Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json)
Hash identifier: CY7qGEHe01vcC6nHn1/A9N/RNpQpSDgl+I6IFKsaFoI=
Subject key identifier: C0:D0:34:EF:E5:FE:9A:E7:DF:57:5F:82:A8:FB:97:40:D6:C8:89:F8
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 019D99CFE3C67359E12DCC3D81E5C17AA77E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
Manifest number: 0BBE
Signing time: Fri 17 Apr 2026 05:00:31 +0000
Manifest this update: Fri 17 Apr 2026 05:00:31 +0000
Manifest next update: Sat 18 Apr 2026 05:00:31 +0000
Files and hashes: 1: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: 2owKKfD8R9pOY8+jyon/Sr80KGQzz0phw6pFZfXS0HQ=)
2: Y1lnQU48zLMaZj5jjMNu1jqCpH0.roa (hash: 7uDt9sXJ9Vu86jMv8zfP4uTHUwIIxRFk4x+ECZ536qo=)
3: aHre3p3mljnQo6pgr_PAHWNasWI.roa (hash: jfHBeKOKc5HfS6IdGbqjCGEVckZ/9KBZc/hoke7dPEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:e3:c6:73:59:e1:2d:cc:3d:81:e5:c1:7a:a7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Apr 17 05:00:31 2026 GMT
Not After : Apr 18 05:00:31 2026 GMT
Subject: CN=c0d034efe5fe9ae7df575f82a8fb9740d6c889f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:88:59:61:f8:f3:1a:6a:e0:1b:de:ac:1e:
93:b5:c7:09:f0:f7:55:e6:70:92:ad:b3:5a:82:79:
54:dc:fd:fe:3a:f0:06:d3:06:eb:24:4a:a3:d6:02:
07:55:0a:c5:2e:a2:d5:95:05:6c:76:9a:ac:bd:f0:
81:b1:da:56:47:67:82:5f:41:a7:f1:ed:52:f4:ef:
4a:64:d6:00:b7:bd:c1:c3:70:2b:a6:b4:37:fa:c8:
51:fa:d8:e1:2a:39:00:91:a4:7c:00:60:b2:bd:b4:
21:ed:c9:b1:d1:18:50:6d:b3:10:fa:1e:77:00:20:
00:35:a8:1a:10:67:26:8b:ff:dc:d9:c8:7d:e9:8f:
e2:31:3c:22:20:42:17:0b:38:35:5d:db:0d:66:25:
1d:b6:9a:df:ba:af:c5:6d:2b:17:be:7e:4a:a1:36:
0f:76:0c:e1:09:5e:5b:44:1e:3a:7d:d2:59:0e:f4:
85:fa:7c:79:55:61:f7:76:37:52:41:6e:7e:43:44:
46:b2:8e:99:ff:44:25:21:31:f4:be:7b:c4:9e:f3:
6f:df:90:38:c1:52:d9:25:ba:d4:a7:4c:a1:b4:a8:
ab:ba:25:28:f1:2e:86:84:9c:05:55:bf:6a:6a:85:
2e:cf:60:a9:e5:5c:af:3d:51:18:a4:ad:13:01:48:
64:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D0:34:EF:E5:FE:9A:E7:DF:57:5F:82:A8:FB:97:40:D6:C8:89:F8
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:38:cc:1b:35:e7:12:c7:85:c0:e5:07:47:24:89:43:6b:7a:
5b:f9:3f:67:e9:20:d2:08:03:b2:70:61:94:1c:03:9d:5a:f6:
23:e9:19:a6:7a:24:a6:e7:b8:e9:35:15:73:4e:31:02:1f:0f:
bb:ac:d7:50:ff:2a:17:55:55:17:7d:9d:f0:12:12:9b:a0:b7:
1d:05:69:30:68:70:b3:11:4d:94:23:18:c8:f3:4e:59:20:1f:
87:54:36:59:cb:eb:be:06:bd:73:c0:a0:47:67:a8:61:a5:38:
46:3e:39:49:5a:d2:e5:40:80:eb:ec:db:d3:d6:7c:01:5b:f1:
de:f7:55:0e:f5:d6:3d:69:8f:98:74:08:ef:5a:dd:64:5a:97:
06:e0:6c:3e:08:e4:47:89:10:61:93:6b:2c:c9:a9:2a:44:dc:
5c:f9:3e:a8:6e:cc:01:40:f1:fb:1f:06:c9:03:2b:a8:c6:3e:
f3:0c:09:4e:40:2b:c7:54:b0:36:7f:f9:e2:e4:89:14:8a:5e:
66:03:0f:f6:ee:4e:ec:ba:76:03:db:06:ff:88:7b:89:06:36:
2b:17:ad:7d:d1:2a:54:2d:6f:8a:0a:cd:a9:cd:b7:21:6a:04:
33:4b:18:a6:a0:2d:17:b0:30:d4:69:f5:e1:69:a3:21:88:e9:
3c:48:f2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:04:21 2026 by rpki-client