Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
File: 76psy3hXNGAC5rvEmPiLnobfGAY.mft (raw, json)
Hash identifier: PnFohpKly+ORa9VExOxLuMVQ0418C8SzfdapI9hIPeQ=
Subject key identifier: 7A:BF:8C:B4:83:8C:3C:A5:24:C6:12:5A:99:59:DE:6C:33:1F:54:E9
Authority key identifier: EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
Certificate issuer: /CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Certificate serial: 019A71EE7603492BF09511199A6CEB2B7D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
Manifest number: 04E1
Signing time: Tue 11 Nov 2025 08:00:44 +0000
Manifest this update: Tue 11 Nov 2025 08:00:44 +0000
Manifest next update: Wed 12 Nov 2025 08:00:44 +0000
Files and hashes: 1: 76psy3hXNGAC5rvEmPiLnobfGAY.crl (hash: PPwuWQvoCZtyF8Lkc1tuVNoppKc6hWJtNUdALnRpiec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:76:03:49:2b:f0:95:11:19:9a:6c:eb:2b:7d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Validity
Not Before: Nov 11 08:00:44 2025 GMT
Not After : Nov 12 08:00:44 2025 GMT
Subject: CN=7abf8cb4838c3ca524c6125a9959de6c331f54e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:ba:06:16:12:39:30:0e:42:2d:8a:91:1f:
fc:04:e4:8e:3f:42:79:98:1f:36:06:49:f1:a0:66:
ea:fb:3a:52:81:d5:fa:d0:98:8a:49:ad:46:fc:4a:
65:7a:35:0f:96:be:64:41:03:10:fc:3b:3f:e1:56:
4f:2d:ed:56:28:84:31:cf:d5:25:c5:0d:aa:42:52:
5f:54:67:1e:a6:20:c8:be:7d:92:69:ef:ca:6c:b3:
68:dd:b9:93:c8:78:f2:f2:f9:0e:99:5f:74:08:80:
de:90:69:5b:93:95:a4:48:37:c4:8e:9a:4e:42:05:
f4:0a:81:6b:40:51:9d:ae:20:01:c4:2a:9d:23:29:
0b:0b:ae:7f:5a:11:d9:fb:eb:5c:ce:35:b7:0e:cd:
41:5e:fd:1d:75:5a:c7:8b:c9:0f:ec:79:a9:b5:9e:
0b:70:12:a5:66:25:2f:e2:d2:62:9b:08:13:e1:76:
aa:91:45:d3:9a:13:89:46:ca:79:6f:09:f0:e2:62:
d2:31:6d:d4:1e:af:83:e4:c7:e7:1f:28:85:d8:bd:
f1:d8:90:fb:aa:ef:54:9e:51:f1:22:43:d1:16:21:
f8:5f:f8:74:a4:f5:4f:76:26:8d:21:31:1a:4b:52:
5e:fe:cd:df:46:2a:cb:07:69:fa:d6:43:c1:a1:49:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BF:8C:B4:83:8C:3C:A5:24:C6:12:5A:99:59:DE:6C:33:1F:54:E9
X509v3 Authority Key Identifier:
keyid:EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b8:15:5c:c3:11:a4:fa:77:db:95:61:5d:c7:6c:89:0d:76:
fe:93:23:b9:32:44:d1:c3:08:37:a8:81:8c:c1:e4:f1:5c:f0:
e1:17:0d:99:06:be:93:8b:fa:48:39:d9:b5:5a:99:03:55:74:
8c:0f:a3:9a:32:ef:33:01:6c:d9:b5:52:0d:ee:cc:11:b6:9b:
95:29:b8:1a:c7:2a:66:de:22:1c:b9:38:35:f8:82:0c:74:e6:
0f:6a:5b:c3:82:38:8e:3a:da:f4:67:7d:d8:fe:73:5f:40:8b:
66:ba:7a:a1:de:6d:fb:08:ba:3d:4f:a0:3a:06:6a:26:54:dd:
0f:7b:fc:39:64:4d:98:ef:96:db:97:f0:8a:2b:a7:47:cb:ad:
b2:4f:55:33:68:e5:9f:87:f5:66:09:47:75:b5:de:c7:15:f8:
f4:eb:cd:a0:20:bd:a7:7d:03:ee:9a:75:5d:c5:8c:e2:45:db:
5d:c3:49:1e:a2:ab:26:59:a2:6a:59:3c:51:aa:36:e4:ca:54:
f0:bb:8c:ae:c0:cd:4c:b6:2e:77:5f:9a:c7:2c:36:bd:89:c0:
1c:d7:62:21:d1:13:cc:9e:03:95:09:0e:45:74:c9:d5:a0:3e:
58:43:9f:5d:b6:d0:c5:e5:30:0a:99:a3:99:3f:29:81:cd:0c:
e4:74:f1:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7nYDSSvwlREZmmzrK31tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYWE2Y2NiNzg1NzM0NjAwMmU2YmJjNDk4Zjg4YjllODZk
ZjE4MDYwHhcNMjUxMTExMDgwMDQ0WhcNMjUxMTEyMDgwMDQ0WjAzMTEwLwYDVQQD
Eyg3YWJmOGNiNDgzOGMzY2E1MjRjNjEyNWE5OTU5ZGU2YzMzMWY1NGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ae6BhYSOTAOQi2KkR/8BOSOP0J5
mB82BknxoGbq+zpSgdX60JiKSa1G/EplejUPlr5kQQMQ/Ds/4VZPLe1WKIQxz9Ul
xQ2qQlJfVGcepiDIvn2Sae/KbLNo3bmTyHjy8vkOmV90CIDekGlbk5WkSDfEjppO
QgX0CoFrQFGdriABxCqdIykLC65/WhHZ++tczjW3Ds1BXv0ddVrHi8kP7HmptZ4L
cBKlZiUv4tJimwgT4XaqkUXTmhOJRsp5bwnw4mLSMW3UHq+D5MfnHyiF2L3x2JD7
qu9UnlHxIkPRFiH4X/h0pPVPdiaNITEaS1Je/s3fRirLB2n61kPBoUnT+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHq/jLSDjDylJMYSWplZ3mwzH1TpMB8GA1UdIwQY
MBaAFO+qbMt4VzRgAua7xJj4i56G3xgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZwc3kzaFhOR0FDNXJ2RW1QaUxub2JmR0FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hYTk2MTQtZjZkNy00YzMzLWI5NGIt
ZDgyMGY2NWNlZDgxLzEvNzZwc3kzaFhOR0FDNXJ2RW1QaUxub2JmR0FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9hYTk2MTQtZjZkNy00YzMzLWI5NGItZDgyMGY2NWNlZDgx
LzEvNzZwc3kzaFhOR0FDNXJ2RW1QaUxub2JmR0FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7gVXMMR
pPp325VhXcdsiQ12/pMjuTJE0cMIN6iBjMHk8Vzw4RcNmQa+k4v6SDnZtVqZA1V0
jA+jmjLvMwFs2bVSDe7MEbablSm4GscqZt4iHLk4NfiCDHTmD2pbw4I4jjra9Gd9
2P5zX0CLZrp6od5t+wi6PU+gOgZqJlTdD3v8OWRNmO+W25fwiiunR8utsk9VM2jl
n4f1ZglHdbXexxX49OvNoCC9p30D7pp1XcWM4kXbXcNJHqKrJlmialk8Uao25MpU
8LuMrsDNTLYud1+axyw2vYnAHNdiIdETzJ4DlQkORXTJ1aA+WEOfXbbQxeUwCpmj
mT8pgc0M5HTxaA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:25 2025 by rpki-client