Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
File: 76AvL3KWXJ4cmy1X6j_BL8-skQM.mft (raw, json)
Hash identifier: W49mhXgFpSlUUgZdAdhcD3wOrEmHJz61rD7gnOq2fSs=
Subject key identifier: D5:BF:FB:78:38:8E:52:F4:D7:35:9D:A9:B5:9A:58:75:3F:21:22:1C
Authority key identifier: EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
Certificate issuer: /CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Certificate serial: 019D38D368EEFEBD6242CCEE223EC3AB2363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 09:01:12 +0000
Manifest this update: Sun 29 Mar 2026 09:01:12 +0000
Manifest next update: Mon 30 Mar 2026 09:01:12 +0000
Files and hashes: 1: 76AvL3KWXJ4cmy1X6j_BL8-skQM.crl (hash: v7owQkokVEnO9X5LI3jHE/VlJK7QxMkxcAUg5+DIMW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:68:ee:fe:bd:62:42:cc:ee:22:3e:c3:ab:23:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Validity
Not Before: Mar 29 09:01:12 2026 GMT
Not After : Mar 30 09:01:12 2026 GMT
Subject: CN=d5bffb78388e52f4d7359da9b59a58753f21221c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:47:64:3d:78:56:ca:ff:ec:11:91:d0:af:04:
3e:08:9c:09:20:38:1e:52:f7:76:ad:f7:15:a5:dd:
11:a6:47:a3:ff:68:c6:4e:eb:1f:55:7d:c6:f1:e9:
63:85:a4:85:cf:68:d9:b4:22:99:61:3e:53:9f:b5:
71:b2:53:b5:0f:80:05:c5:7a:2d:8a:74:0a:87:8f:
f3:d6:79:1a:f9:19:86:b1:7a:9d:8d:58:65:da:1e:
33:06:1e:4a:ab:c2:c1:c9:98:29:cf:ca:91:b9:ea:
84:d2:ca:f9:cc:90:1e:cc:5f:cc:b1:22:33:15:07:
a5:f5:94:86:cd:6a:2c:39:b9:8a:cb:a4:e4:d1:3f:
65:5c:58:89:c7:d3:f9:a0:e5:d4:65:fb:db:42:ef:
1f:fe:2a:91:e5:97:10:24:f5:94:8e:e3:5f:d2:ae:
9d:d7:31:19:a0:fc:fb:25:e8:e7:27:9d:9f:fc:4b:
52:1d:e4:e1:dd:42:84:63:16:be:4a:ac:c8:03:2d:
fe:82:64:9a:9d:27:05:c2:96:51:b2:1d:40:30:bf:
be:12:54:74:76:8f:9c:18:d5:6b:32:04:ea:d7:c0:
18:2d:13:21:32:ad:2b:43:ec:7d:96:b9:a3:b7:ed:
93:fe:0c:52:10:ac:3d:64:51:36:89:89:89:34:42:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BF:FB:78:38:8E:52:F4:D7:35:9D:A9:B5:9A:58:75:3F:21:22:1C
X509v3 Authority Key Identifier:
keyid:EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fa:0b:b9:a1:25:66:3b:d5:75:81:65:31:f3:d2:3a:e2:c8:
cf:1d:3a:a9:c1:48:82:7b:6a:88:1f:74:b5:4e:b5:eb:bb:f6:
02:b6:37:03:01:d5:3a:f7:05:a9:90:c8:a5:c7:70:c1:2a:14:
03:71:c4:df:5f:55:25:c7:fd:3c:e4:fa:80:96:ef:68:10:e2:
0b:27:ad:f8:de:67:5b:02:8e:58:c2:2c:76:0c:c6:66:4d:92:
0f:43:c3:0b:ba:34:7c:53:9d:21:19:96:b2:c4:1f:03:a2:c2:
ec:4f:7b:f9:28:6c:6e:c9:3c:8b:d1:c8:a3:f6:eb:b7:5a:b5:
3f:71:00:80:75:2c:2f:1e:c6:b4:2d:d3:33:bc:4e:62:0a:13:
09:28:3d:04:a0:9f:d6:6f:0a:1b:2d:51:ff:7c:ad:e8:bd:c8:
63:af:e3:b8:8e:9e:a6:0e:03:2e:32:8d:0a:06:15:58:22:dc:
e5:77:43:fb:d3:13:fa:1b:cc:09:21:79:12:b8:82:eb:15:8d:
ec:f3:e5:dc:29:c6:8b:b0:f6:ce:15:1f:0a:9c:d2:83:b1:83:
1c:47:39:95:46:57:37:b6:8c:13:9d:44:49:4a:50:f6:91:9b:
ec:36:83:8d:62:60:0c:4c:3a:50:1c:e1:05:bd:24:fe:3d:1a:
1c:8c:8e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:35 2026 by rpki-client