Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json)
Hash identifier: HICj1fDWEgNzbCSjMuqFBhdaueDC5SvRpjBfOSyrJuM=
Subject key identifier: 1F:51:38:67:F3:EC:1D:BB:39:B9:A9:3B:8A:00:7F:99:12:1F:21:02
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 01A13E94EF833E4E15C04039E05A6833E670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
Manifest number: 0DA1
Signing time: Thu 15 Oct 2026 08:01:50 +0000
Manifest this update: Thu 15 Oct 2026 08:01:50 +0000
Manifest next update: Fri 16 Oct 2026 08:01:50 +0000
Files and hashes: 1: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: mU5PPwPZhfumHHUHCp0JwqsVawOequvaJKs0ancNN2U=)
2: Y1lnQU48zLMaZj5jjMNu1jqCpH0.roa (hash: 7uDt9sXJ9Vu86jMv8zfP4uTHUwIIxRFk4x+ECZ536qo=)
3: aHre3p3mljnQo6pgr_PAHWNasWI.roa (hash: jfHBeKOKc5HfS6IdGbqjCGEVckZ/9KBZc/hoke7dPEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:ef:83:3e:4e:15:c0:40:39:e0:5a:68:33:e6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Oct 15 08:01:50 2026 GMT
Not After : Oct 16 08:01:50 2026 GMT
Subject: CN=1f513867f3ec1dbb39b9a93b8a007f99121f2102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:88:41:5f:ad:2f:60:37:15:a2:fc:39:71:
2c:b2:4d:78:a4:66:0b:4d:eb:f8:44:2a:99:ff:cc:
00:2a:a7:ec:eb:f9:b3:8b:c6:55:ce:b4:0b:8d:86:
d3:66:22:12:3b:21:41:20:54:de:81:c8:8f:9e:da:
8a:0c:e5:47:c1:50:53:3b:26:59:84:8c:df:b7:d2:
f3:95:af:a5:e8:2f:21:22:31:39:d3:bb:65:77:8f:
55:00:39:4a:76:6e:45:d1:ba:3b:d1:57:73:13:97:
7b:00:af:39:e7:8f:02:c2:de:d0:16:13:a9:d4:64:
70:e5:41:8a:49:c3:4f:5d:ac:b5:53:27:ec:b7:98:
4b:a1:fb:40:0d:44:9a:6d:be:3d:5c:50:0c:4f:68:
b2:5d:9f:94:a3:6e:66:94:dc:1f:f4:b6:6f:8b:c9:
d6:f5:d4:cf:25:8c:2a:cd:e3:ad:67:5a:e9:3e:7c:
a1:16:43:a5:5f:da:1f:38:35:b8:21:e4:8a:74:06:
4b:0b:49:e6:48:bc:02:2b:3b:88:ed:4f:5b:58:22:
7e:a2:f8:39:9e:a0:59:92:26:ad:e6:24:43:9d:6e:
06:78:de:11:b0:02:5b:28:52:ad:7c:7c:64:50:70:
ce:f0:65:12:1e:aa:6b:b8:ba:24:63:55:4b:f5:05:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:51:38:67:F3:EC:1D:BB:39:B9:A9:3B:8A:00:7F:99:12:1F:21:02
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bc:3b:4a:ae:cc:11:cd:a7:50:45:d8:65:80:c9:2b:97:9a:
c9:21:06:9d:6f:58:20:10:db:8f:a8:cc:5b:de:64:30:bd:dd:
d8:e7:f3:ff:57:fb:2c:a0:c4:2c:7b:08:2a:c0:a1:38:15:1c:
0d:53:f6:1f:47:b6:3b:a8:fb:37:77:b4:35:36:7f:4d:77:5c:
c0:ae:d7:0a:38:8c:a7:7f:64:00:f9:c9:b9:a9:4e:93:fa:49:
92:36:60:bf:eb:dc:be:88:f7:bc:20:1b:f6:6a:a1:54:95:77:
f0:e0:b9:12:8c:f0:13:2c:d0:5d:6f:c0:65:d8:dd:bd:2a:08:
b6:3a:69:2c:ae:40:d7:a4:43:6a:26:56:25:f6:92:4c:4a:20:
06:96:2c:b3:fb:88:5e:60:6c:30:5a:7e:e6:88:25:03:30:98:
c4:a7:4e:72:b1:56:87:34:29:57:df:2d:c3:b4:3c:17:bf:eb:
48:52:3b:67:75:e4:d2:5c:01:56:4a:c8:8f:32:9f:d5:b3:e3:
50:0d:ba:db:cb:27:58:3e:8b:da:9a:2a:72:c5:7f:b7:64:ac:
b3:b4:a3:f8:d1:71:45:0a:af:b5:ef:65:48:f2:15:b8:1e:d5:
c0:48:ff:11:55:5a:5c:36:ca:1b:53:15:c4:d0:27:cb:3a:fb:
b3:f4:61:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:04 2026 by rpki-client