Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json)
Hash identifier: Ey+vlgMyUrdwRGf3YAl5vxx815R4Gs496UrJ/bJ1EMs=
Subject key identifier: 57:78:1C:25:F3:3E:DB:04:52:A8:AF:36:32:C2:79:59:5C:4A:B5:A4
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 019D3940BEECE11D45CF022E59C7D65430C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
Manifest number: 0B8C
Signing time: Sun 29 Mar 2026 11:00:37 +0000
Manifest this update: Sun 29 Mar 2026 11:00:37 +0000
Manifest next update: Mon 30 Mar 2026 11:00:37 +0000
Files and hashes: 1: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: j/drdil9E6sDC6H/6Yzq2pKC/Wb1lsW4eVeue5XEHEg=)
2: Y1lnQU48zLMaZj5jjMNu1jqCpH0.roa (hash: 7uDt9sXJ9Vu86jMv8zfP4uTHUwIIxRFk4x+ECZ536qo=)
3: aHre3p3mljnQo6pgr_PAHWNasWI.roa (hash: jfHBeKOKc5HfS6IdGbqjCGEVckZ/9KBZc/hoke7dPEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:be:ec:e1:1d:45:cf:02:2e:59:c7:d6:54:30:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Mar 29 11:00:37 2026 GMT
Not After : Mar 30 11:00:37 2026 GMT
Subject: CN=57781c25f33edb0452a8af3632c279595c4ab5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1e:2d:d5:a2:27:9b:b6:51:ec:eb:03:49:3e:
17:43:ca:57:1b:a6:dc:6f:95:13:56:f5:42:62:08:
d6:23:6a:a4:ab:dd:b8:86:57:01:9b:e9:95:74:67:
89:02:e8:8e:66:fe:1e:b2:e5:b8:33:bb:bc:98:05:
e8:ca:22:18:e0:e1:e9:7b:14:65:a9:0f:f7:26:08:
49:12:4a:0b:f3:42:35:b6:a5:85:0a:85:40:63:cf:
0d:e9:92:93:cc:53:ab:13:d8:a7:f9:6a:11:40:79:
17:a2:45:34:c3:36:ce:16:46:dc:6f:42:30:9c:a3:
74:41:66:cd:b3:99:fc:b5:0b:65:19:0b:c6:18:30:
73:6d:4d:51:d4:91:a0:71:e4:8e:60:7a:22:0c:d5:
8a:42:bb:5e:f7:ef:23:c9:47:f8:3d:35:a9:5e:86:
e5:0c:10:0c:56:f7:29:de:32:21:e7:fb:ab:22:66:
c0:97:82:e4:df:85:e8:44:b5:ab:e5:15:58:c9:7d:
9b:14:56:c7:35:d7:87:8f:94:8d:ca:44:b2:50:d4:
7e:e3:2e:99:39:78:c3:6f:27:fd:fa:79:0f:82:11:
4b:95:70:8f:a3:64:fa:c6:67:00:19:fd:78:d1:73:
89:05:62:e5:f8:07:fc:10:96:8e:25:40:15:10:d0:
5b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:78:1C:25:F3:3E:DB:04:52:A8:AF:36:32:C2:79:59:5C:4A:B5:A4
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:e6:2d:67:f1:37:d9:39:42:68:55:2c:31:d7:2e:b9:e2:fe:
8d:bf:6a:4b:40:7d:f6:d0:89:ef:12:a1:36:69:60:18:6d:9b:
bc:65:4e:65:6c:4e:cd:2e:72:2c:ce:e2:ae:69:99:af:2b:4c:
49:42:7d:84:78:1d:ed:15:01:43:83:1d:c5:ca:19:78:69:e2:
3c:91:53:d1:39:ac:da:91:8f:f6:7d:49:8f:81:fe:45:d7:bf:
f6:3a:b4:39:8b:eb:51:69:1e:79:3e:86:cb:9a:0d:c2:b2:87:
a6:14:20:ed:b5:60:04:61:55:12:5d:81:f7:84:06:83:7b:22:
48:63:ac:af:86:e1:69:7c:48:2d:e3:7a:a1:22:58:38:e8:4a:
1a:71:3a:06:21:2b:7c:32:cb:a4:a3:5e:e9:30:2c:d6:14:55:
f0:7d:32:b9:b0:bb:e6:a1:de:35:19:f0:d6:da:75:54:cf:ac:
bc:41:93:6a:30:32:56:cc:b0:ca:f2:68:b9:f0:16:e4:68:d9:
53:39:4b:74:e1:58:0e:c4:f9:4d:4a:00:97:71:84:11:b4:73:
3c:79:e8:fc:e0:f1:9e:fc:45:c0:40:7c:69:d2:f1:28:d3:00:
bc:b3:66:46:a8:82:fd:df:1f:5d:54:8b:f6:6e:3f:29:28:92:
24:40:5b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:25 2026 by rpki-client