Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
File: 56lS7y1xM0iHgHhFONttuGLsBAg.mft (raw, json)
Hash identifier: Q0vNtN73OfI6YtdtElAezJmUKIREUCRylutMk0RFEZ8=
Subject key identifier: 89:66:ED:6E:FB:C6:07:FC:1A:13:B0:13:45:67:0A:42:B4:E8:D7:00
Authority key identifier: E7:A9:52:EF:2D:71:33:48:87:80:78:45:38:DB:6D:B8:62:EC:04:08
Certificate issuer: /CN=e7a952ef2d7133488780784538db6db862ec0408
Certificate serial: 01A05A45A9C6B6438EA67750923999F1FD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
Manifest number: A8
Signing time: Tue 01 Sep 2026 00:01:49 +0000
Manifest this update: Tue 01 Sep 2026 00:01:49 +0000
Manifest next update: Wed 02 Sep 2026 00:01:49 +0000
Files and hashes: 1: 56lS7y1xM0iHgHhFONttuGLsBAg.crl (hash: yHTFIjuKQ5YsZqtoXJ2ziU48ClXAIWnyhGE69xWddLg=)
2: f1R_KVw6pDr-4luASuZxDgTRs54.roa (hash: pyivi44WDU8Xyy/kj2UqLPdU3p7h7jqHwHgFp3gleyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:45:a9:c6:b6:43:8e:a6:77:50:92:39:99:f1:fd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a952ef2d7133488780784538db6db862ec0408
Validity
Not Before: Sep 1 00:01:49 2026 GMT
Not After : Sep 2 00:01:49 2026 GMT
Subject: CN=8966ed6efbc607fc1a13b01345670a42b4e8d700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:56:f5:9a:1c:c0:44:68:75:ae:f9:ea:bb:38:
05:66:18:2b:4e:45:9e:8b:24:e2:5e:03:0e:bf:1c:
35:e7:49:32:be:56:05:ed:4a:63:05:53:e7:4f:bf:
cc:7e:95:5d:70:dd:ec:84:76:51:9f:21:d3:eb:2b:
37:e6:d9:cb:ae:de:61:14:e2:81:54:d9:2e:8f:74:
3e:f7:88:77:de:f4:3f:92:b5:14:52:ec:6b:80:6e:
53:19:75:27:f9:47:e8:ea:7a:45:a9:e7:e0:7e:c1:
bf:da:27:e1:71:d1:b0:98:91:6f:4b:5c:c1:c2:96:
0b:0f:aa:ae:6f:ec:23:7c:01:ee:f8:4d:a0:6e:1e:
32:51:a3:67:10:d9:fe:77:48:b7:f2:1b:7b:25:2f:
88:f7:f0:a2:ff:c8:66:5c:20:f1:a2:fa:e3:ce:5a:
69:0a:22:5f:15:5b:dc:e6:ad:a9:32:ba:a2:ea:ba:
d4:c3:0e:ef:35:a9:bd:c4:af:e3:1d:61:88:8b:98:
90:0d:93:88:8d:41:95:5c:21:08:1f:b9:df:67:4a:
f4:06:f3:60:11:e2:72:ef:56:40:12:ce:4a:09:89:
5c:86:3d:4f:28:13:9c:ea:5e:49:33:c7:df:c8:1a:
47:9f:7b:1f:e0:a5:68:5f:02:d2:f4:18:2b:6a:e8:
26:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:66:ED:6E:FB:C6:07:FC:1A:13:B0:13:45:67:0A:42:B4:E8:D7:00
X509v3 Authority Key Identifier:
keyid:E7:A9:52:EF:2D:71:33:48:87:80:78:45:38:DB:6D:B8:62:EC:04:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:02:80:74:11:8a:35:20:3b:65:02:ef:a3:02:5e:ed:2f:55:
84:b8:e0:13:ec:60:70:ce:29:50:b0:fc:72:5e:57:ab:3f:1c:
2f:e0:09:0a:ab:11:7c:3e:0e:89:e6:25:eb:05:ba:0b:a2:ac:
be:f2:d5:c3:bb:78:77:68:0c:35:02:b1:0e:bd:6b:38:b4:2f:
a7:03:1b:a8:a4:d5:13:6e:e4:bf:74:d7:52:aa:44:ed:be:f8:
3f:84:84:df:39:f2:18:c8:16:5e:8e:58:a5:36:57:0f:0f:b4:
df:82:dc:8c:29:60:a9:fe:34:77:8d:b7:f2:d8:ff:d5:11:15:
c9:76:fc:31:1d:d6:7c:ea:c1:77:5b:72:73:33:1d:a8:92:ce:
1c:04:2d:a2:38:7e:b5:1b:6b:b9:cd:5c:9f:cb:92:50:55:eb:
d6:a9:d4:fd:ea:60:f3:80:87:77:ec:d3:b1:75:8a:60:50:21:
d4:2b:14:af:1d:58:30:c1:af:8e:68:ca:b4:27:20:ba:a6:0e:
12:26:88:43:7b:d0:90:59:45:ca:99:45:f6:a9:34:c4:d9:1c:
86:f4:01:da:e0:98:09:f9:b3:d2:65:8c:ce:97:86:62:3a:1d:
e5:11:30:e4:e6:89:a8:e9:f5:32:fc:17:ae:d7:d6:30:a8:9c:
81:4c:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:41:38 2026 by rpki-client