Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
File: 76vFwTMKPwsDGbsWxENIzRuBnkQ.mft (raw, json)
Hash identifier: 5bdc2wzEuzhDnCvuzLnCQPegjNm0CDz5gwxmdqItBes=
Subject key identifier: 7F:BB:E9:31:6E:5D:85:0A:97:91:67:BA:58:E3:4C:F8:C7:97:46:2A
Authority key identifier: EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
Certificate issuer: /CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Certificate serial: 019DCED0491FA07F8DA3B3A2C81C8F865913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
Manifest number: 05D1
Signing time: Mon 27 Apr 2026 12:00:49 +0000
Manifest this update: Mon 27 Apr 2026 12:00:49 +0000
Manifest next update: Tue 28 Apr 2026 12:00:49 +0000
Files and hashes: 1: 76vFwTMKPwsDGbsWxENIzRuBnkQ.crl (hash: si9WYI4rQXlQsxYs/sMPNDAxRCTI9mhuiKqZMmUdSGw=)
2: GAUUFbrMaCi8twL5FhYDaZpEPLs.roa (hash: +xCgImVqcUMnpmtGGiJK28GMNwusbZ27Pk5kQ0ngYBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:49:1f:a0:7f:8d:a3:b3:a2:c8:1c:8f:86:59:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Validity
Not Before: Apr 27 12:00:49 2026 GMT
Not After : Apr 28 12:00:49 2026 GMT
Subject: CN=7fbbe9316e5d850a979167ba58e34cf8c797462a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:7a:c7:5c:14:ea:6a:7c:e5:db:2e:db:39:
93:49:b9:cd:db:6c:9a:24:a4:83:80:db:44:a7:cf:
d4:a4:65:8a:fc:7b:cc:a2:2e:30:97:aa:e3:8d:d3:
dd:17:8c:c1:ea:32:ef:e4:93:c5:39:48:4f:c1:46:
63:06:b6:50:0c:cd:0e:73:3e:01:4a:f2:5a:ec:5b:
d8:1a:9b:b4:97:8a:09:b5:a5:18:c6:d4:9a:10:f0:
dd:9d:30:54:7b:51:ae:fa:6f:f1:5b:2c:a1:e5:7c:
05:cd:5e:8d:20:59:9b:86:f3:c7:78:6a:80:39:ae:
91:f9:37:77:85:71:48:47:96:43:55:18:97:6a:b1:
dd:86:d4:fa:ac:2e:64:6e:37:dd:78:d7:df:51:dc:
b7:6c:ec:ff:6c:94:33:ff:b1:0d:4b:c4:10:84:ff:
26:5c:a2:cb:03:ec:e4:a7:6e:d0:6d:7a:bf:4b:de:
ef:4b:00:b8:0d:2b:cf:8b:d5:ab:d9:6e:c4:37:20:
ff:f5:30:71:6b:e7:f3:ea:bc:2f:55:80:56:a2:5f:
af:d4:09:f4:ab:78:23:bb:9b:03:5b:95:fe:4d:23:
42:03:ff:ae:77:af:12:4b:f1:5d:65:3a:6d:79:60:
06:ec:ab:e6:72:62:9d:0f:15:86:57:c2:19:dc:fa:
e7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BB:E9:31:6E:5D:85:0A:97:91:67:BA:58:E3:4C:F8:C7:97:46:2A
X509v3 Authority Key Identifier:
keyid:EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:01:29:f5:3f:61:93:68:c0:ed:78:5f:d5:ca:b7:0c:19:6c:
c6:65:63:0a:64:11:c6:69:cc:03:86:5e:bd:5a:37:3c:c6:07:
ec:bf:74:b3:86:45:64:ca:5f:02:34:d5:bb:7c:76:5a:ee:cd:
ab:d1:56:98:5b:b7:60:07:5b:f5:fd:89:89:ce:cb:59:03:e2:
65:e6:97:30:13:f1:be:93:e5:53:7d:ae:9f:90:bf:b3:4a:21:
af:ea:a6:31:00:5f:e3:4b:bb:2b:38:81:90:13:85:f0:5a:cd:
e6:86:5d:a4:81:a3:2d:90:ef:a0:d8:33:3a:e0:bd:71:cb:a9:
10:c5:5b:62:19:f0:7f:b9:a7:34:e9:6a:e0:2b:9d:10:5b:60:
4c:68:80:f1:dd:b4:d2:f6:b6:12:48:c0:01:cc:ba:91:3a:e8:
e3:97:84:6a:f1:f8:0e:7b:c0:36:ab:f9:33:9d:15:75:e7:44:
4c:65:e7:15:db:4d:f4:6d:d3:7e:0a:07:94:e8:42:f0:d5:e9:
d0:91:1f:0a:f8:5c:9b:f9:7c:63:dc:0a:7a:c0:5f:ac:af:f4:
97:b2:ea:33:33:05:e7:a3:a5:36:b5:19:a0:ea:3c:98:44:d8:
ce:7e:96:29:a2:01:17:a7:f4:3b:0e:af:0d:24:63:1e:85:4a:
43:f6:61:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:10:22 2026 by rpki-client