Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
File: 56lS7y1xM0iHgHhFONttuGLsBAg.mft (raw, json)
Hash identifier: i5uKGWtY1hxuiJrNJTRxMi4VuGEbtQFP5erSP9nPIc0=
Subject key identifier: 60:2E:C1:F2:66:84:82:C1:9B:40:A5:CE:51:33:6B:23:F9:D2:02:35
Authority key identifier: E7:A9:52:EF:2D:71:33:48:87:80:78:45:38:DB:6D:B8:62:EC:04:08
Certificate issuer: /CN=e7a952ef2d7133488780784538db6db862ec0408
Certificate serial: 019FAC75D5A38B0C9852BDCC7F60DE8F9982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:31 +0000
Manifest this update: Wed 29 Jul 2026 06:00:31 +0000
Manifest next update: Thu 30 Jul 2026 06:00:31 +0000
Files and hashes: 1: 56lS7y1xM0iHgHhFONttuGLsBAg.crl (hash: PAe/bHIsfp4M5fQC6VOsnUJeUzu6Z5xQzYY10bVUEgk=)
2: f1R_KVw6pDr-4luASuZxDgTRs54.roa (hash: pyivi44WDU8Xyy/kj2UqLPdU3p7h7jqHwHgFp3gleyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:d5:a3:8b:0c:98:52:bd:cc:7f:60:de:8f:99:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a952ef2d7133488780784538db6db862ec0408
Validity
Not Before: Jul 29 06:00:31 2026 GMT
Not After : Jul 30 06:00:31 2026 GMT
Subject: CN=602ec1f2668482c19b40a5ce51336b23f9d20235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:e3:ff:f7:d4:69:fd:69:1f:51:63:cb:6b:
60:16:8a:e1:b7:9f:34:9d:e7:8b:34:10:17:e2:0e:
14:da:36:2f:8d:23:e4:c6:8b:27:a3:23:6f:7f:ae:
e5:a0:6e:40:88:1a:f8:88:a0:3f:65:eb:b4:2d:8e:
55:b0:77:75:94:81:46:14:52:b3:e6:4b:07:7d:4b:
df:49:10:dc:ce:c6:f4:a5:75:14:f9:44:52:be:98:
83:ec:91:b7:48:d4:50:7d:92:46:6c:09:86:87:c9:
0b:37:ab:bf:eb:59:90:5a:da:32:b5:d9:a4:64:bf:
2f:96:bb:2c:5e:82:c8:16:fd:d5:55:f1:5a:33:90:
c8:64:25:73:ca:3e:2d:59:f7:74:7f:c2:96:13:ea:
82:9d:da:df:a0:3e:e3:88:e1:43:1e:fc:90:98:32:
aa:6b:48:c3:8d:ba:6a:71:47:ff:f8:4b:da:b8:68:
ca:33:52:ce:1d:4e:a0:8a:34:f3:23:36:f4:f0:fd:
ba:66:d5:9e:6d:3a:a3:be:3a:90:95:81:94:e1:17:
40:63:8c:cd:c2:0c:96:79:38:df:a9:8c:a2:c2:c0:
ff:ef:af:3b:a8:f6:75:ea:95:72:67:c3:55:02:00:
11:66:31:c3:cb:62:8b:de:29:df:ba:2e:47:51:80:
dd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2E:C1:F2:66:84:82:C1:9B:40:A5:CE:51:33:6B:23:F9:D2:02:35
X509v3 Authority Key Identifier:
keyid:E7:A9:52:EF:2D:71:33:48:87:80:78:45:38:DB:6D:B8:62:EC:04:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d8:f9:69:7a:e5:ee:5d:68:8c:9e:e7:d4:ea:ef:18:dd:a0:
f1:e1:c2:66:ed:1c:bd:13:b6:da:c0:cf:e2:33:84:13:4e:12:
fb:2b:10:07:98:86:8d:12:97:dc:36:10:c4:91:ed:dd:ae:bc:
65:68:12:3d:9f:e7:77:2f:2d:f6:eb:16:8b:24:ca:7f:2f:16:
a2:16:11:f9:64:2a:c1:c5:2a:d7:28:be:4a:04:e3:a3:1f:83:
11:76:64:a1:cd:32:e6:4f:e1:9e:47:a6:35:0f:5b:e9:82:de:
bd:65:6a:d6:1f:34:6e:49:3f:fa:04:ab:b0:07:4d:fd:27:2e:
28:3d:e7:f5:9f:f1:df:97:5b:85:d0:2c:e9:84:69:e9:f7:62:
6d:0e:a0:af:5a:2f:26:a1:ed:9f:13:33:cd:a7:fb:61:74:9e:
37:f2:9f:5b:e1:3e:29:68:16:84:84:33:40:ec:f0:bb:3e:b8:
c9:1d:23:f1:74:63:37:66:80:55:a5:cd:28:5f:31:dd:a1:75:
69:1d:fc:31:d1:ec:fa:78:84:78:d3:79:94:40:6b:f9:c3:41:
97:bb:50:82:23:d8:52:3c:bd:14:a2:9e:e6:cd:83:ae:fc:5a:
b3:c6:51:ad:fa:a2:cc:bb:dd:37:dc:22:c0:a0:35:e0:4c:dd:
a4:f3:2f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:02:48 2026 by rpki-client