Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
File: 76AvL3KWXJ4cmy1X6j_BL8-skQM.mft (raw, json)
Hash identifier: hhZUGUaD3U5sPRBqdRoWIqfbNy5vitRlFkKIDlXjP2k=
Subject key identifier: B0:7F:BD:EA:B2:A2:6E:AF:F1:98:18:68:9F:99:EC:C0:F6:20:9E:C4
Authority key identifier: EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
Certificate issuer: /CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Certificate serial: 01A0D7CCFA8B6C04B575C5F27E1C34B1356F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
Manifest number: 1A6A
Signing time: Fri 25 Sep 2026 09:02:09 +0000
Manifest this update: Fri 25 Sep 2026 09:02:09 +0000
Manifest next update: Sat 26 Sep 2026 09:02:09 +0000
Files and hashes: 1: 76AvL3KWXJ4cmy1X6j_BL8-skQM.crl (hash: mb4YgURD2C8g/4uXB0CIGN1wpXIBvt1SbbyPvcCNhnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:fa:8b:6c:04:b5:75:c5:f2:7e:1c:34:b1:35:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Validity
Not Before: Sep 25 09:02:09 2026 GMT
Not After : Sep 26 09:02:09 2026 GMT
Subject: CN=b07fbdeab2a26eaff19818689f99ecc0f6209ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b4:d4:30:3a:d3:26:68:e5:41:b3:f8:a9:f3:
27:9f:f5:3a:ca:a4:83:fc:ca:1d:f1:61:b1:16:ee:
5e:44:8f:b0:21:ad:96:af:3b:96:44:0b:75:03:d1:
8b:7f:a4:6b:bd:45:e6:2d:0d:80:3f:49:b7:d0:b7:
5e:7b:75:e0:6f:1c:b8:08:d6:cc:e6:e3:bc:d3:c5:
05:6d:24:84:4d:55:51:b0:a7:1f:11:c9:a7:bb:61:
04:1d:c6:8e:79:e8:3d:32:c3:67:d2:aa:4e:c6:e7:
97:67:e1:a8:c5:c9:ed:f9:51:32:6a:b3:9d:f1:5d:
a0:e5:f6:66:05:b1:f3:96:fe:9f:5a:37:45:fa:b5:
47:fb:ef:8b:42:60:94:b4:f3:21:ab:11:42:0b:2a:
c5:60:f8:1d:5f:26:43:c6:15:45:73:dd:60:bc:d2:
67:8d:d9:8c:22:09:a3:f9:31:da:f8:72:0f:06:7f:
6e:d5:3c:f1:63:28:f0:8a:c7:02:c6:79:4d:4d:4a:
ea:21:88:86:2f:ea:09:a7:b4:55:58:24:08:89:ae:
1c:04:10:e9:af:36:0c:fd:47:19:5f:2b:8a:0d:ef:
68:e7:f2:95:5f:75:b6:ef:59:72:f7:58:bb:9a:e5:
db:03:81:e1:3f:a0:17:3e:30:63:2a:1d:8e:c1:91:
d6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7F:BD:EA:B2:A2:6E:AF:F1:98:18:68:9F:99:EC:C0:F6:20:9E:C4
X509v3 Authority Key Identifier:
keyid:EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:65:f6:2c:c7:0e:25:01:98:bb:b6:f8:4b:b1:07:41:49:02:
c5:e4:97:70:5a:e9:4d:23:29:9b:0d:86:2d:14:9c:b5:c5:ce:
7e:4b:da:e8:b0:68:18:af:8b:23:c4:89:d1:d5:80:df:06:38:
01:ae:5c:c8:f9:7b:db:ed:47:37:05:a6:bc:d1:5a:71:21:4f:
9b:c1:b0:19:6e:a4:a9:dd:c4:7a:90:8a:d8:ad:d1:24:71:2c:
6b:32:cd:55:63:18:17:91:6e:d1:0a:3d:a9:07:09:9a:6f:41:
13:5a:76:b0:83:49:b8:4f:e9:af:dd:21:c8:9a:83:0f:39:43:
11:33:e3:67:34:49:3f:ea:db:37:2a:97:d7:4c:36:ef:9d:49:
a7:9a:42:08:a0:24:61:a7:d0:31:30:c8:7d:2d:45:3e:94:8c:
b9:1a:39:b1:16:f3:d5:97:68:13:0f:90:27:6c:dc:b5:08:e2:
df:17:10:6c:7f:fa:f1:08:e0:ff:dd:8e:25:8b:a6:62:0b:79:
4a:0d:69:39:4a:48:96:e6:94:30:20:e1:2c:53:de:03:5c:ef:
45:96:98:e9:5f:1d:29:f1:8c:b0:0b:73:e7:c6:0f:44:f6:30:
39:b7:d6:dd:1a:e5:63:c3:ea:02:ac:3f:aa:08:cf:72:41:36:
55:68:57:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:18:04 2026 by rpki-client