Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
File: 52px9rqT9s9H6zF7K_0EnVzDl2A.mft (raw, json)
Hash identifier: 2/c31uerx2pKcr6P0WNTxmaWBEDT1L9kyeWwFhsQ44A=
Subject key identifier: F0:2C:51:C7:0F:45:FD:58:75:29:D5:D8:3D:DC:91:AA:C0:8B:5E:5A
Authority key identifier: E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
Certificate issuer: /CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Certificate serial: 019CAD22CD327C77306B4B11C0CC13939009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
Manifest number: 0C53
Signing time: Mon 02 Mar 2026 06:01:04 +0000
Manifest this update: Mon 02 Mar 2026 06:01:04 +0000
Manifest next update: Tue 03 Mar 2026 06:01:04 +0000
Files and hashes: 1: 52px9rqT9s9H6zF7K_0EnVzDl2A.crl (hash: NJ94R2R6vDFNI9mvnqOyDl9Q1jW7XEadeKaqJ9ibqIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:cd:32:7c:77:30:6b:4b:11:c0:cc:13:93:90:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Validity
Not Before: Mar 2 06:01:04 2026 GMT
Not After : Mar 3 06:01:04 2026 GMT
Subject: CN=f02c51c70f45fd587529d5d83ddc91aac08b5e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:c4:4a:77:ae:ce:ab:b1:8a:d3:29:11:0c:
f9:d4:d4:96:7c:71:f2:1d:b5:46:97:ca:a7:73:07:
9a:25:6c:bc:dd:8e:ee:d3:64:ec:dc:d3:d4:be:c9:
3d:69:61:99:e8:8d:92:fa:5c:65:ed:20:be:f6:c4:
73:9b:04:96:90:57:a9:75:d8:3f:35:36:8e:2e:d6:
14:ae:5e:d4:ea:4d:5e:5b:d1:75:6e:c4:14:5e:46:
9c:36:e9:70:16:18:9c:fe:d0:aa:f3:4b:cc:c6:a3:
20:47:e0:33:ba:57:5c:62:f8:c6:6b:7c:eb:bf:7e:
a1:46:75:61:18:4a:24:b0:4d:53:f0:f6:75:bc:e8:
a7:0d:b2:0d:17:a2:15:22:fb:80:3d:2d:74:9d:ab:
2e:50:80:e5:bc:a3:6b:c5:94:44:66:90:ef:78:d6:
db:d8:c3:a9:b6:2d:bb:cb:54:33:3a:b2:53:c2:66:
4a:2c:3d:34:d6:25:ac:57:b9:f5:22:ea:38:3b:c7:
64:c5:a4:dc:60:91:b9:b7:e4:91:7d:20:bd:c3:17:
4d:be:91:10:e7:ab:73:c1:e1:f9:24:a7:f8:1c:77:
58:6c:e3:b7:ce:ea:67:03:e6:8f:00:97:2c:8f:df:
34:3e:92:a1:0f:f2:0d:fe:66:a2:92:fc:c8:57:83:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2C:51:C7:0F:45:FD:58:75:29:D5:D8:3D:DC:91:AA:C0:8B:5E:5A
X509v3 Authority Key Identifier:
keyid:E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:db:36:98:4c:4a:72:43:07:c4:d8:0b:08:0c:43:e8:e4:3e:
d7:06:28:53:4e:e1:9c:db:e2:8e:da:bf:b9:80:6c:75:37:f4:
81:d9:6e:09:81:19:d2:2e:a5:5e:50:6c:18:f2:4e:8e:7f:4f:
26:d9:14:6f:27:3c:38:63:25:53:7b:40:87:ae:91:2a:e3:49:
37:c5:04:1c:5d:12:b0:72:da:be:51:1d:d2:dc:6f:ad:05:af:
d6:29:2c:bd:69:c8:d7:f4:0b:24:aa:29:0a:18:19:ab:00:8a:
50:03:20:11:f6:12:c9:1a:7b:91:d5:d1:f5:f3:25:c3:bc:77:
4a:df:99:94:2f:d5:2f:7d:42:a5:08:3d:d4:71:68:df:0d:f1:
34:3e:e7:24:af:2c:5d:c2:7e:31:18:10:66:59:fa:b4:35:77:
0c:78:4f:ad:0a:51:01:74:cd:f8:6f:a0:60:33:94:ee:b5:ba:
2f:db:09:70:4d:39:0b:e1:8d:d8:ec:bd:33:35:bb:ee:60:39:
39:e2:19:0b:87:ae:23:57:69:7e:7d:c7:41:fc:2c:df:33:a4:
57:a6:c4:c3:05:a8:94:07:8c:61:97:a2:36:64:5c:79:6b:8f:
b8:84:17:42:45:a7:ee:74:0b:72:a4:f2:12:5d:82:91:55:be:
37:fa:29:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:09 2026 by rpki-client