Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
File: 76psy3hXNGAC5rvEmPiLnobfGAY.mft (raw, json)
Hash identifier: QyeEtV8Hi8fS9+8Yb/GfflLCGr/zdgK7/xtJ/3ajc+g=
Subject key identifier: 00:00:6F:E2:41:21:89:A4:EF:1A:A2:4D:99:26:5C:57:D7:02:4A:3E
Authority key identifier: EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
Certificate issuer: /CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Certificate serial: 019D389BAF32A7E3905B35BEF8DD71A94349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
Manifest number: 0651
Signing time: Sun 29 Mar 2026 08:00:20 +0000
Manifest this update: Sun 29 Mar 2026 08:00:20 +0000
Manifest next update: Mon 30 Mar 2026 08:00:20 +0000
Files and hashes: 1: 76psy3hXNGAC5rvEmPiLnobfGAY.crl (hash: 6F9+Qj+CNCg++snWO0vMV74ukv07qKQTI/APvMcMnmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:af:32:a7:e3:90:5b:35:be:f8:dd:71:a9:43:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Validity
Not Before: Mar 29 08:00:20 2026 GMT
Not After : Mar 30 08:00:20 2026 GMT
Subject: CN=00006fe2412189a4ef1aa24d99265c57d7024a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:b3:55:64:e1:34:2a:77:04:4a:de:3c:84:
a7:1d:ef:c1:a1:0f:fd:3f:3c:32:e9:81:24:08:46:
d2:90:f7:76:bd:ba:1b:da:35:8c:bd:6b:d6:0d:dc:
bc:b9:21:59:9c:ac:43:f5:21:e8:37:b6:29:88:47:
af:af:36:1c:5f:03:ca:c1:ae:aa:52:30:de:cd:bb:
a2:ba:d3:1e:64:7e:70:05:c6:bc:22:07:f8:e8:a8:
60:19:8c:3a:ce:41:24:88:1f:7a:61:71:26:fe:be:
25:79:2a:f8:cf:9b:f5:a9:a7:a0:54:95:cf:d8:81:
31:5f:9b:f5:54:09:09:7f:cb:fe:1c:e1:9e:b8:16:
44:1b:fa:a0:c6:a2:25:bd:bc:d2:7e:61:42:43:75:
c2:66:71:db:30:17:ab:ce:20:00:f4:2f:2b:7b:e6:
47:84:de:12:12:27:6c:8e:3e:7a:9b:de:74:45:77:
26:15:91:29:75:4c:d4:eb:d2:5c:1a:e5:c0:33:f1:
b3:45:41:e4:2d:32:c1:6a:b6:3c:af:a6:4c:6d:bb:
e6:8d:cd:39:8e:8a:05:c9:53:16:f1:32:35:22:3d:
e6:20:13:57:e6:26:4d:a1:fd:ef:fc:1d:f6:50:80:
d1:25:3f:42:e8:72:a1:ae:dd:09:1a:69:2d:e6:e3:
86:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:00:6F:E2:41:21:89:A4:EF:1A:A2:4D:99:26:5C:57:D7:02:4A:3E
X509v3 Authority Key Identifier:
keyid:EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:13:c8:0d:ba:15:b9:09:de:90:df:ce:fc:20:62:40:57:3a:
d7:71:64:c9:ee:aa:f6:da:b7:de:b3:06:8a:99:d8:00:44:30:
7a:23:a2:85:7a:68:74:7d:3d:d1:81:1b:73:89:46:d3:66:27:
d3:d3:dd:96:66:1c:83:f9:b4:f7:14:78:f1:41:cd:88:b1:ad:
e9:ae:a9:1e:a0:97:16:b1:b9:2a:3a:04:48:66:bd:66:30:a1:
12:4b:f0:35:4d:e1:73:17:35:66:e2:61:20:59:33:3f:a3:13:
fb:0e:46:64:f4:d3:29:1b:14:e9:41:b6:38:81:08:b1:d9:cd:
2a:a5:7e:0c:79:a2:b1:e9:de:5b:b1:2c:e9:27:14:0e:9b:10:
86:28:1f:1a:19:d9:39:ea:49:9b:73:84:bb:70:55:62:91:e9:
46:a3:93:b9:65:b7:12:dc:ad:33:26:b5:63:31:a6:4f:9b:58:
9d:81:c2:95:83:4f:66:d9:ec:bf:e3:e6:a9:08:17:f0:51:93:
f5:3f:e8:71:1d:b9:33:12:a6:1b:c5:fb:5d:96:c2:0a:44:68:
53:84:e0:a4:c1:16:8d:df:dc:e3:37:c9:04:3e:02:80:64:07:
ca:15:ac:ef:bf:e2:60:57:96:47:5b:db:49:8c:72:86:39:11:
86:8e:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:17 2026 by rpki-client