Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft
File: 71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft (raw, json)
Hash identifier: 0tocMaI+KqETtAa7Hm4GGa4TRH/PkKBUPs3rwhEd9GA=
Subject key identifier: 43:27:F2:AA:CC:1E:BC:98:A8:CC:03:8A:30:C6:7D:93:75:EE:22:26
Authority key identifier: EF:51:B3:87:52:62:FA:41:6D:8E:ED:E9:B9:01:2E:48:2E:86:E9:08
Certificate issuer: /CN=ef51b3875262fa416d8eede9b9012e482e86e908
Certificate serial: 019E20C80BC81C1ACA02934FD72635D9FEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71Gzh1Ji-kFtju3puQEuSC6G6Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft
Manifest number: 19
Signing time: Wed 13 May 2026 10:00:41 +0000
Manifest this update: Wed 13 May 2026 10:00:41 +0000
Manifest next update: Thu 14 May 2026 10:00:41 +0000
Files and hashes: 1: 71Gzh1Ji-kFtju3puQEuSC6G6Qg.crl (hash: 1KY0gL9GtcqOdzEeRzFrTbqEVXbuKlitl+HYAUDgo/I=)
2: WE6dCj7x0gJX4CBgsBBV4qD6kks.asa (hash: Ik9fu30Prhl5cLZ5Dpjdp1/bctc/vb9Xl0Pi2G12sXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/71Gzh1Ji-kFtju3puQEuSC6G6Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:0b:c8:1c:1a:ca:02:93:4f:d7:26:35:d9:fe:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef51b3875262fa416d8eede9b9012e482e86e908
Validity
Not Before: May 13 10:00:41 2026 GMT
Not After : May 14 10:00:41 2026 GMT
Subject: CN=4327f2aacc1ebc98a8cc038a30c67d9375ee2226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:a8:f2:f2:8c:c6:11:7b:01:a1:0d:98:aa:
13:cb:47:fc:26:6d:1a:e9:3b:d2:7f:cf:50:85:e2:
72:5b:1d:08:e9:ab:ea:ce:7f:0f:3d:41:25:0d:44:
57:ec:54:49:20:69:61:7a:37:27:21:a5:e8:23:6f:
db:a2:0a:d9:d1:3f:73:ab:8c:f3:93:4c:4f:b7:4c:
99:e2:0b:bf:cb:a4:14:64:50:bf:fa:c0:f4:dd:bd:
1e:98:56:71:44:8a:e7:8f:91:d0:d3:90:51:2d:1e:
2d:b3:03:f8:30:69:cf:6e:c9:70:70:da:ed:15:4d:
b4:6e:47:4a:3c:87:67:1f:25:a0:40:25:c9:38:a9:
ae:79:60:f2:8a:0a:c6:9d:19:a5:16:fb:67:1d:d6:
a2:68:3f:3f:b6:6e:c3:03:c7:80:ed:82:e6:cc:6a:
c9:32:3d:a4:0f:45:e2:c3:7f:fe:31:77:cb:d3:f7:
4f:2c:1b:a4:45:ab:90:e4:2e:29:c1:ac:16:85:e7:
2d:a6:d1:83:b3:71:1b:31:c9:87:c0:08:2b:b1:b4:
1e:58:cf:50:8d:b6:d2:62:df:12:9f:ba:bf:69:1e:
10:9f:91:96:fe:ac:46:40:64:41:14:ab:60:d4:fc:
a0:64:99:23:47:53:b5:da:d7:cd:7e:f2:1c:02:ff:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:27:F2:AA:CC:1E:BC:98:A8:CC:03:8A:30:C6:7D:93:75:EE:22:26
X509v3 Authority Key Identifier:
keyid:EF:51:B3:87:52:62:FA:41:6D:8E:ED:E9:B9:01:2E:48:2E:86:E9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71Gzh1Ji-kFtju3puQEuSC6G6Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5a:aa:9a:24:a4:67:b7:40:d0:df:06:46:ad:5c:4f:14:ef:
bc:6c:c3:db:be:47:96:ae:81:4a:cd:20:89:82:c6:db:f9:96:
5b:36:65:2c:1f:40:70:90:a1:9b:3c:c3:58:1e:be:9c:0d:43:
1f:b8:ed:e6:b6:77:d9:30:8f:5b:f9:07:c1:cc:6e:84:dd:71:
a7:4a:40:67:ac:68:a7:22:0e:a8:44:7e:f8:3e:3b:49:af:de:
63:c6:a6:20:24:10:c0:b3:35:2d:60:2e:00:64:90:70:58:ea:
76:ab:f0:28:72:ab:25:b0:51:f3:57:6e:7d:be:4d:98:79:55:
a7:07:08:9e:8a:8a:cd:a6:df:38:86:f4:86:c4:47:82:d7:0f:
c9:08:34:3a:f7:a3:42:df:4c:fc:13:e0:b0:e9:06:14:9b:95:
aa:d9:32:10:6e:42:9a:82:ec:8f:4f:2f:52:db:21:78:79:13:
30:37:c2:3f:86:56:c6:81:a9:38:6c:fc:d3:27:e6:17:ab:9e:
d3:96:8d:34:d2:a8:f9:cb:3a:b2:fa:26:c0:08:9d:36:5f:c1:
4e:69:54:80:fa:4b:f2:71:c5:1e:17:ea:c2:a3:d0:a5:7e:14:
18:f6:1c:5c:de:e4:ba:d2:49:54:54:4a:00:9f:f4:48:7d:92:
a6:31:16:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:49:46 2026 by rpki-client