Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
File: 52vcVigM5dn89QMlGKfsm2HizO0.mft (raw, json)
Hash identifier: dOejnPaIY0LbPiYVe/P67Z72jvxZ0YnSJweBNeTlYqA=
Subject key identifier: 99:15:4F:43:54:8A:5B:01:C9:C9:65:9C:EA:68:E7:FF:72:E0:47:31
Authority key identifier: E7:6B:DC:56:28:0C:E5:D9:FC:F5:03:25:18:A7:EC:9B:61:E2:CC:ED
Certificate issuer: /CN=e76bdc56280ce5d9fcf5032518a7ec9b61e2cced
Certificate serial: 01A12879F9610E595C5D8923DD9AAE11B096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52vcVigM5dn89QMlGKfsm2HizO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
Manifest number: 1562
Signing time: Sun 11 Oct 2026 01:00:44 +0000
Manifest this update: Sun 11 Oct 2026 01:00:44 +0000
Manifest next update: Mon 12 Oct 2026 01:00:44 +0000
Files and hashes: 1: 52vcVigM5dn89QMlGKfsm2HizO0.crl (hash: g70P3n9r33VMkCHbv8iWMffyUtSi324YeRHyWussWYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/52vcVigM5dn89QMlGKfsm2HizO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:79:f9:61:0e:59:5c:5d:89:23:dd:9a:ae:11:b0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76bdc56280ce5d9fcf5032518a7ec9b61e2cced
Validity
Not Before: Oct 11 01:00:44 2026 GMT
Not After : Oct 12 01:00:44 2026 GMT
Subject: CN=99154f43548a5b01c9c9659cea68e7ff72e04731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:41:b8:72:60:32:e5:42:bf:65:98:ac:20:58:
08:a1:b6:50:40:9b:83:96:87:38:5c:66:38:f3:06:
65:bd:9a:26:13:e4:2e:60:be:ae:e0:39:eb:15:81:
49:eb:fb:2f:d3:76:c4:ba:e6:12:53:6c:a1:e9:9c:
99:bc:1a:b0:88:9c:8c:c9:33:98:53:38:48:75:4e:
56:d8:9d:60:cd:d0:92:82:6b:74:a4:47:9c:b0:2d:
24:08:95:81:49:f2:2b:4f:2e:fc:89:d0:a0:b6:ef:
c3:a7:05:c4:8f:63:95:27:8e:93:4b:44:0e:53:84:
1b:fa:f1:9c:50:9f:96:7f:81:06:ca:9e:f0:f9:e0:
05:d6:f9:76:7c:e5:1b:11:fe:2b:46:91:d9:47:19:
be:6f:5f:04:04:3b:8a:c4:06:28:4c:a6:df:b4:74:
33:aa:af:5e:1a:49:72:53:a6:7a:b2:43:13:45:68:
f3:3e:d5:c1:6a:42:02:75:23:94:bd:2e:9c:ec:a7:
2f:49:ac:17:b3:a1:b7:9d:47:8c:d8:f5:19:c0:62:
d5:5f:77:42:ee:48:c9:3d:87:11:76:17:42:d1:c9:
5d:72:f5:c1:85:73:c9:b0:f6:0e:38:fc:32:63:b4:
47:76:58:76:3a:b6:27:8d:23:be:0c:8e:53:e9:d9:
45:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:15:4F:43:54:8A:5B:01:C9:C9:65:9C:EA:68:E7:FF:72:E0:47:31
X509v3 Authority Key Identifier:
keyid:E7:6B:DC:56:28:0C:E5:D9:FC:F5:03:25:18:A7:EC:9B:61:E2:CC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52vcVigM5dn89QMlGKfsm2HizO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e8:63:dc:70:5d:3f:8f:63:16:01:15:fa:4a:b9:ff:2a:0e:
81:cf:0e:32:7c:39:2d:06:0f:d0:bd:92:1f:12:d2:21:8e:5b:
3a:42:d9:aa:5a:6f:f5:0c:97:d8:e5:bc:4f:41:7f:98:cf:40:
11:d0:14:b9:0b:a3:dd:7d:e1:9b:1a:e8:24:43:8f:05:a1:4f:
62:a5:29:ed:c9:f2:13:b3:31:a3:8f:15:e5:0d:ed:13:98:cf:
9d:fe:76:de:c1:92:34:5e:ba:78:89:b1:e3:8b:f7:3b:c5:1e:
ef:56:4a:61:97:f0:81:0e:9a:e9:48:d9:50:f6:0f:62:92:e6:
38:a1:31:40:03:f3:90:23:e7:99:25:ac:f6:25:db:9d:6e:1f:
f1:2a:fb:d4:03:7f:56:55:56:ce:67:1a:99:8e:46:92:84:1e:
51:40:19:8f:5a:9f:cd:c4:b9:3f:ff:80:96:20:e7:89:d9:9e:
be:12:80:8b:7c:d1:61:9f:ef:e4:d2:44:8d:d0:5f:02:12:ca:
6b:b9:a2:f9:19:f6:d0:fb:b3:cb:3b:b3:49:4a:6f:5a:5f:e4:
32:ff:71:30:0f:b9:a0:60:aa:67:5c:03:d5:11:a5:b0:38:b8:
37:8a:90:51:79:56:14:4a:97:93:95:67:a6:74:1d:ae:4e:88:
da:7c:d6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:22:51 2026 by rpki-client