Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft
File: 71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft (raw, json)
Hash identifier: zuiwbv8iDaJDXhXz09AwPGGmfnaDlHbEq2GIyavFCKE=
Subject key identifier: 31:3B:CE:AD:9B:3B:86:C0:24:FA:5D:71:F0:BA:77:AA:34:99:97:20
Authority key identifier: EF:51:B3:87:52:62:FA:41:6D:8E:ED:E9:B9:01:2E:48:2E:86:E9:08
Certificate issuer: /CN=ef51b3875262fa416d8eede9b9012e482e86e908
Certificate serial: 01A12CFBC645DAE9DD54C9260CD3AFDE8EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71Gzh1Ji-kFtju3puQEuSC6G6Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft
Manifest number: 01AD
Signing time: Sun 11 Oct 2026 22:01:00 +0000
Manifest this update: Sun 11 Oct 2026 22:01:00 +0000
Manifest next update: Mon 12 Oct 2026 22:01:00 +0000
Files and hashes: 1: 71Gzh1Ji-kFtju3puQEuSC6G6Qg.crl (hash: /cdiu2sciWQl/VNuijSRhgAmMf7260UBFmL4NzXaSoc=)
2: WE6dCj7x0gJX4CBgsBBV4qD6kks.asa (hash: Ik9fu30Prhl5cLZ5Dpjdp1/bctc/vb9Xl0Pi2G12sXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/71Gzh1Ji-kFtju3puQEuSC6G6Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:fb:c6:45:da:e9:dd:54:c9:26:0c:d3:af:de:8e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef51b3875262fa416d8eede9b9012e482e86e908
Validity
Not Before: Oct 11 22:01:00 2026 GMT
Not After : Oct 12 22:01:00 2026 GMT
Subject: CN=313bcead9b3b86c024fa5d71f0ba77aa34999720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:dc:2f:d5:48:ca:82:b9:53:09:67:c1:b3:
7e:9a:18:e3:9b:d4:d3:50:6e:54:67:4f:95:73:c6:
2d:e7:d2:3b:7f:e9:d7:85:f4:2f:45:51:e3:80:73:
3c:b6:92:e6:92:a3:e9:a9:0b:fb:c9:12:da:be:9c:
d8:22:bf:0b:55:b9:b1:af:f4:48:c2:28:79:a5:20:
3e:46:c4:1e:7a:b4:b4:85:d7:c1:6a:5b:4b:f6:7c:
ce:1a:71:f5:71:f3:20:43:69:2c:6b:ae:d3:c7:fe:
68:b6:3b:c3:a2:29:56:28:46:06:2a:1f:a3:b8:d9:
fa:cc:be:69:fc:cf:f7:83:91:1e:78:fc:18:82:27:
ff:da:2b:cb:7f:a4:05:53:5e:cc:d3:60:61:b5:77:
79:0f:0d:d9:50:04:b3:82:dd:28:cb:9d:8c:a3:54:
45:fa:e6:6d:21:d5:e7:9f:be:f1:8f:f2:d9:95:d9:
6a:2f:1f:41:88:2d:0a:9a:75:ff:79:c3:86:e8:a2:
6e:1d:30:e3:31:7c:76:23:ab:55:18:f0:90:46:6c:
29:9a:9f:c4:bf:64:3c:1b:85:e5:86:fa:03:00:61:
ea:5f:86:5f:b6:eb:a1:a5:7b:ca:f8:57:ed:11:a1:
01:22:53:6d:29:51:8c:4f:0b:17:16:19:6f:0a:b2:
ed:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3B:CE:AD:9B:3B:86:C0:24:FA:5D:71:F0:BA:77:AA:34:99:97:20
X509v3 Authority Key Identifier:
keyid:EF:51:B3:87:52:62:FA:41:6D:8E:ED:E9:B9:01:2E:48:2E:86:E9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71Gzh1Ji-kFtju3puQEuSC6G6Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ed:7b:5b:36:e9:eb:f2:be:e6:86:e9:ba:d1:8d:4b:0d:a3:
8a:d1:bc:36:20:e5:cb:8b:63:80:b6:c9:d2:37:93:86:ec:cc:
06:6a:a8:c6:48:3b:f2:e6:16:08:96:81:a8:19:00:6f:86:e0:
8d:35:3f:b0:01:3e:7b:5f:15:77:85:7b:9e:89:d0:80:16:4e:
7a:a9:b3:53:84:13:20:8c:60:24:61:0c:77:32:30:1e:ec:ad:
d5:d5:33:1a:10:84:f4:07:b5:8f:15:f8:fe:87:ef:3a:7e:71:
5f:af:a0:35:9b:ef:3c:a2:06:00:98:c7:a5:88:bc:35:20:8f:
b0:fc:9f:36:3a:f1:40:71:98:b4:88:c8:8c:81:73:28:22:68:
76:fa:95:3c:e4:1c:4f:4c:df:1a:9f:c0:c9:64:b6:37:61:59:
af:31:0c:1a:6e:85:2f:6b:e3:14:79:8e:37:f0:09:1d:40:ce:
96:77:cd:dc:4e:4d:7f:35:2d:71:bf:95:4b:42:ce:43:c1:7c:
9b:76:b7:d7:74:e6:dc:b7:08:b7:06:bc:b7:4d:fc:be:07:e7:
14:d2:6c:97:69:da:23:1a:c2:14:18:f9:5f:74:29:b4:27:a0:
75:11:89:51:59:e5:fb:ad:85:d7:48:b8:d5:0b:ee:3b:98:c4:
7d:6d:89:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:18:13 2026 by rpki-client