Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
File: 76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json)
Hash identifier: ovQukChGR2EFLqdWVR6A9x/KeVjqtxjl3iERaF2B0YY=
Subject key identifier: CA:7A:8A:CA:33:AD:2E:43:8B:EF:B9:E3:B2:36:3E:AC:39:E3:B6:0D
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Certificate issuer: /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial: 019D9BBF449292D289C7A827FA28F854944F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
Manifest number: 11D1
Signing time: Fri 17 Apr 2026 14:01:36 +0000
Manifest this update: Fri 17 Apr 2026 14:01:36 +0000
Manifest next update: Sat 18 Apr 2026 14:01:36 +0000
Files and hashes: 1: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: R+ceCSt0Lv7ysFb0mjeygEF8rN3yABwoJza/8xyFxu4=)
2: d0r-Z1tATflEg34xH8LpeTJxCeg.roa (hash: /VLriREqzzV93h2U9Y2YNTNewlDjbuqqOCTeloMXxjY=)
3: z2ya0O-Zt1HkSFnRFpNhzUiEpKw.roa (hash: Bw/EG1OV5fOeDsNlaq4pIbVENapXiEYMLsr9/Cjedk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:44:92:92:d2:89:c7:a8:27:fa:28:f8:54:94:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
Validity
Not Before: Apr 17 14:01:36 2026 GMT
Not After : Apr 18 14:01:36 2026 GMT
Subject: CN=ca7a8aca33ad2e438befb9e3b2363eac39e3b60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:dd:2a:1b:b3:f3:6d:66:eb:a8:0a:90:1d:
c6:58:09:cf:e5:d2:97:a4:a2:87:91:b2:c4:8a:5f:
d6:a8:90:33:15:16:e5:c5:0d:15:df:6b:e2:59:d2:
cc:59:ce:98:cb:a1:d4:dd:ee:3b:4e:d2:ac:48:2f:
14:62:bf:39:31:1a:83:38:13:e1:21:0f:50:ff:9d:
3a:c7:8e:ae:92:35:c3:93:8f:25:0a:43:da:53:78:
5d:32:da:47:4f:de:40:67:a5:f6:a5:e1:54:9a:53:
b1:3c:66:2c:14:1b:6b:fe:4f:eb:6b:36:e6:43:78:
1b:44:78:46:be:7f:28:35:40:9d:75:c8:bc:f9:45:
30:46:89:36:1e:e7:5a:52:18:7e:6e:58:57:3f:d9:
df:6c:4f:9e:6d:d0:5d:55:e5:bd:79:1d:62:f3:3a:
94:28:3e:6c:15:99:6d:93:fa:f2:1e:be:c7:c7:e1:
53:32:13:4f:08:b2:d1:ff:dc:c8:fd:c2:88:ea:88:
47:1c:31:33:02:fc:03:48:73:96:c0:a2:ed:ee:bb:
ed:d5:07:45:e1:05:26:f8:c7:a9:0c:29:f5:41:2c:
c1:45:07:b0:8c:79:93:b3:01:41:90:77:97:8d:28:
41:32:1b:a6:c6:69:17:9e:8d:51:1c:cb:1f:70:6f:
a9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7A:8A:CA:33:AD:2E:43:8B:EF:B9:E3:B2:36:3E:AC:39:E3:B6:0D
X509v3 Authority Key Identifier:
keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a0:11:2e:70:e0:3e:90:02:25:d1:22:49:8b:5c:32:6f:44:
97:7a:7c:f2:93:27:b5:ca:06:b2:d4:3d:15:e5:98:cf:ab:25:
a3:f2:06:ec:d9:df:18:90:a8:a7:bf:68:db:87:37:0f:49:49:
ee:75:bf:fc:6b:b6:3d:84:46:c5:61:1e:7e:f1:36:a4:1a:fb:
3b:14:d7:05:14:d8:b7:79:6b:66:4d:b6:f8:fb:62:ba:c4:53:
07:41:04:f6:48:fb:60:fe:da:cf:22:c9:c0:3b:0e:de:87:cc:
c5:cf:05:a7:fc:2a:e3:d9:d7:52:28:75:1a:ef:f2:1b:9c:95:
c5:8e:12:f6:07:76:a9:bd:13:fe:c9:7e:48:12:82:4e:a5:72:
9d:42:2a:2e:74:27:12:c4:e8:86:89:7e:48:1d:43:77:b7:81:
7d:36:1d:96:ee:1f:ed:84:e8:fc:eb:58:ae:e1:c9:f5:9e:f9:
e6:a8:ee:49:45:47:00:8a:2f:ef:9d:4d:ff:67:10:9f:65:3e:
38:fd:39:85:ad:30:7c:78:6a:ee:17:3f:d0:a9:22:5b:ee:69:
98:b2:4b:2b:d4:b7:39:eb:c4:07:e0:2f:fc:65:a6:68:ab:e7:
2a:70:b5:d2:b6:90:94:74:e3:2f:96:9c:34:9c:91:5d:16:44:
df:f8:f2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:57:01 2026 by rpki-client