Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
File: 76R3JGPNvhK3OxatDSUW8H1jgw0.mft (raw, json)
Hash identifier: PVeo5YaFMAfSmfAbCkxCXzPZekzqXc6sTqL9BEnJmV4=
Subject key identifier: A8:34:15:DD:92:A8:2F:C5:61:3C:0F:43:71:F1:24:A0:E3:11:4A:0C
Authority key identifier: EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D
Certificate issuer: /CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
Certificate serial: 019D382DDB4E189EF98BD3FFED9CA44ACC1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
Manifest number: 1824
Signing time: Sun 29 Mar 2026 06:00:22 +0000
Manifest this update: Sun 29 Mar 2026 06:00:22 +0000
Manifest next update: Mon 30 Mar 2026 06:00:22 +0000
Files and hashes: 1: 76R3JGPNvhK3OxatDSUW8H1jgw0.crl (hash: 5l3yUJltvOXN4gSwCNlJOfoTly9pk8XdhufX69orwwE=)
2: N5QCogCjueurEYHGg5bKFFk7ZlY.roa (hash: CIzHGnEf1oEHhEGLujmH6EiVhy3a59ACXCm78MrefUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:db:4e:18:9e:f9:8b:d3:ff:ed:9c:a4:4a:cc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
Validity
Not Before: Mar 29 06:00:22 2026 GMT
Not After : Mar 30 06:00:22 2026 GMT
Subject: CN=a83415dd92a82fc5613c0f4371f124a0e3114a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:aa:69:59:54:c8:b9:aa:e1:29:12:f5:ea:91:
6f:b7:85:34:46:d4:91:c2:48:31:3e:de:76:b3:5a:
e6:d6:c2:ef:a6:46:3b:7e:d4:ac:02:92:31:29:c5:
ce:f7:2f:9c:e7:10:e3:03:6c:46:3b:a4:f9:fe:6e:
5d:a2:a9:4d:44:ae:9c:f4:33:03:46:2b:a1:18:85:
30:a4:48:2e:8e:fc:d9:76:12:66:ce:1d:16:a3:4a:
cd:c7:66:b2:2b:94:81:b7:50:f5:fd:31:0e:f7:3f:
48:06:76:13:e9:4b:ae:79:d9:ce:f2:43:1e:26:cf:
ba:9d:80:17:2f:bc:2d:3c:85:f7:9a:25:0b:cb:9a:
1b:2f:8c:be:ef:1d:71:ba:d4:74:bd:58:49:d1:6c:
e6:74:3e:eb:b4:13:61:15:a5:bb:e9:3d:70:43:8b:
81:8e:6d:e1:ab:d6:d4:ba:f7:b2:bc:dd:4c:a9:f2:
ed:fb:af:f9:2d:2c:d2:45:a7:80:2c:6e:3e:97:52:
5b:cc:5c:28:35:b7:58:fc:f8:67:0b:bb:99:99:f0:
9b:fb:93:0b:08:b2:4f:a6:69:fb:0c:33:04:be:b5:
fd:18:b0:cb:65:21:97:7d:8c:7a:2b:79:64:cd:dd:
92:dc:90:42:1f:8c:d1:67:36:e1:28:07:3c:57:52:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:34:15:DD:92:A8:2F:C5:61:3C:0F:43:71:F1:24:A0:E3:11:4A:0C
X509v3 Authority Key Identifier:
keyid:EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:05:1c:ed:7d:47:5a:ee:60:e0:9b:b8:cb:98:56:4b:86:60:
d6:7f:4e:b7:e6:94:8e:31:9f:25:50:22:2d:d3:aa:55:23:d2:
06:e8:2c:fd:a7:a0:5e:53:47:28:7e:d9:b0:9b:f6:52:4a:11:
62:ce:6e:b0:bb:38:84:76:12:9b:79:b4:55:bc:16:06:26:48:
90:b5:a5:f2:fe:43:fa:cc:bb:41:17:36:9d:66:e3:cd:b3:be:
77:bf:71:11:33:7a:3c:58:da:2d:a1:86:da:d6:08:b7:c7:fb:
6e:ae:73:d4:31:b6:e9:a4:61:05:84:2a:dc:ad:8a:c1:bc:c5:
5f:1e:f6:9b:5f:85:af:59:f0:94:44:10:42:80:dd:4a:a2:25:
7f:38:6f:ae:df:0b:d8:65:20:15:86:ec:6e:b5:05:54:0c:cb:
9e:3a:2c:c4:c7:ba:7c:09:81:bc:86:36:ac:5b:a9:cc:8c:d2:
d6:2f:85:ef:7b:37:35:61:fa:b7:f0:66:a0:eb:94:47:22:06:
24:f5:4f:97:89:0b:82:16:06:b0:6e:2a:96:ab:b0:70:07:83:
33:6f:46:15:13:67:f8:d7:c1:d4:ff:96:91:b6:08:bd:75:c0:
e8:6c:68:8a:a1:bb:6d:db:d9:e7:d1:62:61:c8:a9:f3:80:3a:
bd:d4:84:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:09 2026 by rpki-client