Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
File: 71hLUR2WpK5sljABl_hPlqOvwkY.mft (raw, json)
Hash identifier: 58vzZj+UZ6WdyhH8NXuq6+QDKZDEvBG7fmbhX4hp+Lg=
Subject key identifier: DB:D3:84:2E:3F:B7:60:91:F3:B5:8E:D1:D0:7C:09:98:7A:8D:1F:27
Authority key identifier: EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46
Certificate issuer: /CN=ef584b511d96a4ae6c96300197f84f96a3afc246
Certificate serial: 019D390A155F55DF143F74ACA9F9912C61DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
Manifest number: 0F70
Signing time: Sun 29 Mar 2026 10:00:55 +0000
Manifest this update: Sun 29 Mar 2026 10:00:55 +0000
Manifest next update: Mon 30 Mar 2026 10:00:55 +0000
Files and hashes: 1: 71hLUR2WpK5sljABl_hPlqOvwkY.crl (hash: bPmWI+9EdC0Xp31xwSbVVsHkNDHn5HXIWTqLdK2/NUU=)
2: VyE6DesxM1H-hav0gDjcdVAVU4s.roa (hash: fCSRySt/k47Xd3pTSkERi1iNanOCOBE7CKIzsNuCBZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:15:5f:55:df:14:3f:74:ac:a9:f9:91:2c:61:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef584b511d96a4ae6c96300197f84f96a3afc246
Validity
Not Before: Mar 29 10:00:55 2026 GMT
Not After : Mar 30 10:00:55 2026 GMT
Subject: CN=dbd3842e3fb76091f3b58ed1d07c09987a8d1f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d5:5d:d9:ab:4b:56:40:c9:c7:a9:01:f3:27:
df:c2:2f:2f:30:71:cc:a1:5c:a9:e0:ab:1f:6a:ec:
bc:3e:3f:80:40:e6:31:43:eb:ab:6d:50:99:ef:33:
d2:5f:08:d0:cb:da:39:29:15:55:82:6a:9a:db:20:
85:b0:6f:08:42:81:6f:40:d3:cb:b6:60:43:d2:2b:
39:8d:01:ff:e2:34:5a:65:f4:ac:73:36:5f:a0:82:
41:c9:43:35:9e:a9:e9:ee:d6:4b:79:70:9c:55:9e:
5e:2f:dc:67:1d:79:59:39:44:54:30:3f:11:cb:8f:
a9:63:3f:5c:74:1e:15:b2:ed:7d:ab:12:d3:aa:05:
03:5a:b7:6d:1f:90:62:7a:b3:a0:4b:a4:05:22:a1:
05:d8:18:68:99:2f:a7:fc:b5:f4:86:b0:d2:c0:40:
a4:41:b3:2c:6e:e8:27:ab:4a:1b:2d:83:6b:48:be:
91:70:f7:63:b1:a6:da:31:02:7e:46:68:91:c9:f9:
27:59:1e:c4:b2:24:f1:e2:2f:ee:c4:50:a7:06:43:
01:f5:ad:7b:aa:03:ec:06:f6:a6:4d:4c:ad:73:5c:
e3:73:c1:60:47:99:10:d8:bf:55:a7:e0:3a:02:1a:
17:b6:9f:1b:8c:71:af:fb:83:7b:79:cc:f3:78:ce:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D3:84:2E:3F:B7:60:91:F3:B5:8E:D1:D0:7C:09:98:7A:8D:1F:27
X509v3 Authority Key Identifier:
keyid:EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b3:d0:35:c4:97:49:13:f6:b7:94:aa:33:2f:70:76:06:2a:
b6:9b:2f:f3:98:d9:ef:e2:89:fa:f4:8f:6d:fb:51:6d:16:3f:
30:37:8d:92:86:04:e6:ba:2c:8e:30:15:1c:99:de:20:af:d9:
b3:09:43:72:a2:43:0c:ff:a0:cd:2a:e5:4b:85:5f:7a:18:09:
a2:ec:3c:7f:12:53:82:28:05:dc:d9:49:e8:18:54:33:a4:5f:
f0:60:b1:cf:9d:4d:78:4a:58:5c:4b:2c:40:d1:19:82:12:25:
a9:d5:c2:72:5a:2f:06:53:c1:b3:80:55:a3:52:0c:ba:48:ce:
6b:02:94:93:a3:15:27:a9:98:9b:36:ba:7e:53:04:be:f9:23:
38:cd:ed:cf:c2:4a:88:57:32:bd:d3:50:a0:99:92:fb:cc:1c:
fd:89:b9:f2:c6:0f:fa:7f:33:8d:a9:36:8e:bf:45:79:2d:d9:
23:a5:2a:e8:d0:61:10:15:48:76:1a:3c:64:bc:11:24:70:5c:
2b:1a:01:8a:2a:e2:6f:5f:12:6f:a1:a5:e3:05:c6:7b:99:90:
07:f5:88:bf:6d:17:b2:b3:b5:b9:14:dd:4d:f1:40:46:35:5b:
cf:27:18:9e:84:59:d2:fd:30:f6:2f:a3:00:0a:3b:4d:a2:85:
31:b4:76:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:32 2026 by rpki-client