Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json)
Hash identifier: gr90LUfVxndbAqUqpN+bc53Wjr0x5PDyxvstE2bfxME=
Subject key identifier: 2C:89:5B:D5:A0:55:DB:52:19:4A:F3:3D:B5:EB:DF:03:EE:73:0C:59
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 019CAA582A0A2F0D667781004BA4C4E9B2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
Manifest number: 0B42
Signing time: Sun 01 Mar 2026 17:00:30 +0000
Manifest this update: Sun 01 Mar 2026 17:00:30 +0000
Manifest next update: Mon 02 Mar 2026 17:00:30 +0000
Files and hashes: 1: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: pppB5YU8++x62iIV+x9OPrcDOQCx65n8V0nJMXYf/J4=)
2: Y1lnQU48zLMaZj5jjMNu1jqCpH0.roa (hash: 7uDt9sXJ9Vu86jMv8zfP4uTHUwIIxRFk4x+ECZ536qo=)
3: aHre3p3mljnQo6pgr_PAHWNasWI.roa (hash: jfHBeKOKc5HfS6IdGbqjCGEVckZ/9KBZc/hoke7dPEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:2a:0a:2f:0d:66:77:81:00:4b:a4:c4:e9:b2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Mar 1 17:00:30 2026 GMT
Not After : Mar 2 17:00:30 2026 GMT
Subject: CN=2c895bd5a055db52194af33db5ebdf03ee730c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:86:85:5b:ce:ab:5f:16:fa:ea:63:ab:17:4d:
62:23:ce:dc:ad:2b:3f:fe:d5:14:80:33:46:a6:14:
9a:44:0b:d5:27:c8:e3:a6:cd:06:12:e1:4f:65:da:
d8:51:5c:b4:4e:9c:1e:5b:0e:dc:c7:06:6a:69:d3:
7e:e8:29:e0:d1:76:13:77:14:a6:79:16:12:0f:6a:
ef:f7:d6:e4:78:6b:a6:49:52:22:10:ec:4c:29:e7:
d4:67:92:89:63:9c:93:8c:38:a1:b1:3c:29:f5:0f:
b4:00:48:ce:67:29:00:aa:e8:d3:4f:47:7c:e8:80:
ef:19:b4:ac:9b:5c:d6:a1:06:1a:2e:7d:21:d8:00:
fe:27:98:4a:2d:b7:85:13:70:64:66:c1:c6:d6:c5:
86:4a:87:7d:6a:ab:22:d1:b3:5a:9a:a0:62:86:48:
93:69:2c:b5:06:72:5b:4d:42:9a:4c:b5:23:47:74:
77:94:a3:36:df:dc:2a:26:7d:ee:75:e5:91:e7:d9:
71:fd:df:3b:0a:1f:db:36:a3:62:cf:77:26:f0:bf:
43:c3:a0:1d:2d:4f:1a:65:24:db:84:9c:05:1b:b9:
3e:95:3b:90:ba:44:40:44:5d:bb:d6:8b:3b:13:dc:
7b:c8:cb:25:95:19:f5:02:e8:1a:66:3c:7e:ca:e2:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:89:5B:D5:A0:55:DB:52:19:4A:F3:3D:B5:EB:DF:03:EE:73:0C:59
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0a:b6:66:e6:72:ed:8c:e8:90:b9:93:4b:3e:08:0f:c2:e3:
b6:1a:95:58:b1:a6:8c:15:5c:8a:8c:d8:b4:c7:e7:eb:51:7a:
e1:37:a4:09:6e:2d:6f:26:45:1b:81:6f:7a:2c:21:bb:27:e8:
be:3c:9a:39:09:cd:70:3a:78:40:2c:74:d9:28:5b:86:b3:80:
ba:46:50:15:cf:96:85:b9:ef:75:a3:a2:17:7c:43:ae:f7:c6:
f8:10:a1:dd:4e:49:4d:54:f6:0f:95:f4:9e:48:03:5f:cb:b5:
4b:df:8c:f8:89:12:ea:f9:d4:84:9a:a2:4a:29:6a:22:af:f7:
8c:2c:b0:38:1b:54:90:f2:46:e2:45:57:a2:01:b3:c7:c1:8b:
b3:76:8f:3b:e5:6c:da:0e:b8:31:bd:ea:33:60:d3:e3:bf:fb:
d2:86:96:09:45:d4:08:bf:6e:a9:44:11:0a:2c:9f:87:37:8f:
98:bb:79:20:fb:d9:43:e0:0b:c2:df:87:02:8e:74:fd:5d:94:
02:e8:c9:6d:50:e0:f3:8b:cd:9c:c7:6b:06:5a:6c:c2:7f:98:
77:3f:00:21:28:d7:81:12:2d:a6:44:c3:fd:9e:be:95:f2:1e:
83:22:13:28:aa:cb:4a:3f:6a:f7:89:93:b9:c4:c3:c8:cc:74:
40:61:fc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:49 2026 by rpki-client