Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
File: 76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json)
Hash identifier: 1vWUPKqflnZsYlIWPUHD5pzXU2bQl3tpuw9oJaww4D8=
Subject key identifier: BA:A6:7A:28:32:3A:07:88:4C:5F:FD:C9:6E:09:CD:BA:8F:71:25:0E
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Certificate issuer: /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial: 019CAA58E003A29EBF7764F55AA34A269A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
Manifest number: 1154
Signing time: Sun 01 Mar 2026 17:01:17 +0000
Manifest this update: Sun 01 Mar 2026 17:01:17 +0000
Manifest next update: Mon 02 Mar 2026 17:01:17 +0000
Files and hashes: 1: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: wVloHOOEkC5CAhBJc5EpS0E56Er5CLDCuImEouthDxY=)
2: d0r-Z1tATflEg34xH8LpeTJxCeg.roa (hash: /VLriREqzzV93h2U9Y2YNTNewlDjbuqqOCTeloMXxjY=)
3: z2ya0O-Zt1HkSFnRFpNhzUiEpKw.roa (hash: Bw/EG1OV5fOeDsNlaq4pIbVENapXiEYMLsr9/Cjedk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e0:03:a2:9e:bf:77:64:f5:5a:a3:4a:26:9a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
Validity
Not Before: Mar 1 17:01:17 2026 GMT
Not After : Mar 2 17:01:17 2026 GMT
Subject: CN=baa67a28323a07884c5ffdc96e09cdba8f71250e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:ea:e8:98:a4:3b:12:8f:68:38:0a:a2:18:
8d:ff:cb:82:bc:ea:8b:e2:11:fd:17:d4:ab:2b:63:
9e:f0:f8:b9:68:c8:b2:11:3f:ff:48:d5:f6:3e:f8:
5a:a0:44:e7:28:6c:97:b7:91:66:a0:b2:13:f1:34:
bd:bf:25:bc:e4:ab:ae:c2:73:44:22:62:48:42:78:
a3:dc:18:47:75:18:32:61:b1:fc:e0:1c:5f:72:0f:
2c:fc:7e:58:cc:d0:25:54:e2:7a:aa:0f:1b:90:70:
f7:c6:50:bb:be:ad:3c:af:15:76:ce:b1:58:cd:83:
f9:ed:8d:21:89:35:d6:69:b3:4f:33:5b:63:7f:bf:
75:62:cd:ad:10:52:05:57:b4:c2:b7:30:b7:cc:ef:
2d:55:69:ca:34:8f:a9:d7:fe:f2:57:ff:8e:af:08:
2f:ef:24:3e:f2:84:8f:72:73:a8:4e:50:ac:69:84:
14:cc:58:74:ba:d6:63:d5:1d:98:e8:ec:af:63:94:
45:35:e6:27:64:f6:70:26:a3:ed:19:cb:c6:5f:84:
64:14:2c:10:f3:1b:49:05:cd:e4:e1:66:d5:65:b3:
93:95:7c:f3:29:43:12:be:48:7a:2e:5a:2e:bf:8b:
60:d6:1f:6e:04:8f:27:d7:b2:ea:e8:d0:3f:0e:b7:
85:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A6:7A:28:32:3A:07:88:4C:5F:FD:C9:6E:09:CD:BA:8F:71:25:0E
X509v3 Authority Key Identifier:
keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:97:f3:4f:19:52:e6:8a:31:9b:b6:58:15:6b:62:84:49:89:
5b:a5:ab:eb:2b:fc:de:67:66:0c:b6:33:d2:7d:3c:7f:3b:f4:
e1:06:d3:1a:f2:ee:0e:af:ac:4e:89:43:80:32:ae:a3:cc:b3:
97:09:66:36:a0:c0:38:ef:ea:1d:09:e8:ad:85:9d:03:44:a6:
6e:20:24:55:69:2f:d1:d3:62:37:9c:68:21:73:4c:75:47:23:
f2:c5:f2:5d:77:a5:2d:e6:62:f9:cd:ab:eb:cb:25:b5:ce:c1:
19:f4:e8:43:73:d5:72:1e:1f:e7:79:44:d8:36:d1:bb:1c:06:
8a:05:f8:72:bd:25:1e:2b:f1:3c:74:3f:06:55:34:a4:ed:30:
6e:a6:c4:2c:6f:6e:80:bd:86:39:57:d0:5e:a9:36:cc:5f:0d:
37:7d:b2:90:da:9d:ed:49:e2:b6:49:6c:06:14:15:fb:51:c7:
b0:44:1f:31:38:0e:b9:bb:70:47:67:45:06:c0:64:61:b8:03:
7f:42:f7:bd:5a:02:ef:7d:d0:ae:23:3a:b7:3e:96:9c:37:e6:
b7:95:aa:67:9e:a0:ba:0b:43:66:6e:be:aa:a6:bc:41:13:16:
e1:6f:f0:05:1a:8e:ad:29:66:e7:4e:87:21:a1:4f:a7:1a:41:
4e:ab:85:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:10 2026 by rpki-client