Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json)
Hash identifier: ZULDfhinDll4bEInfD2V38/KeggX94wVJnKOVx1nvZI=
Subject key identifier: DE:70:9E:63:CB:27:AE:9F:2C:67:49:81:A8:B5:5A:F8:BA:BE:84:4F
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 019FA907A88FFCD852275919975C8F70446A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
Manifest number: 0CCF
Signing time: Tue 28 Jul 2026 14:01:19 +0000
Manifest this update: Tue 28 Jul 2026 14:01:19 +0000
Manifest next update: Wed 29 Jul 2026 14:01:19 +0000
Files and hashes: 1: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: KqaFdA+1XD2GY+VSQO3ZwXz3SA/zVL4RtfW4MEwjNNE=)
2: Y1lnQU48zLMaZj5jjMNu1jqCpH0.roa (hash: 7uDt9sXJ9Vu86jMv8zfP4uTHUwIIxRFk4x+ECZ536qo=)
3: aHre3p3mljnQo6pgr_PAHWNasWI.roa (hash: jfHBeKOKc5HfS6IdGbqjCGEVckZ/9KBZc/hoke7dPEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:a8:8f:fc:d8:52:27:59:19:97:5c:8f:70:44:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Jul 28 14:01:19 2026 GMT
Not After : Jul 29 14:01:19 2026 GMT
Subject: CN=de709e63cb27ae9f2c674981a8b55af8babe844f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:af:51:c9:d7:d1:27:52:23:63:d4:87:3e:
96:d1:a9:85:c5:f5:9b:c8:21:79:4c:36:ec:55:31:
25:42:75:b8:94:f3:1e:25:80:ed:03:f0:d5:74:97:
25:9d:c4:87:0b:ec:75:c3:82:d9:1d:f2:88:65:e8:
60:2d:8b:b2:09:80:f7:73:41:e7:d6:c6:ad:a2:b6:
22:e5:0b:e8:d7:90:68:49:a7:3d:88:d0:66:ba:91:
c0:6a:85:a2:bf:e7:8c:b6:ea:2f:bb:65:16:73:90:
04:1d:4e:de:8d:5a:df:ad:71:aa:8b:4b:1f:fc:27:
47:3a:f1:c4:a6:98:18:74:f0:94:41:89:9d:ca:d4:
72:b5:42:3f:5c:b3:ff:2e:ed:ac:1c:49:00:f9:2a:
71:b4:2d:a6:da:aa:93:5e:0a:b4:61:cc:7e:df:08:
4c:12:65:d3:c7:6d:aa:2d:04:b7:31:73:c0:26:55:
c6:f7:9b:8e:83:58:ea:a1:62:da:0a:ef:52:2a:d9:
c1:6d:3c:df:49:99:06:01:53:09:d1:19:57:c0:58:
f0:3e:7b:77:45:50:f0:a4:90:d9:66:f5:6b:65:bb:
99:d2:eb:1f:ba:13:6a:5b:aa:1d:53:0a:de:9d:f4:
bb:9d:2a:4d:57:60:38:27:e6:4c:ad:12:96:c8:7b:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:70:9E:63:CB:27:AE:9F:2C:67:49:81:A8:B5:5A:F8:BA:BE:84:4F
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1c:43:7b:f3:1d:c0:f8:d7:6e:11:f6:3e:2a:92:a3:3c:ff:
0e:c6:74:db:73:66:bd:11:f8:18:ff:11:f5:7d:3d:ff:84:ab:
04:1f:17:fc:3b:d3:36:ca:24:47:1d:26:d3:c1:a0:f8:da:fa:
f4:7f:bb:ec:c8:17:9f:a8:25:e8:94:b9:b2:eb:c6:52:02:fa:
23:1e:16:aa:3b:63:8c:fa:58:11:51:2d:29:a3:9b:56:fb:41:
74:b0:0f:d8:66:ee:1e:ca:78:ba:73:f2:8f:84:15:a0:7a:66:
32:90:b2:61:8d:a7:8d:b6:b0:c9:40:18:12:fc:54:32:a6:a0:
7b:bf:db:d1:91:6d:50:4d:0a:e1:1c:25:95:c4:c8:8c:fd:91:
a8:94:39:02:16:0a:8d:aa:71:4b:9a:34:4a:ef:ec:73:75:81:
9d:29:22:03:97:9a:63:4f:ea:e0:ab:db:1e:85:cc:09:67:53:
39:1a:58:37:dc:5d:f1:7a:16:05:c5:b8:43:b1:e1:f6:3f:3f:
9d:78:b6:7d:3c:df:ba:6e:ca:5a:14:9c:52:0c:a9:c4:51:f2:
24:db:12:20:ff:86:1c:cd:eb:c7:28:b8:0b:35:af:b7:cc:dd:
3d:15:58:2c:09:97:80:77:19:ff:2d:72:66:ee:69:17:53:83:
fc:68:c1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:24:17 2026 by rpki-client