Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
File: 71hLUR2WpK5sljABl_hPlqOvwkY.mft (raw, json)
Hash identifier: 56N7lPhyXKZVKM2zqMkrUhwPOEGH5uXwCSuq48JO97g=
Subject key identifier: A8:4F:E5:AC:5B:C9:C0:C5:CA:7B:48:7D:BD:04:61:6B:55:6C:F2:80
Authority key identifier: EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46
Certificate issuer: /CN=ef584b511d96a4ae6c96300197f84f96a3afc246
Certificate serial: 019D999968BAEF8BA85274A163DDD4BF8D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
Manifest number: 0FA2
Signing time: Fri 17 Apr 2026 04:01:01 +0000
Manifest this update: Fri 17 Apr 2026 04:01:01 +0000
Manifest next update: Sat 18 Apr 2026 04:01:01 +0000
Files and hashes: 1: 71hLUR2WpK5sljABl_hPlqOvwkY.crl (hash: 4BfsuxeZ1dsuJ1aYZ8m2AbR6MTF8fUZmB8nOfGl8Xdc=)
2: VyE6DesxM1H-hav0gDjcdVAVU4s.roa (hash: fCSRySt/k47Xd3pTSkERi1iNanOCOBE7CKIzsNuCBZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:68:ba:ef:8b:a8:52:74:a1:63:dd:d4:bf:8d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef584b511d96a4ae6c96300197f84f96a3afc246
Validity
Not Before: Apr 17 04:01:01 2026 GMT
Not After : Apr 18 04:01:01 2026 GMT
Subject: CN=a84fe5ac5bc9c0c5ca7b487dbd04616b556cf280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:e0:24:41:1a:75:20:0d:2b:0e:b1:2d:73:
30:b0:e1:09:3c:e5:af:92:d1:0f:a2:5b:8a:b1:48:
2a:58:f0:7a:c9:7d:6d:e5:d4:ef:a3:c6:46:0d:34:
5f:02:41:d4:ca:cb:9b:d3:c8:07:bd:4e:82:85:6e:
58:a2:f2:77:81:50:60:94:51:63:46:b9:e4:12:3c:
18:36:9a:53:09:20:b0:d0:b8:dd:43:87:a3:7f:39:
fc:59:b2:36:3c:81:2d:dc:0c:2d:25:21:c7:63:74:
6b:54:4b:ac:92:e9:c9:7f:f4:a4:70:10:52:4d:d0:
89:0a:8c:4b:6e:83:d9:c3:69:d3:9b:0b:6b:3f:58:
90:c7:94:17:d5:6d:5a:a8:ee:08:a0:43:57:2f:93:
c7:dd:b4:44:96:22:26:6f:f6:3c:48:d4:21:6d:35:
7c:96:6c:07:94:af:7a:85:71:40:72:cc:b9:11:85:
35:83:61:ef:b4:da:55:6c:eb:e0:2a:a5:d1:05:54:
18:51:50:97:59:1d:a2:09:a3:5b:a1:8a:8b:86:bb:
18:74:8b:45:48:f1:7c:f4:47:2d:64:f3:9a:48:c7:
c7:e4:94:4a:8e:ae:3c:08:4d:9e:77:70:5a:90:86:
a0:8c:79:61:30:96:26:0d:a9:f9:11:96:93:34:1f:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4F:E5:AC:5B:C9:C0:C5:CA:7B:48:7D:BD:04:61:6B:55:6C:F2:80
X509v3 Authority Key Identifier:
keyid:EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b7:60:e5:f7:84:02:04:72:c6:19:c1:a3:8e:7a:2e:b0:86:
2a:d7:76:d7:74:f6:27:b5:c3:b2:f2:0b:a1:71:72:03:08:87:
63:41:40:8e:52:4a:f4:b3:e0:e8:09:12:28:aa:38:5b:57:a3:
f9:38:9e:84:70:fc:aa:57:14:79:fe:86:d6:ee:cb:36:6e:d8:
d7:b7:11:c6:e7:65:9d:90:fe:aa:e3:e0:22:4e:01:ad:ee:e9:
0f:8e:d6:76:fe:6d:89:8e:8f:ed:01:c0:0d:24:ad:4a:ec:c1:
2c:12:00:33:a5:18:61:d7:cf:0b:e4:55:6b:40:38:17:2e:ae:
92:aa:6c:88:51:2a:07:e6:6d:a6:e9:41:6e:bf:77:66:05:27:
80:29:2f:97:fb:b3:40:f4:b4:67:af:78:ea:4a:e0:4b:d0:4a:
93:22:a9:02:9e:f6:52:c1:fa:2c:ba:d5:84:b7:11:8b:ac:51:
7d:0e:cf:8e:c8:6f:5e:ce:3a:d8:d9:cd:07:07:ef:2d:c3:60:
d1:f8:d8:b1:81:4c:e3:d5:69:10:2e:fe:44:59:62:a6:d8:41:
82:a1:6b:ba:ea:39:b5:7e:36:a6:49:29:7c:9b:78:16:30:70:
74:82:0b:32:85:81:19:a1:4b:17:56:2f:8d:a7:c3:28:8f:59:
b8:a1:07:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:08 2026 by rpki-client