Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
File: 76psy3hXNGAC5rvEmPiLnobfGAY.mft (raw, json)
Hash identifier: LMZYUZmHqvaSpMuiJMGIPG5k+Zgg20A0t58NeseymNE=
Subject key identifier: 85:24:A1:47:A8:E8:43:3C:AB:9A:0A:1D:44:98:6E:0A:E3:FC:C8:57
Authority key identifier: EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
Certificate issuer: /CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Certificate serial: 01A001380D83EF918BF5F6402C829CB63F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
Manifest number: 07C2
Signing time: Fri 14 Aug 2026 17:00:45 +0000
Manifest this update: Fri 14 Aug 2026 17:00:45 +0000
Manifest next update: Sat 15 Aug 2026 17:00:45 +0000
Files and hashes: 1: 76psy3hXNGAC5rvEmPiLnobfGAY.crl (hash: EhakJhkg9I69HYCkHWgC2xftdJomqxM0hP+nvfKouPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:0d:83:ef:91:8b:f5:f6:40:2c:82:9c:b6:3f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Validity
Not Before: Aug 14 17:00:45 2026 GMT
Not After : Aug 15 17:00:45 2026 GMT
Subject: CN=8524a147a8e8433cab9a0a1d44986e0ae3fcc857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:4c:8f:04:da:81:c9:d5:57:cf:1c:36:7f:
0f:1f:2d:11:b1:6b:9a:5b:43:4c:fc:7d:84:38:98:
77:bb:d7:65:73:a5:a0:67:3c:de:57:77:0d:f6:a9:
5d:9b:8f:8a:a1:a2:38:4b:51:1e:fa:ae:bd:a5:4f:
5b:1c:b8:f7:a6:42:2a:98:e9:1f:66:23:d5:62:d9:
4f:d8:a0:43:c5:18:49:72:78:42:41:cd:22:2b:60:
da:a9:0d:fb:30:72:92:92:fc:4b:7a:0d:d4:71:3b:
c7:3a:d8:80:ed:82:9c:d7:03:2c:bb:eb:18:9d:5d:
e0:3f:4c:b3:b6:c2:96:3c:3d:3d:51:83:ac:be:fe:
b7:62:ad:a9:81:95:e8:22:cf:2d:ef:81:30:d4:8b:
73:0a:2f:f3:64:ec:07:44:2e:09:cd:72:ae:b6:01:
c1:e4:1b:34:f4:c6:71:fe:70:c3:dc:d2:de:f8:58:
bd:5f:f5:7f:25:a9:1f:f8:f7:b8:ca:93:50:4c:8e:
bc:c4:b2:21:ed:0f:3c:bc:9f:db:05:fb:25:0a:68:
0b:15:8a:46:44:50:34:49:f1:ea:8d:a5:10:e9:23:
dd:6a:c9:72:8b:c9:b4:52:95:b9:0f:9e:7a:a8:4b:
43:5b:a9:c1:86:8a:97:de:79:3a:bb:61:7e:de:95:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:24:A1:47:A8:E8:43:3C:AB:9A:0A:1D:44:98:6E:0A:E3:FC:C8:57
X509v3 Authority Key Identifier:
keyid:EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:41:6a:73:f2:d4:1e:1b:bb:33:f4:fc:40:a0:3e:46:3b:ba:
30:83:b5:ab:65:b3:ba:59:b5:9a:9b:75:73:7b:d6:5d:65:60:
c0:02:7b:ec:8f:f1:db:00:79:1c:2b:cc:c7:80:7b:95:28:7c:
06:e2:e6:9d:d1:f1:77:e0:52:7d:0e:37:d3:5f:c2:0f:e0:fa:
10:a3:c4:dc:2b:e2:d5:60:46:8c:ff:f9:a4:0b:07:96:01:d3:
81:7f:19:bf:67:02:4a:7c:35:8d:ae:8f:70:39:a8:6b:a9:e6:
46:ff:1d:88:8a:06:dc:11:b2:ab:7b:32:14:a8:77:b2:fb:26:
49:e2:88:7f:49:f0:37:91:7e:87:30:fb:b9:03:49:81:b0:ab:
f6:59:ea:18:e2:f7:6e:57:dd:7d:16:a0:74:c3:89:f7:46:75:
98:d4:fb:b0:cc:cd:8c:e4:b7:f4:d4:b2:d0:b5:21:2d:6b:13:
3c:8d:91:28:c5:fb:9c:a7:f5:52:6f:d0:3e:bd:d3:dc:a9:2c:
19:b0:31:6e:1c:32:e6:54:a0:ba:12:11:a6:65:59:fc:19:07:
bc:74:e3:e8:ba:56:08:83:90:41:65:fc:e1:df:d4:aa:4d:9d:
a0:e0:fd:30:97:08:5a:ae:e0:d4:cc:c3:81:04:1e:a0:d3:5b:
00:d7:a7:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABOA2D75GL9fZALIKctj8/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYWE2Y2NiNzg1NzM0NjAwMmU2YmJjNDk4Zjg4YjllODZk
ZjE4MDYwHhcNMjYwODE0MTcwMDQ1WhcNMjYwODE1MTcwMDQ1WjAzMTEwLwYDVQQD
Eyg4NTI0YTE0N2E4ZTg0MzNjYWI5YTBhMWQ0NDk4NmUwYWUzZmNjODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwlMjwTagcnVV88cNn8PHy0RsWua
W0NM/H2EOJh3u9dlc6WgZzzeV3cN9qldm4+KoaI4S1Ee+q69pU9bHLj3pkIqmOkf
ZiPVYtlP2KBDxRhJcnhCQc0iK2DaqQ37MHKSkvxLeg3UcTvHOtiA7YKc1wMsu+sY
nV3gP0yztsKWPD09UYOsvv63Yq2pgZXoIs8t74Ew1ItzCi/zZOwHRC4JzXKutgHB
5Bs09MZx/nDD3NLe+Fi9X/V/Jakf+Pe4ypNQTI68xLIh7Q88vJ/bBfslCmgLFYpG
RFA0SfHqjaUQ6SPdaslyi8m0UpW5D556qEtDW6nBhoqX3nk6u2F+3pX7LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUkoUeo6EM8q5oKHUSYbgrj/MhXMB8GA1UdIwQY
MBaAFO+qbMt4VzRgAua7xJj4i56G3xgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZwc3kzaFhOR0FDNXJ2RW1QaUxub2JmR0FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hYTk2MTQtZjZkNy00YzMzLWI5NGIt
ZDgyMGY2NWNlZDgxLzEvNzZwc3kzaFhOR0FDNXJ2RW1QaUxub2JmR0FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9hYTk2MTQtZjZkNy00YzMzLWI5NGItZDgyMGY2NWNlZDgx
LzEvNzZwc3kzaFhOR0FDNXJ2RW1QaUxub2JmR0FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUFqc/LU
Hhu7M/T8QKA+Rju6MIO1q2Wzulm1mpt1c3vWXWVgwAJ77I/x2wB5HCvMx4B7lSh8
BuLmndHxd+BSfQ4301/CD+D6EKPE3Cvi1WBGjP/5pAsHlgHTgX8Zv2cCSnw1ja6P
cDmoa6nmRv8diIoG3BGyq3syFKh3svsmSeKIf0nwN5F+hzD7uQNJgbCr9lnqGOL3
blfdfRagdMOJ90Z1mNT7sMzNjOS39NSy0LUhLWsTPI2RKMX7nKf1Um/QPr3T3Kks
GbAxbhwy5lSguhIRpmVZ/BkHvHTj6LpWCIOQQWX84d/Uqk2doOD9MJcIWq7g1MzD
gQQeoNNbANenNA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:14:05 2026 by rpki-client