Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
File: d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json)
Hash identifier: Nw6Jfsk7sMoLNw91oDpTogotTAvykZ0GdEnIl5kBA+c=
Subject key identifier: BE:87:BA:22:A4:B0:53:4A:56:42:08:2E:11:8A:3E:42:6B:B7:C4:B8
Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1
Certificate serial: 01A0E7AE5ABD5CC8497E82889CF8017F5826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
Manifest number: 1A76
Signing time: Mon 28 Sep 2026 11:02:38 +0000
Manifest this update: Mon 28 Sep 2026 11:02:38 +0000
Manifest next update: Tue 29 Sep 2026 11:02:38 +0000
Files and hashes: 1: _Pwzr4JbDzClR-Oc7yMcLt0gzyw.roa (hash: fAUaNNrGBFLsb8ziuClrT7k1PRw95F5PlNscHyG0c24=)
2: bFNRQE3pxcA4g-Rg8277J0Pfyvg.asa (hash: SZ5vK0kMUed0BXVDFve+JxQjn9uHdMp5dF2f6Za79JU=)
3: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: 8BrkAba2paktQ8wXHa70gFfewyneHoR5TPUasfy6BqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:5a:bd:5c:c8:49:7e:82:88:9c:f8:01:7f:58:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1
Validity
Not Before: Sep 28 11:02:38 2026 GMT
Not After : Sep 29 11:02:38 2026 GMT
Subject: CN=be87ba22a4b0534a5642082e118a3e426bb7c4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ba:a0:bb:59:55:f5:9d:57:68:de:af:32:99:
b9:fb:fb:fb:ab:a5:2e:61:8f:e2:27:b6:09:7a:fc:
df:f1:79:d2:db:e6:48:1c:8c:e6:48:60:23:82:e6:
32:19:ff:cc:c1:7c:17:39:1d:2f:43:7a:34:5c:83:
87:fc:bd:b3:30:3f:c2:bb:b1:1c:c4:f8:5b:9c:64:
e3:11:5b:48:57:af:e1:f5:0f:6b:8f:cc:17:de:fb:
3c:84:e4:45:a5:98:14:21:89:2f:e5:5b:da:74:c7:
69:2a:a5:aa:77:d3:56:ca:cf:7e:ce:f2:45:33:cf:
a1:b5:06:39:10:f2:b4:ea:c0:8c:ff:8b:2b:0d:31:
4c:5e:fc:cf:f6:db:55:6b:a1:8d:85:2b:af:20:ae:
1e:58:18:ab:53:fd:c3:d9:d1:d3:31:d6:4f:ff:7d:
b9:37:9e:36:9a:00:6f:88:5c:b4:21:98:d3:ef:4e:
17:52:2b:7b:77:78:6c:2f:d3:56:98:7f:d5:76:bd:
9f:76:25:08:cd:79:8c:2d:46:77:25:9f:aa:78:6c:
96:7e:1f:47:bd:98:c5:65:6b:75:7a:2d:35:d6:6f:
48:8f:3c:30:c5:ee:50:29:83:d6:54:3c:af:f9:72:
7b:27:56:02:08:06:93:43:a6:aa:1b:70:61:8f:4a:
58:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:87:BA:22:A4:B0:53:4A:56:42:08:2E:11:8A:3E:42:6B:B7:C4:B8
X509v3 Authority Key Identifier:
keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:13:b7:63:46:c3:0a:c9:d8:ac:40:95:20:38:44:0a:63:c2:
fd:1a:55:3d:a0:bb:b4:c1:91:2c:6e:15:e8:a2:5b:c6:4f:c7:
15:cd:4a:bd:d7:0f:f7:eb:37:de:4f:5c:3d:c3:8b:c7:f3:bd:
c6:4c:dc:dc:59:02:b8:ea:4a:1a:1f:00:7d:b6:bf:1e:62:03:
f0:d4:3e:da:96:43:8d:b9:48:f3:7f:c2:ce:2a:83:a1:e7:3b:
71:4c:34:b0:42:8d:59:bc:f8:2e:10:5a:16:74:d4:5c:d7:d4:
c0:96:b1:5d:4b:e2:d1:0d:13:ba:a7:06:c5:fe:f2:c2:a1:2f:
7f:4e:28:f9:ef:cf:a1:db:08:83:77:36:b0:20:3c:73:41:f7:
fc:17:5e:f4:29:f8:9f:19:4e:a8:85:e4:ce:42:2c:c0:61:c3:
ae:e9:f5:06:70:a4:b5:11:38:e4:cd:a6:87:d4:f8:08:39:bf:
73:7b:b7:a0:0b:71:c8:34:98:06:60:48:00:89:f8:a7:54:6c:
32:bd:da:a3:56:26:38:5c:74:37:64:b5:50:6d:82:9a:dc:21:
c3:04:47:7a:0b:85:f5:7c:94:b9:27:5c:e6:98:d2:15:78:38:
7c:37:ed:a5:e4:a1:dc:c3:70:e8:98:2e:1a:5e:61:de:b6:6f:
5e:77:30:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:32:45 2026 by rpki-client