Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
File: 76AvL3KWXJ4cmy1X6j_BL8-skQM.mft (raw, json)
Hash identifier: kuLn1csHiCnaNse6CkfWzXZrWNMpXPFd74/ky5qBpZ8=
Subject key identifier: A2:D3:FA:49:C7:BD:12:2C:5B:89:4C:6C:FE:DC:24:DC:74:5F:A8:FB
Authority key identifier: EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
Certificate issuer: /CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Certificate serial: 019CABD95F6F499014538D45F409C1A11711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
Manifest number: 1841
Signing time: Mon 02 Mar 2026 00:01:15 +0000
Manifest this update: Mon 02 Mar 2026 00:01:15 +0000
Manifest next update: Tue 03 Mar 2026 00:01:15 +0000
Files and hashes: 1: 76AvL3KWXJ4cmy1X6j_BL8-skQM.crl (hash: RkoAjoRxhcVEN2ZfgJ9u+K9daocrpSMU9vsJRfmUWjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:5f:6f:49:90:14:53:8d:45:f4:09:c1:a1:17:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Validity
Not Before: Mar 2 00:01:15 2026 GMT
Not After : Mar 3 00:01:15 2026 GMT
Subject: CN=a2d3fa49c7bd122c5b894c6cfedc24dc745fa8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:43:06:bc:5b:84:ec:59:1d:2d:b6:af:82:
43:75:ac:36:79:c6:a2:a6:97:93:0b:a6:aa:9d:6f:
b2:15:73:52:62:48:c3:68:11:52:db:82:20:e9:06:
30:7c:ad:94:62:73:3e:e5:e0:6f:b8:77:49:31:2b:
5c:61:3c:ab:eb:1d:7a:04:3e:b1:47:85:e7:3e:2f:
ed:d9:2a:89:9d:8b:39:51:40:e3:ba:e9:2f:68:5a:
a2:1e:6b:8f:31:06:75:83:40:da:a6:e8:b0:b0:fc:
f8:d1:7a:70:5d:00:5c:7d:2b:6d:47:f6:b3:a2:e9:
be:b1:df:e7:fc:0c:38:86:f7:d9:9c:23:de:51:5b:
09:9c:15:67:53:97:88:e7:50:62:07:2f:8a:7a:6b:
f4:b2:71:19:09:59:8a:26:04:bc:4b:d2:c2:f7:0a:
1c:c5:a3:2f:81:e0:25:27:26:f9:26:d2:07:3b:89:
7c:f1:43:53:26:1a:e0:b7:52:07:c4:a8:86:e7:30:
96:f0:a0:b4:b1:32:8f:fa:99:8a:12:57:56:f5:06:
b2:16:ff:7f:b3:7e:48:0d:6c:3a:db:93:49:5a:78:
93:74:9b:41:c8:bc:96:42:8e:88:d6:c5:f2:c1:42:
cc:e9:96:e4:73:3d:18:0d:4b:38:1d:3c:d9:59:b7:
48:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D3:FA:49:C7:BD:12:2C:5B:89:4C:6C:FE:DC:24:DC:74:5F:A8:FB
X509v3 Authority Key Identifier:
keyid:EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6c:46:ae:83:f7:de:d3:8d:e4:24:9a:91:34:59:35:16:fa:
78:89:8d:05:02:cf:a7:aa:7a:00:0c:9f:c7:53:15:e5:a8:28:
cc:d8:cf:5f:8f:27:34:b5:d8:c5:8f:07:57:57:a0:20:39:7e:
04:ef:63:f5:88:78:7f:fa:dd:30:54:72:2c:71:6f:61:a5:f5:
41:b7:79:06:19:c4:84:69:e0:67:cc:d5:98:0c:71:f8:81:6b:
fc:34:96:75:2d:e7:ee:88:12:6f:d1:73:f9:b6:a2:82:1a:9a:
8a:9f:94:91:f5:48:99:9b:24:4f:6d:c3:30:42:b5:77:57:29:
d7:67:76:63:c7:0d:0b:18:d0:96:fa:ce:b8:a1:78:88:64:7e:
9f:d8:90:c2:32:ce:7b:bb:39:fc:bc:29:82:c6:94:b3:8d:cd:
d8:2b:59:f2:04:9e:5c:d2:f6:23:08:05:ba:cd:a0:09:59:19:
3c:0b:5b:5a:b7:a4:23:86:0c:56:8f:43:0b:98:03:eb:c2:4a:
48:11:88:16:78:df:d2:63:3e:e3:3d:1a:40:9f:78:4a:ae:40:
e4:46:dc:a1:19:48:f4:65:c2:a8:62:ba:11:10:d4:4e:50:4c:
85:00:08:f1:fb:6e:9c:9b:ee:67:44:a8:29:b3:26:85:dc:6d:
7a:14:d5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:14 2026 by rpki-client