Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
File: 52vcVigM5dn89QMlGKfsm2HizO0.mft (raw, json)
Hash identifier: tRb5PnW5RyN4GWNZ/aFdvvul8RlknSA7vAlynYX6xE0=
Subject key identifier: 43:B7:5E:91:F3:77:10:B4:07:02:E1:6C:27:81:69:69:82:32:18:3A
Authority key identifier: E7:6B:DC:56:28:0C:E5:D9:FC:F5:03:25:18:A7:EC:9B:61:E2:CC:ED
Certificate issuer: /CN=e76bdc56280ce5d9fcf5032518a7ec9b61e2cced
Certificate serial: 019FAA19F73949C46531F2CF1C84305AB39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52vcVigM5dn89QMlGKfsm2HizO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
Manifest number: 149C
Signing time: Tue 28 Jul 2026 19:00:55 +0000
Manifest this update: Tue 28 Jul 2026 19:00:55 +0000
Manifest next update: Wed 29 Jul 2026 19:00:55 +0000
Files and hashes: 1: 52vcVigM5dn89QMlGKfsm2HizO0.crl (hash: dYwuXLVxOG0k3DXWtH+EgH3E0+9bwXrOvpegjlEeZqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/52vcVigM5dn89QMlGKfsm2HizO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:f7:39:49:c4:65:31:f2:cf:1c:84:30:5a:b3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76bdc56280ce5d9fcf5032518a7ec9b61e2cced
Validity
Not Before: Jul 28 19:00:55 2026 GMT
Not After : Jul 29 19:00:55 2026 GMT
Subject: CN=43b75e91f37710b40702e16c278169698232183a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:06:2c:51:8b:d2:25:3d:60:db:57:80:12:6f:
df:0f:e4:ea:15:0e:b4:f2:0b:76:1a:9b:9e:86:73:
a6:30:31:b2:9d:4f:d0:d2:7d:b0:df:23:6f:14:ce:
52:56:18:dc:54:64:b2:ec:b4:2f:1b:95:38:ef:29:
80:8d:e1:d9:18:aa:b3:f0:57:cd:a4:33:35:0f:e6:
77:7e:82:cd:7d:4a:ce:90:42:32:3a:75:a4:2e:7c:
7a:e6:be:51:89:53:26:b6:f7:ab:3b:24:15:69:48:
57:d3:1b:27:bf:1d:ae:90:0a:88:f5:d8:52:00:3f:
fe:3e:a7:46:f0:f5:6d:61:2b:11:ec:51:61:fc:34:
f0:2d:b7:88:78:b8:57:f4:27:5b:34:6a:63:fa:40:
dd:f1:98:7d:62:96:41:45:e0:30:ac:9a:36:f1:41:
10:cb:0e:23:b4:7c:2d:3a:e1:ef:1e:07:65:59:75:
93:79:0d:1a:dc:52:4e:e9:f4:5f:c0:82:47:3c:0e:
97:72:01:27:83:10:f4:af:82:90:82:73:69:a8:b6:
58:fb:a5:24:aa:16:54:b0:dc:3c:f3:0f:41:63:c7:
00:1c:c0:bf:fd:74:2c:94:1a:9d:99:33:df:90:15:
de:65:13:4c:3c:cd:7b:2e:ce:4d:34:4b:e5:d4:1e:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B7:5E:91:F3:77:10:B4:07:02:E1:6C:27:81:69:69:82:32:18:3A
X509v3 Authority Key Identifier:
keyid:E7:6B:DC:56:28:0C:E5:D9:FC:F5:03:25:18:A7:EC:9B:61:E2:CC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52vcVigM5dn89QMlGKfsm2HizO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:9c:0e:de:da:6e:c9:ed:b7:74:71:af:06:2f:19:84:e7:0a:
2f:a0:a0:c4:62:36:ce:b8:a0:9b:c2:de:d7:f9:82:30:9d:06:
d1:97:25:31:87:c5:c6:9a:f2:f3:5d:5c:9f:f2:6c:99:db:6c:
0a:88:2f:74:de:2b:18:9a:8d:1b:7d:52:a5:16:7a:52:0a:52:
2f:79:35:14:0a:83:b7:8d:75:61:4b:22:ba:25:4d:b9:4a:dc:
a7:c6:d1:4d:b2:ea:9f:d1:29:0f:98:03:ef:bb:63:6b:d7:79:
71:77:96:b2:b7:25:e3:98:55:77:b7:5d:3c:ce:2b:e0:b4:85:
23:f2:e6:8e:31:b4:18:5e:5a:47:7e:a9:a6:56:07:0e:9f:e3:
88:7f:59:d8:20:66:b7:42:8f:a4:71:a1:5f:a0:2d:68:b8:f8:
2d:b6:12:2a:f7:a0:c2:a9:25:ed:88:f1:42:c3:f0:02:f9:7f:
e2:f2:42:d3:0f:4e:b3:ef:b0:7c:c8:4c:2b:df:3a:4f:6c:e9:
2b:82:4a:17:20:70:44:ac:ad:7c:fe:d5:44:35:a0:9e:3a:19:
60:ea:2d:99:d6:06:67:e7:b9:b7:e7:28:60:03:37:83:b9:f8:
34:27:d4:db:1f:c2:1b:46:93:a7:73:52:38:22:78:de:24:5d:
a1:9c:e5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:42:03 2026 by rpki-client