Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft
File: 56uLgItVmzffK-5YgugcjBUvW9c.mft (raw, json)
Hash identifier: PM2+rj0YxYeIzkB3Z+qZrMeqgnnDbHWpHblxrsQN9AU=
Subject key identifier: 2A:D1:AA:D0:39:2F:D3:1E:39:16:65:F7:02:FE:B7:E1:66:A2:AD:EA
Authority key identifier: E7:AB:8B:80:8B:55:9B:37:DF:2B:EE:58:82:E8:1C:8C:15:2F:5B:D7
Certificate issuer: /CN=e7ab8b808b559b37df2bee5882e81c8c152f5bd7
Certificate serial: 019D38D2CEDFC6CE6117F2DDD2A2B9F1B554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56uLgItVmzffK-5YgugcjBUvW9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft
Manifest number: 45
Signing time: Sun 29 Mar 2026 09:00:32 +0000
Manifest this update: Sun 29 Mar 2026 09:00:32 +0000
Manifest next update: Mon 30 Mar 2026 09:00:32 +0000
Files and hashes: 1: 56uLgItVmzffK-5YgugcjBUvW9c.crl (hash: jZzZWjJVTD7UFH2ck0sriGo8mnXxRfgVI1uqOaRJ2uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/56uLgItVmzffK-5YgugcjBUvW9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ce:df:c6:ce:61:17:f2:dd:d2:a2:b9:f1:b5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ab8b808b559b37df2bee5882e81c8c152f5bd7
Validity
Not Before: Mar 29 09:00:32 2026 GMT
Not After : Mar 30 09:00:32 2026 GMT
Subject: CN=2ad1aad0392fd31e391665f702feb7e166a2adea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bb:01:53:ff:84:d7:7a:7c:c2:74:63:3b:91:
9b:38:78:75:19:00:da:83:71:9d:74:6a:e3:61:ec:
2e:0c:f5:95:c9:02:49:c8:06:57:7c:d5:20:74:0c:
9c:fb:cd:fa:cb:18:51:75:c3:ab:4c:bd:37:a5:64:
f8:a5:a5:41:7c:38:bb:6c:43:85:07:9d:40:aa:e8:
b2:ab:ed:5f:36:5b:e8:55:15:dd:4b:bf:dd:92:db:
97:8f:22:45:c3:4c:73:02:ba:fe:40:4e:83:64:0f:
96:8d:b1:ac:a1:cc:63:a7:93:62:c3:4e:18:f9:75:
ab:bf:b7:6a:71:56:79:d1:62:80:6a:9c:1d:6d:76:
0b:aa:cd:4b:33:02:22:74:6b:f0:f7:5b:a7:6d:5e:
7e:66:f7:a0:ea:98:db:db:05:1a:17:a2:df:1f:df:
e0:f6:3c:04:63:43:19:7c:74:b0:f9:b9:a2:7b:83:
e5:04:4e:0e:83:6b:53:a5:6b:c8:c0:8e:b6:29:62:
6c:df:91:34:40:12:92:c1:eb:54:62:6c:5d:f9:12:
c7:9d:48:a3:7b:3e:42:37:eb:4b:65:39:c7:ea:7e:
f5:56:91:9f:0d:15:d5:f2:3d:7b:16:3b:ff:46:60:
27:d6:b1:c3:17:73:94:a6:f4:dc:c8:2b:e3:17:48:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D1:AA:D0:39:2F:D3:1E:39:16:65:F7:02:FE:B7:E1:66:A2:AD:EA
X509v3 Authority Key Identifier:
keyid:E7:AB:8B:80:8B:55:9B:37:DF:2B:EE:58:82:E8:1C:8C:15:2F:5B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56uLgItVmzffK-5YgugcjBUvW9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9f:93:eb:9f:01:1d:7d:da:c1:26:8a:9e:16:43:19:ef:01:
4b:49:78:dd:99:cf:6b:06:3a:b6:16:df:bd:28:f5:ef:9a:b1:
67:46:6a:d6:08:f8:a4:ef:e1:e7:c0:06:7d:fb:37:4d:89:9f:
44:48:d7:c5:63:bd:32:18:c8:4d:39:f5:b7:ca:f3:09:62:41:
3e:a2:f3:59:f6:10:b4:f4:69:a9:8f:7d:af:03:ef:76:03:ba:
cb:e4:15:24:22:92:f2:9d:de:ef:be:38:03:ca:46:22:79:ae:
f7:a9:03:18:c7:7b:60:6f:ab:50:8f:1c:24:bd:1b:d2:27:a6:
39:af:40:1c:5e:a5:b9:42:33:8f:52:54:cf:8f:a4:21:53:71:
83:fa:6d:4c:87:f2:5a:1c:df:95:cb:35:6b:cf:b9:d6:3a:31:
81:4f:e1:a5:22:af:e5:08:11:8b:e3:83:e1:05:9e:13:36:60:
68:f2:2b:36:a7:07:95:6d:12:bf:26:45:8c:1d:9f:f8:2a:f2:
d7:27:26:2f:86:82:d7:35:3c:8d:c8:64:bb:58:2a:c9:09:8a:
a2:f9:fc:7a:73:fc:3e:b6:62:ce:0b:5a:dc:2e:8a:10:12:d7:
32:27:9f:70:9b:39:38:5c:06:a2:c6:7d:b9:b3:6f:09:4f:60:
55:69:85:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:24 2026 by rpki-client