Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
File: 76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json)
Hash identifier: 22Bb/NhBkSwtUSM8xBI4+O/XJ3tMnRxbKn250b4ULY8=
Subject key identifier: 5A:2E:98:EB:70:B3:5E:C0:20:B5:00:AA:7B:36:D9:A5:C0:AE:72:F1
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Certificate issuer: /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial: 019D39409733D3624CED39DD69C80CC552A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
Manifest number: 119E
Signing time: Sun 29 Mar 2026 11:00:27 +0000
Manifest this update: Sun 29 Mar 2026 11:00:27 +0000
Manifest next update: Mon 30 Mar 2026 11:00:27 +0000
Files and hashes: 1: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: aPGz+5tYbZxP9j9BUPh3AHA3ljX2KeyDqwEyY5DfNBw=)
2: d0r-Z1tATflEg34xH8LpeTJxCeg.roa (hash: /VLriREqzzV93h2U9Y2YNTNewlDjbuqqOCTeloMXxjY=)
3: z2ya0O-Zt1HkSFnRFpNhzUiEpKw.roa (hash: Bw/EG1OV5fOeDsNlaq4pIbVENapXiEYMLsr9/Cjedk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:97:33:d3:62:4c:ed:39:dd:69:c8:0c:c5:52:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
Validity
Not Before: Mar 29 11:00:27 2026 GMT
Not After : Mar 30 11:00:27 2026 GMT
Subject: CN=5a2e98eb70b35ec020b500aa7b36d9a5c0ae72f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4c:33:3d:f4:97:76:c4:9e:d7:30:41:f8:9c:
3c:23:f7:0a:da:6c:db:34:a3:47:c0:f9:65:ba:02:
82:e1:ed:ca:1b:61:38:b6:0b:95:92:2b:d4:20:a0:
f5:be:11:32:9a:30:75:5c:82:b4:97:1f:cf:4a:cc:
8c:a1:13:4f:31:42:1d:d4:39:d5:14:62:1f:c4:e4:
24:aa:ad:4a:56:c9:f6:1a:0e:80:e6:d6:a7:cf:f1:
fd:71:97:77:5f:6a:8f:af:6f:0f:c8:a2:f7:ee:cf:
41:e3:9b:a5:1f:48:bf:30:02:57:7d:50:d7:49:b0:
2d:4f:22:67:cd:8f:3b:4d:30:06:3c:eb:ba:77:e9:
e7:7e:3a:ba:22:4e:5a:26:57:fc:28:cc:d3:b9:4a:
22:dd:09:57:a5:f8:a6:1b:f0:fc:bc:09:64:d2:cc:
da:99:d6:e5:38:48:73:a9:d5:2e:43:87:be:ea:b1:
43:e5:8e:6e:66:6b:99:fa:31:ad:5f:80:b6:c9:65:
e4:d0:45:ae:e4:6a:c6:78:51:ea:b6:0f:02:43:47:
ec:9d:5e:f7:b1:5d:31:7a:bb:c2:0a:38:c7:77:f6:
38:08:12:b0:a8:ef:80:07:a0:5b:e6:87:73:56:e6:
2b:5b:b1:7d:38:9b:d3:43:9d:c4:d2:08:0b:b4:c4:
e8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2E:98:EB:70:B3:5E:C0:20:B5:00:AA:7B:36:D9:A5:C0:AE:72:F1
X509v3 Authority Key Identifier:
keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:92:3f:c8:68:55:c7:72:6b:1e:bc:5e:c2:0b:c7:a7:88:ae:
92:03:2d:06:d3:3f:9a:33:2c:ae:5d:c2:e9:5a:9a:5e:b1:75:
49:91:a8:35:1e:15:d8:0b:00:3f:8a:4b:c7:d2:90:8e:77:d7:
43:83:00:15:a4:c1:c8:2e:1f:62:26:5c:44:3e:67:8e:b4:0b:
91:c5:72:9c:da:75:0f:4f:dd:04:6e:00:59:57:04:fb:78:d8:
bd:79:d4:9b:9b:90:55:fa:ec:09:04:3b:2e:39:c9:11:e0:3c:
ad:2d:e6:76:9c:53:ae:20:43:8b:9e:07:ed:16:c8:31:b5:5b:
f6:2e:35:c2:db:1a:01:66:d2:ae:1f:bc:2c:f6:b4:11:f2:f2:
b4:f7:3f:41:1e:c5:6e:ce:ac:2c:08:c5:4c:79:90:71:a0:5d:
8c:89:07:87:40:dd:bb:42:29:e4:e4:16:b6:0c:f5:91:65:47:
2d:7c:e3:4e:6a:b1:a9:a0:09:62:5b:90:d7:0d:85:3e:c2:0e:
e1:a6:50:9c:96:25:ed:6a:92:29:95:e3:72:74:4b:7f:7d:f0:
f5:0a:7e:6d:68:6e:c4:d0:0f:b7:23:11:dc:a3:f6:32:c5:d8:
fd:5b:c6:08:26:13:a6:8a:06:32:2f:9a:e9:fa:b2:b5:6f:10:
5a:ff:71:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QJcz02JM7TndacgMxVKnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTcwY2I4NDllMzgzNzQ1MWJkNzlhZjdkYzdlMDM1OTYz
ZTYwNDMwHhcNMjYwMzI5MTEwMDI3WhcNMjYwMzMwMTEwMDI3WjAzMTEwLwYDVQQD
Eyg1YTJlOThlYjcwYjM1ZWMwMjBiNTAwYWE3YjM2ZDlhNWMwYWU3MmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkwzPfSXdsSe1zBB+Jw8I/cK2mzb
NKNHwPllugKC4e3KG2E4tguVkivUIKD1vhEymjB1XIK0lx/PSsyMoRNPMUId1DnV
FGIfxOQkqq1KVsn2Gg6A5tanz/H9cZd3X2qPr28PyKL37s9B45ulH0i/MAJXfVDX
SbAtTyJnzY87TTAGPOu6d+nnfjq6Ik5aJlf8KMzTuUoi3QlXpfimG/D8vAlk0sza
mdblOEhzqdUuQ4e+6rFD5Y5uZmuZ+jGtX4C2yWXk0EWu5GrGeFHqtg8CQ0fsnV73
sV0xervCCjjHd/Y4CBKwqO+AB6Bb5odzVuYrW7F9OJvTQ53E0ggLtMTouQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoumOtws17AILUAqns22aXArnLxMB8GA1UdIwQY
MBaAFO+nDLhJ44N0Ub15r33H4DWWPmBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZjTXVFbmpnM1JSdlhtdmZjZmdOWlktWUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjIt
NTNhNjA0ODA3NjFkLzEvNzZjTXVFbmpnM1JSdlhtdmZjZmdOWlktWUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjItNTNhNjA0ODA3NjFk
LzEvNzZjTXVFbmpnM1JSdlhtdmZjZmdOWlktWUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJI/yGhV
x3JrHrxewgvHp4iukgMtBtM/mjMsrl3C6VqaXrF1SZGoNR4V2AsAP4pLx9KQjnfX
Q4MAFaTByC4fYiZcRD5njrQLkcVynNp1D0/dBG4AWVcE+3jYvXnUm5uQVfrsCQQ7
LjnJEeA8rS3mdpxTriBDi54H7RbIMbVb9i41wtsaAWbSrh+8LPa0EfLytPc/QR7F
bs6sLAjFTHmQcaBdjIkHh0Ddu0Ip5OQWtgz1kWVHLXzjTmqxqaAJYluQ1w2FPsIO
4aZQnJYl7WqSKZXjcnRLf33w9Qp+bWhuxNAPtyMR3KP2MsXY/VvGCCYTpooGMi+a
6fqytW8QWv9xSg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:02 2026 by rpki-client