c8:30:a6:6d:fc:65:
3f:2b:9d:a2:f4:ed:3e:36:b7:52:ed:86:d1:33:c5:27:cb:84:
95:d3:53:f1:c5:fb:c6:b8:7e:24:f7:aa:53:ae:db:5c:ad:99:
22:ab:40:b1:bd:09:64:3e:5e:46:0d:f5:4a:48:b5:35:05:97:
2f:d3:b6:de:cd:68:0e:26:30:d1:14:dd:93:ff:a8:bd:24:a5:
fb:cd:a1:11:5f:05:cd:b3:c7:2c:60:e9:9d:87:be:91:e9:5a:
42:1e:99:46:b1:f4:2b:ed:66:4a:01:86:80:16:af:07:58:db:
6a:36:0b:06:21:2f:cd:93:4c:03:95:a8:92:a8:26:05:c9:9b:
ec:7f:22:3c:89:59:66:78:85:52:b4:da:64:9a:0b:96:83:44:
8c:de:e1:5b:c6:c6:63:70:f0:f9:df:ff:91:de:c0:48:f0:72:
46:2f:79:ec:06:97:33:aa:aa:e7:03:f9:69:40:af:5e:0b:e8:
a0:f1:d7:4e:0b:6a:2c:15:7a:43:83:21:47:32:2d:2d:37:4e:
7f:e4:22:88:d6:c5:31:8f:1f:33:c6:7c:fe:25:39:58:b1:dc:
9f:65:d6:25:9e:61:bc:f9:87:ed:61:75:0b:be:63:80:3f:40:
cf:c1:ec:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:02 2026 by rpki-client