Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
File: 76W2I0ehtkzqSaKrOrSYPDSGH7I.mft (raw, json)
Hash identifier: aYimWUdrVmu5R4E3Gm6ZyTBHuYwcENt5G6vH17XxOhw=
Subject key identifier: 50:1A:5F:8E:F5:A4:75:50:9B:C5:B4:8B:6D:0D:BB:BD:55:5F:A2:33
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 019D1D92F8CF240749586371BF5BF18139EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
Manifest number: 02BF
Signing time: Tue 24 Mar 2026 02:01:04 +0000
Manifest this update: Tue 24 Mar 2026 02:01:04 +0000
Manifest next update: Wed 25 Mar 2026 02:01:04 +0000
Files and hashes: 1: 76W2I0ehtkzqSaKrOrSYPDSGH7I.crl (hash: NKq2/2C76hoatPcQlcTNVpX4grpkvboOErDK/G6YRx8=)
2: 9ml_vDT2d-jqiT0almrW1zTj91g.roa (hash: iCdcPeAL09pOgPTNT11aEGN+On0OQ3C0grDxHkWM7Ao=)
3: FoL3qyEY48cw05gLQhNBtfACHmc.roa (hash: yngu0V2+UyneI185UKcvs0YYxoSzgQOcyO77l7Bzxy4=)
4: TdySsF6nSwr-dhc2le7MQt8mmfo.roa (hash: Hl3h9XRsY3f/YfdL9fN3vN5Yw0EWEoNUgj337vGvxO8=)
5: V9bz-LIlrLlNcy_JnZK_x-nhl2s.roa (hash: EweRvUyQqzzdZsQlbOmurMzzeItcgxBnOe1Rf0PMP7c=)
6: WOK1iT_PCPPQV6sHVEx5Px_Y9fE.roa (hash: 94hNqjQI8cFTU6a6Kw0AEcP1Xdns+Wtf+3N07hYhGa0=)
7: fzWlLGEPBxz1DR-_ybKSosveito.roa (hash: PMju7hqmYk5olTtNec80dTLKx9r70k1T9axrJxxCFmQ=)
8: sDq5U53kui-SouGQwvgx88wuoqc.roa (hash: cLZsm7xp+yinJ4qALYPDYjVVs4ZwSgrcr5htqd8PthY=)
9: xVfc3l4EP7dhrtLcyRanOg0ot1M.roa (hash: xZO+gj3NO3PDe8x2SOyM664HUG69cn+y1nIklk8tHeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1d:92:f8:cf:24:07:49:58:63:71:bf:5b:f1:81:39:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Mar 24 02:01:04 2026 GMT
Not After : Mar 25 02:01:04 2026 GMT
Subject: CN=501a5f8ef5a475509bc5b48b6d0dbbbd555fa233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bf:87:7b:fa:36:64:28:9e:50:d2:74:75:cf:
1b:57:81:16:c2:55:4c:a5:70:10:1c:1a:e8:c8:cc:
e4:09:89:48:42:1a:a8:0f:1c:6d:5c:a7:f5:c3:72:
9c:90:e4:eb:30:d6:44:1e:68:44:45:fe:67:d3:b8:
67:3d:36:d6:13:cb:b8:c9:55:0c:4d:68:d8:b7:99:
a4:b0:74:c6:c6:85:85:24:ae:95:fe:a8:62:36:f1:
b5:6b:7e:b3:72:6b:ce:b4:e9:36:96:75:00:6b:86:
2a:68:3f:61:db:af:1a:18:48:16:d6:b7:7b:3b:dd:
28:f2:9a:cf:a1:7b:44:c9:55:14:ab:1e:82:04:62:
24:9b:19:e1:da:43:56:75:d4:01:88:fd:20:2d:9b:
28:53:a4:52:69:45:a8:42:ed:89:81:a1:91:4e:6a:
c0:90:ad:b4:ec:25:09:3f:f8:ef:a7:4e:68:f1:fe:
02:73:15:57:fc:53:23:08:76:41:42:fa:bb:15:16:
d8:55:d6:de:eb:bb:ce:b2:9e:16:d5:22:9c:c6:48:
0b:dc:62:86:a3:a4:13:2c:5d:2c:2d:2c:a7:2f:9d:
6e:5a:31:c0:75:06:a1:88:9d:19:77:da:26:65:6c:
2d:db:54:39:64:3a:96:19:6d:2c:12:91:8c:d3:77:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1A:5F:8E:F5:A4:75:50:9B:C5:B4:8B:6D:0D:BB:BD:55:5F:A2:33
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:69:b7:04:6c:59:2e:ae:51:c7:1e:09:19:ce:ac:42:90:c7:
12:a2:78:2e:f5:be:41:7b:d5:a7:7e:f2:04:bb:9d:e4:25:62:
6d:e9:b0:2b:54:65:7a:0d:e1:e6:d4:41:50:f5:75:fa:34:10:
ed:86:b0:c8:73:82:fb:e0:89:ec:fc:60:e9:7d:e0:ab:e6:1b:
ce:0d:f4:c3:25:0a:28:c6:12:8a:aa:6f:e5:94:d3:57:27:35:
c4:6e:47:9b:45:08:07:63:0d:f3:69:f6:a2:3b:d7:3a:14:3c:
fb:75:72:9c:6e:61:ac:3b:0a:1c:54:d4:93:c9:76:c2:8c:81:
89:92:34:0f:2b:56:54:97:70:d2:6b:5b:0c:e4:57:fe:98:7b:
93:06:80:c7:be:7e:e9:14:1d:bd:3a:bc:3f:5b:be:31:98:6b:
a2:ad:76:8b:53:ef:06:74:88:48:29:30:05:9e:6f:af:4e:3c:
f6:ec:a7:e7:8a:dd:e5:56:56:43:4f:56:cf:2f:ea:e2:bc:0f:
cf:e4:2f:08:ee:90:6c:05:c6:4e:82:b3:cd:10:29:26:7d:93:
4d:e2:46:22:4c:63:4c:f7:27:85:c7:41:fd:fe:a7:12:c3:40:
a8:34:4b:87:8e:be:fc:49:f6:8f:6f:ee:ca:39:2b:73:bc:54:
b1:8b:05:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 09:23:04 2026 by rpki-client