Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
File: 76psy3hXNGAC5rvEmPiLnobfGAY.mft (raw, json)
Hash identifier: 2t/drCchvK30X3Xh29d3bFuNXDEwhYf2rSGK5CHdsDg=
Subject key identifier: A1:B4:94:6E:CD:2D:A8:59:00:10:D9:B0:C9:8B:61:10:B7:76:7A:DB
Authority key identifier: EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
Certificate issuer: /CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Certificate serial: 01A1DE394AC43908D001DC6178C8F8502E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
Manifest number: 08B9
Signing time: Sun 15 Nov 2026 08:00:58 +0000
Manifest this update: Sun 15 Nov 2026 08:00:58 +0000
Manifest next update: Mon 16 Nov 2026 08:00:58 +0000
Files and hashes: 1: 76psy3hXNGAC5rvEmPiLnobfGAY.crl (hash: dehNP4NWLC0Z65LAlpB87WFuJjC5P3zIUexFxAsnmvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:4a:c4:39:08:d0:01:dc:61:78:c8:f8:50:2e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Validity
Not Before: Nov 15 08:00:58 2026 GMT
Not After : Nov 16 08:00:58 2026 GMT
Subject: CN=a1b4946ecd2da8590010d9b0c98b6110b7767adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:64:24:0a:83:e2:77:bd:6c:fa:ef:c4:da:
a8:7e:f8:35:63:f0:d0:58:aa:d3:61:17:e4:b4:7e:
ce:a1:63:54:2e:ad:60:89:3c:4b:c8:6d:75:54:eb:
3d:84:49:e4:e4:d4:bf:2e:24:0f:4e:13:2b:71:ee:
16:b8:da:61:e2:90:f9:e8:07:bc:c8:6d:43:3c:34:
ea:a5:39:26:fb:b1:55:a3:33:f8:40:d3:9e:22:c4:
01:ce:e4:db:57:bf:70:91:a5:c2:73:71:60:0c:73:
0c:8f:49:3e:14:76:49:b2:d3:ce:8a:2b:d0:a7:dd:
58:01:a5:e3:a9:6c:5a:2c:ff:c3:38:62:20:31:65:
01:d8:6a:b6:31:f4:d8:cc:c9:e0:f1:c1:8e:b7:2b:
7a:e1:45:b2:b0:d3:36:4f:09:ca:d3:8b:84:69:1e:
bc:7b:f5:cf:75:a6:3b:38:1d:bb:f6:97:b0:5b:06:
3e:d5:d1:46:2f:bc:a7:7b:e9:e8:73:8f:3f:1d:b4:
99:ff:9a:eb:d5:a8:7b:d2:95:a6:01:47:4f:77:b3:
9b:ff:d2:dd:54:3a:ff:6e:2a:14:2f:d5:67:36:46:
ea:24:65:b5:3b:86:14:d0:2a:78:ac:ca:e6:8d:35:
3e:f1:49:4c:3d:42:14:6c:09:04:f7:f8:08:97:8c:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B4:94:6E:CD:2D:A8:59:00:10:D9:B0:C9:8B:61:10:B7:76:7A:DB
X509v3 Authority Key Identifier:
keyid:EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:21:cd:10:ef:25:ff:60:3f:91:0d:66:40:bf:78:83:21:ec:
c0:38:40:13:cb:f3:39:29:a6:50:74:b2:db:3d:af:41:23:4a:
5d:3a:ec:5c:78:08:50:c3:0a:1a:42:9c:c8:8f:32:fd:4a:76:
a6:73:78:72:81:db:50:76:05:3a:e5:04:fe:c5:c6:fe:64:93:
ef:d3:57:d8:78:c7:80:e1:75:eb:44:bb:88:6e:1b:29:fc:0d:
9c:44:8d:95:78:2b:bf:56:86:ea:b4:cd:f9:b6:06:51:47:8b:
c3:68:b5:cf:3a:7a:c2:c4:fe:b9:66:91:d8:8a:d1:eb:ae:7e:
e4:9f:2f:79:97:d8:5f:75:df:27:0b:5d:01:d1:e4:24:4d:ce:
20:d4:57:82:eb:af:ab:67:b1:99:22:f5:97:9f:f2:e7:f5:c7:
43:df:04:09:cf:de:de:16:80:c8:42:87:c0:83:74:6c:19:46:
d3:7e:e8:4c:8f:0f:cb:01:62:de:90:cc:fe:ed:6b:10:fc:ac:
3a:31:09:11:79:6e:30:53:b3:04:ff:6c:d3:7b:34:83:33:09:
5a:de:0e:de:43:71:46:4d:b6:d9:b9:79:95:bb:a5:11:57:6c:
fb:c3:5d:9f:eb:af:5e:c2:fd:97:1a:71:13:e7:e9:34:c6:75:
d0:16:55:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:57:53 2026 by rpki-client