Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
File: 54z133frZmwE77frs8o0BK3sNPs.mft (raw, json)
Hash identifier: SmmR6ik9sWoDLIBhdfARLnvuLUOK7BPA9GSuBdL9JOQ=
Subject key identifier: EF:48:86:26:B6:06:ED:67:80:AD:6D:CC:69:4F:7E:66:8F:D5:53:F9
Authority key identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
Certificate issuer: /CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Certificate serial: 019D37528301328E9BFE05A47FC022F1CFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
Manifest number: 0F6E
Signing time: Sun 29 Mar 2026 02:00:47 +0000
Manifest this update: Sun 29 Mar 2026 02:00:47 +0000
Manifest next update: Mon 30 Mar 2026 02:00:47 +0000
Files and hashes: 1: 54z133frZmwE77frs8o0BK3sNPs.crl (hash: /pEMUbZpxKSrPRkwt7aLbORJnxOdL3YXjCIctmKzr6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:83:01:32:8e:9b:fe:05:a4:7f:c0:22:f1:cf:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Validity
Not Before: Mar 29 02:00:47 2026 GMT
Not After : Mar 30 02:00:47 2026 GMT
Subject: CN=ef488626b606ed6780ad6dcc694f7e668fd553f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:46:b6:1b:d4:b3:2d:b6:b3:4f:82:da:0b:
18:31:67:71:ca:cf:47:c3:e8:93:fd:d1:be:96:fd:
28:57:a2:5b:58:f0:4e:ab:52:a4:6a:d0:6d:7f:c1:
2f:c4:fc:a6:24:18:25:79:19:d2:e8:00:5e:d6:f2:
3d:a2:8b:d8:38:31:28:93:e6:99:b0:c4:14:92:6f:
cf:34:40:87:9c:f6:d5:9f:47:a0:ad:35:37:75:0b:
9d:5d:cb:9e:c1:34:04:16:90:b5:b6:5f:bd:d8:ac:
77:d5:63:8a:cd:eb:9c:50:f2:73:85:27:9d:1d:c2:
6d:9c:0c:79:b2:0f:5f:76:e9:a2:80:0b:9c:8f:25:
0c:c8:58:8c:8c:92:df:16:91:2f:7e:39:8b:81:65:
56:20:d3:49:fd:14:94:5c:c2:0a:ac:56:ce:2d:8e:
02:ab:33:23:6c:c3:6f:c6:13:d8:50:6e:b6:0f:32:
78:9c:c6:84:f3:37:52:7d:77:f2:f0:e1:ed:18:ed:
9a:48:1d:8a:a0:27:39:4a:51:5c:01:44:d4:1d:73:
3c:ee:03:1e:55:63:28:be:70:24:2c:1c:29:32:ff:
9f:70:85:d7:c5:4d:da:6d:19:99:36:dd:26:51:3e:
ab:83:6c:ff:66:c0:06:ed:7a:c4:a8:f9:77:e1:a5:
e6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:48:86:26:B6:06:ED:67:80:AD:6D:CC:69:4F:7E:66:8F:D5:53:F9
X509v3 Authority Key Identifier:
keyid:E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9e:4e:71:99:69:03:9f:06:43:a9:d8:79:14:bd:bf:73:2b:
0f:7e:be:ab:a9:4e:39:53:d7:a1:3b:8f:ac:e9:54:60:45:19:
8b:12:56:d5:f4:30:ec:f1:ff:57:d2:ce:8d:7b:a0:17:d3:fd:
bf:c7:30:b1:73:a1:d5:48:a9:53:1e:35:4f:22:8d:6e:ca:76:
81:07:20:cf:aa:96:65:48:96:f7:ea:a5:30:f5:aa:7e:62:7c:
31:b8:70:47:fa:2c:cb:79:87:6e:7d:21:a2:cf:60:56:74:9e:
23:a1:8e:8c:c8:4c:7b:8e:3e:77:20:28:52:f8:8e:7b:18:41:
89:67:1b:1d:15:99:d9:9e:ea:b2:05:6b:18:1a:30:1d:f1:87:
df:2b:52:48:cc:0e:47:75:c6:b8:55:29:ad:e4:64:a2:de:32:
91:54:55:48:55:3c:fa:d8:7b:8b:f4:72:5b:a3:6a:d0:a2:bf:
13:d1:b8:a4:84:01:d4:6d:a1:e7:72:7e:ed:fb:28:c0:49:10:
bc:28:d5:bb:81:fc:e3:86:ea:51:e0:c7:cc:3a:b9:76:0a:9a:
d2:e9:d8:04:d2:62:78:03:62:f7:67:11:d2:75:28:2d:b7:e9:
84:fb:7f:b0:f1:93:d3:a3:9d:b5:e5:e6:4d:a5:5d:30:79:be:
b3:6b:32:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:50 2026 by rpki-client