Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
File: 52px9rqT9s9H6zF7K_0EnVzDl2A.mft (raw, json)
Hash identifier: aaILcHl7hNyBgRc8qhNQPaGtnk2XosLSFmn2Zhh4eVQ=
Subject key identifier: EE:61:4F:F3:46:25:3E:80:4F:33:AC:AF:F6:28:E4:A4:96:78:4C:C6
Authority key identifier: E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
Certificate issuer: /CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Certificate serial: 019EBE47CDE543FDB0D0090AD5BEE5FF7EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
Manifest number: 0D65
Signing time: Sat 13 Jun 2026 00:00:37 +0000
Manifest this update: Sat 13 Jun 2026 00:00:37 +0000
Manifest next update: Sun 14 Jun 2026 00:00:37 +0000
Files and hashes: 1: 52px9rqT9s9H6zF7K_0EnVzDl2A.crl (hash: lcvNacRaJ+kgbq2ZwSwGNQixzd7KmHlWlfHI6xH4dKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:cd:e5:43:fd:b0:d0:09:0a:d5:be:e5:ff:7e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Validity
Not Before: Jun 13 00:00:37 2026 GMT
Not After : Jun 14 00:00:37 2026 GMT
Subject: CN=ee614ff346253e804f33acaff628e4a496784cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:f9:b4:ca:68:fc:6c:23:57:84:da:06:9e:
1c:b6:9e:55:af:0c:e6:42:c4:c1:2d:29:4e:cd:7a:
50:d9:95:b4:35:68:7d:a2:fe:da:4f:fa:6c:66:c5:
9f:a1:28:ae:3e:9f:5b:e1:d1:b6:13:f2:05:d3:5b:
c3:76:9e:40:6a:b1:b3:f3:52:d6:51:7c:17:b4:b2:
6e:65:65:d7:63:2d:0f:2b:c7:14:33:90:0d:72:a0:
d3:d6:93:a4:e2:ca:3e:c7:94:7d:49:24:77:72:1f:
2a:81:00:00:dd:63:2a:34:05:ab:aa:7c:f6:09:67:
c6:d0:bc:a6:72:91:8a:23:d1:3a:57:e1:01:c2:a7:
9a:1e:cb:2d:e9:ba:b2:ca:aa:02:61:33:46:b0:cb:
60:6c:62:72:8e:ec:11:5f:ea:9d:ca:f6:06:01:71:
d6:99:2a:0e:c0:3d:dc:36:ac:5d:4b:36:8e:e8:c3:
43:09:99:89:7e:d5:5d:0c:aa:67:f4:3a:55:e1:6c:
dd:3d:ca:06:bc:82:2b:89:e0:21:84:69:9a:3e:92:
7a:2c:6c:5b:e9:35:f4:b4:90:89:78:ff:b4:38:02:
dc:e1:ef:98:4a:50:30:8d:5b:ae:06:64:a7:82:19:
3c:14:7f:34:2a:2f:11:76:1d:56:8f:ce:2b:42:17:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:61:4F:F3:46:25:3E:80:4F:33:AC:AF:F6:28:E4:A4:96:78:4C:C6
X509v3 Authority Key Identifier:
keyid:E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b1:59:a6:ee:88:c6:65:f1:88:17:c6:23:11:bc:15:5e:ef:
bd:ec:c0:29:6a:28:59:5b:5a:1e:92:2f:96:a2:85:f4:bf:43:
82:a1:49:51:0f:6c:e2:7d:ef:d6:a0:45:b4:71:ae:a5:b9:c2:
a8:00:78:46:9f:4e:68:68:1f:f7:4a:12:f0:b9:30:06:24:cb:
f5:90:2d:bc:45:64:bd:cd:ff:a3:d5:cd:67:f5:e4:3a:d9:d9:
6b:68:81:34:0c:de:a0:dd:f5:b9:67:42:be:f4:f1:c2:d8:c9:
6e:a5:bf:53:f4:66:16:64:9c:84:01:8d:48:82:2b:05:ff:d6:
da:dc:e1:22:44:64:bb:c9:fb:10:fb:18:14:91:3f:2a:12:73:
76:d7:b5:51:a0:c6:34:37:34:2a:e5:7c:13:91:5c:7c:58:49:
5e:32:79:91:2f:c8:74:e2:33:6b:47:50:0e:c0:c9:90:5d:cd:
22:09:2a:c0:75:c8:ff:a9:77:fc:49:cc:ca:8f:80:20:d8:f7:
2c:c6:24:9d:c1:09:2c:69:53:59:60:e1:46:92:ab:b2:4b:a0:
4b:05:77:01:de:5c:d1:0a:74:97:30:a9:88:e0:a2:94:e4:fa:
bb:45:1e:c1:e1:f6:b6:52:2f:34:e6:3a:af:09:48:97:c7:04:
2d:67:b6:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+R83lQ/2w0AkK1b7l/37AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NmE3MWY2YmE5M2Y2Y2Y0N2ViMzE3YjJiZmQwNDlkNWNj
Mzk3NjAwHhcNMjYwNjEzMDAwMDM3WhcNMjYwNjE0MDAwMDM3WjAzMTEwLwYDVQQD
EyhlZTYxNGZmMzQ2MjUzZTgwNGYzM2FjYWZmNjI4ZTRhNDk2Nzg0Y2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFH5tMpo/GwjV4TaBp4ctp5Vrwzm
QsTBLSlOzXpQ2ZW0NWh9ov7aT/psZsWfoSiuPp9b4dG2E/IF01vDdp5AarGz81LW
UXwXtLJuZWXXYy0PK8cUM5ANcqDT1pOk4so+x5R9SSR3ch8qgQAA3WMqNAWrqnz2
CWfG0LymcpGKI9E6V+EBwqeaHsst6bqyyqoCYTNGsMtgbGJyjuwRX+qdyvYGAXHW
mSoOwD3cNqxdSzaO6MNDCZmJftVdDKpn9DpV4WzdPcoGvIIrieAhhGmaPpJ6LGxb
6TX0tJCJeP+0OALc4e+YSlAwjVuuBmSnghk8FH80Ki8Rdh1Wj84rQhcDzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5hT/NGJT6ATzOsr/Yo5KSWeEzGMB8GA1UdIwQY
MBaAFOdqcfa6k/bPR+sxeyv9BJ1cw5dgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJweDlycVQ5czlINnpGN0tfMEVuVnpEbDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8yZjY5NDQtYjFmNy00OWJiLWJmZTct
YTM5MGYzY2UzYTU2LzEvNTJweDlycVQ5czlINnpGN0tfMEVuVnpEbDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8yZjY5NDQtYjFmNy00OWJiLWJmZTctYTM5MGYzY2UzYTU2
LzEvNTJweDlycVQ5czlINnpGN0tfMEVuVnpEbDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7FZpu6I
xmXxiBfGIxG8FV7vvezAKWooWVtaHpIvlqKF9L9DgqFJUQ9s4n3v1qBFtHGupbnC
qAB4Rp9OaGgf90oS8LkwBiTL9ZAtvEVkvc3/o9XNZ/XkOtnZa2iBNAzeoN31uWdC
vvTxwtjJbqW/U/RmFmSchAGNSIIrBf/W2tzhIkRku8n7EPsYFJE/KhJzdte1UaDG
NDc0KuV8E5FcfFhJXjJ5kS/IdOIza0dQDsDJkF3NIgkqwHXI/6l3/EnMyo+AINj3
LMYkncEJLGlTWWDhRpKrskugSwV3Ad5c0Qp0lzCpiOCilOT6u0UeweH2tlIvNOY6
rwlIl8cELWe2ig==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:33:35 2026 by rpki-client