Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft
File: 71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft (raw, json)
Hash identifier: YmTJvDW91JWjB9RBQ0nW8jNGIpa06OfWz6tiI6WUWCc=
Subject key identifier: CA:6B:3E:C5:D7:5C:BA:54:6C:05:F8:77:0F:AA:6D:BD:8D:7D:57:B5
Authority key identifier: EF:51:B3:87:52:62:FA:41:6D:8E:ED:E9:B9:01:2E:48:2E:86:E9:08
Certificate issuer: /CN=ef51b3875262fa416d8eede9b9012e482e86e908
Certificate serial: 01A0ED415B636F518BD2F2D2C213E68DB500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71Gzh1Ji-kFtju3puQEuSC6G6Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft
Manifest number: 018C
Signing time: Tue 29 Sep 2026 13:01:18 +0000
Manifest this update: Tue 29 Sep 2026 13:01:18 +0000
Manifest next update: Wed 30 Sep 2026 13:01:18 +0000
Files and hashes: 1: 71Gzh1Ji-kFtju3puQEuSC6G6Qg.crl (hash: id6I4TMxtoM4TChfXyl+e8tg5z5mLbtNKa1HQAYmqMQ=)
2: WE6dCj7x0gJX4CBgsBBV4qD6kks.asa (hash: Ik9fu30Prhl5cLZ5Dpjdp1/bctc/vb9Xl0Pi2G12sXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/71Gzh1Ji-kFtju3puQEuSC6G6Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:41:5b:63:6f:51:8b:d2:f2:d2:c2:13:e6:8d:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef51b3875262fa416d8eede9b9012e482e86e908
Validity
Not Before: Sep 29 13:01:18 2026 GMT
Not After : Sep 30 13:01:18 2026 GMT
Subject: CN=ca6b3ec5d75cba546c05f8770faa6dbd8d7d57b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:95:16:7e:50:9a:ee:e7:cc:d9:a9:82:60:
c9:b3:54:cc:f6:b0:5f:ae:14:0a:29:92:cb:f9:ae:
f8:de:5f:ee:83:18:aa:6d:1f:1c:1f:1b:33:06:20:
f9:f2:ad:9c:ff:a9:ef:89:1c:cf:08:d0:e3:cd:18:
2e:06:fe:a1:ab:2a:e9:ce:2e:c5:18:e1:27:84:37:
73:29:90:e6:bf:71:14:b2:4c:2f:d1:f3:0c:56:d2:
f9:88:90:7a:94:36:5e:ec:7d:49:59:22:98:db:a4:
b8:71:7e:4e:31:ab:8c:0f:f2:47:4f:47:48:5c:14:
8c:9f:22:62:d3:67:3e:be:83:f1:8f:38:29:30:51:
1e:a8:89:72:0a:18:95:5a:76:0b:5a:91:77:ed:33:
13:71:c2:db:5c:29:96:99:d0:2a:38:cf:81:ba:81:
31:98:31:99:f4:cf:c1:e0:76:be:cb:c1:fe:fa:47:
75:39:18:ae:1d:8b:1f:c3:37:d3:5c:2a:fc:29:ac:
32:7c:73:d2:e9:00:3a:f8:07:8e:3e:f1:57:b8:1b:
de:29:53:61:5c:db:d8:c3:3b:cc:2c:83:09:32:b7:
19:e9:c1:8b:64:d8:0c:a5:41:12:c6:ae:92:a8:39:
a4:6d:f2:b8:8c:3a:92:61:0c:e4:af:79:2e:d3:ff:
38:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6B:3E:C5:D7:5C:BA:54:6C:05:F8:77:0F:AA:6D:BD:8D:7D:57:B5
X509v3 Authority Key Identifier:
keyid:EF:51:B3:87:52:62:FA:41:6D:8E:ED:E9:B9:01:2E:48:2E:86:E9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71Gzh1Ji-kFtju3puQEuSC6G6Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a2:39:37:84:e2:97:12:b2:d2:57:ce:db:00:5d:88:2a:ae:
fa:64:0d:86:ad:81:5f:dc:48:c8:69:e3:44:72:3a:dc:c1:4a:
7a:65:7c:fb:22:a8:a7:b2:06:d9:c9:21:7c:c4:ae:04:00:ff:
02:2d:b6:fc:ff:b3:c2:f1:44:d1:38:3d:11:7b:4d:58:3d:56:
17:f5:2f:04:fc:f9:ed:ac:91:11:ca:aa:a6:48:26:43:c9:e8:
28:ce:8d:90:80:be:03:82:9c:52:37:89:d1:d0:0c:af:64:bc:
01:00:63:cc:13:44:d7:80:73:5f:83:9e:2d:0b:63:eb:0e:12:
e0:f3:c7:c1:73:f1:ea:3f:6a:60:f9:0b:03:76:90:34:54:b6:
20:c2:0a:04:8c:cf:f6:99:d1:2d:49:d8:59:20:eb:0a:61:c9:
9e:83:30:a6:ad:88:ef:4a:40:54:e3:da:4a:f8:4a:e7:9a:79:
d4:dc:e3:8d:fc:83:36:2d:b5:09:2c:a5:99:45:f2:a9:ac:67:
f4:51:d3:d1:da:32:af:4a:21:48:dc:5f:72:47:0c:b1:c4:d3:
5c:90:25:0a:e8:97:62:38:6f:4f:c4:08:16:bc:56:ea:39:b8:
0d:b3:f9:73:94:f2:5f:b0:84:dd:45:e9:39:60:7b:44:a0:0b:
8e:da:db:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:26:19 2026 by rpki-client