Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
File: 53ltjBnzKhyvvVt49Sds6N-ZXQo.mft (raw, json)
Hash identifier: L/KasyQR3kzL0WAnStW6jvGylyNi2Vr7V0nTalkXJwI=
Subject key identifier: 87:6C:8F:95:0B:5C:52:AB:A2:83:23:AC:72:88:DC:EC:6B:0C:79:01
Authority key identifier: E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
Certificate issuer: /CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Certificate serial: 01A001A6071B8DE19D1A09583E0A518BD6C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 19:00:53 +0000
Manifest this update: Fri 14 Aug 2026 19:00:53 +0000
Manifest next update: Sat 15 Aug 2026 19:00:53 +0000
Files and hashes: 1: 53ltjBnzKhyvvVt49Sds6N-ZXQo.crl (hash: nqCXYR5dgKc5cOZDN3Y+RNED6+lBig5G+u72Qdc1we0=)
2: D4ylrio1wtOKejkm6w9gAvQAe9Y.roa (hash: 8e3cUg43lYO4QgRug3qrBfXB7M63c6tSerUcL1Eq+FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:07:1b:8d:e1:9d:1a:09:58:3e:0a:51:8b:d6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Validity
Not Before: Aug 14 19:00:53 2026 GMT
Not After : Aug 15 19:00:53 2026 GMT
Subject: CN=876c8f950b5c52aba28323ac7288dcec6b0c7901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:12:7a:f2:46:84:2f:0f:13:a6:76:f7:d8:e5:
7c:68:a0:ef:49:06:32:95:29:90:49:e7:13:99:1d:
9b:eb:09:16:40:96:81:b8:1f:ba:2b:d9:b3:c3:cd:
48:2a:11:8e:88:90:a4:dc:c2:2d:ef:06:e9:b5:fb:
46:b5:0a:dc:5c:65:88:34:be:e6:b5:16:39:79:4e:
9b:67:b0:c6:bc:e7:30:42:8f:eb:2c:12:5e:78:19:
68:57:94:a5:78:20:1e:80:ad:7e:92:34:b4:5f:4e:
61:14:1b:ad:97:73:2e:d1:6c:76:12:a9:e1:bf:b5:
8f:c4:7a:68:d8:ab:34:af:73:ef:66:10:4a:90:d6:
74:94:8f:db:f8:07:7a:93:79:aa:29:e1:34:da:2a:
40:db:d4:e3:e8:d0:1a:f6:fb:73:55:4b:85:d0:46:
c1:2a:81:e2:83:af:a8:94:8f:3c:f2:68:af:2a:c5:
54:3b:2d:12:5f:68:a8:4b:c1:d7:2d:d7:93:b3:b5:
76:14:05:b4:b7:71:b0:14:01:c7:51:32:16:02:03:
7d:06:db:8f:e0:69:ac:13:49:21:5b:50:81:d2:d9:
7b:ae:6a:3f:8e:e4:84:22:8a:3c:4e:31:b9:bf:29:
32:17:b0:a0:1e:01:9f:ce:f4:12:e4:86:03:8c:f0:
50:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6C:8F:95:0B:5C:52:AB:A2:83:23:AC:72:88:DC:EC:6B:0C:79:01
X509v3 Authority Key Identifier:
keyid:E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6d:1e:16:c8:e8:ab:8b:ae:de:99:bb:6d:21:26:98:a6:b0:
d0:8b:d6:d3:c1:d1:01:19:40:b2:44:6d:7e:5c:c3:4d:f8:90:
31:3a:d5:1d:2c:2b:84:f1:de:a0:c5:5c:37:4f:c3:58:da:3e:
73:0a:f6:f9:1d:81:c4:41:d5:a4:27:77:e5:97:82:6c:14:13:
96:5b:ef:6e:3e:7d:44:e6:02:4e:98:b4:11:4d:3a:e2:d2:26:
78:45:70:d7:d6:fb:85:d1:49:52:f0:6b:26:d8:aa:c3:fd:d1:
b9:e7:60:37:e7:63:10:cf:70:e2:fd:0b:b0:c3:96:43:aa:0b:
1f:59:01:f3:8c:d9:db:15:41:a8:ec:0e:b0:ff:44:06:d7:fa:
ee:b5:e8:29:25:8e:f8:bf:03:66:1b:6a:e7:73:d8:70:b7:91:
f7:de:fc:01:4b:44:4f:42:46:e1:5b:27:0a:68:7a:22:74:8e:
dd:51:70:49:78:de:05:d6:9b:f2:7e:08:b8:fb:9b:b4:0d:86:
4d:07:df:01:61:07:2f:57:f7:3f:6e:21:d7:28:2a:2c:52:c4:
e4:f6:03:9d:33:33:99:11:67:98:cb:9e:03:34:ed:14:56:12:
a2:a0:a8:09:32:8a:8a:8a:85:62:33:a7:ee:88:e7:62:67:0d:
7f:32:a7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:23 2026 by rpki-client