Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
File: 52px9rqT9s9H6zF7K_0EnVzDl2A.mft (raw, json)
Hash identifier: tpzoWBiDzNcqYkl36TmQPIoYy+i6MfBwgyCpXt8GiKY=
Subject key identifier: 15:40:5B:C5:E2:1C:D6:29:72:A2:DC:A9:88:5A:F7:26:64:2B:69:42
Authority key identifier: E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
Certificate issuer: /CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Certificate serial: 01A000CA6DD9588716EC61C18AD2137F844E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
Manifest number: 0E0C
Signing time: Fri 14 Aug 2026 15:01:01 +0000
Manifest this update: Fri 14 Aug 2026 15:01:01 +0000
Manifest next update: Sat 15 Aug 2026 15:01:01 +0000
Files and hashes: 1: 52px9rqT9s9H6zF7K_0EnVzDl2A.crl (hash: TWcAlpW/0mrE6QfLfZmjap3HKFxFk0DQ3YOL28SChG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:6d:d9:58:87:16:ec:61:c1:8a:d2:13:7f:84:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Validity
Not Before: Aug 14 15:01:01 2026 GMT
Not After : Aug 15 15:01:01 2026 GMT
Subject: CN=15405bc5e21cd62972a2dca9885af726642b6942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:c0:e3:fb:36:84:cb:1f:58:c7:68:5e:7c:
21:54:d1:63:92:5c:b6:4b:e2:3a:d9:9a:ac:b3:f6:
3e:d4:d3:5b:93:8c:f5:68:04:ec:9f:aa:66:ea:44:
72:b4:7f:0f:66:73:b0:c7:71:14:34:ff:96:d3:80:
cb:c6:d5:c1:ab:cf:1f:45:a5:dd:29:70:b1:72:9a:
31:42:67:60:91:ff:b8:be:18:48:fb:b2:6a:af:17:
0a:fb:5e:3d:9a:cd:a9:8a:47:ce:c8:dc:54:22:7f:
00:0b:03:b8:ac:a2:56:81:ae:63:9b:09:ed:86:fd:
c9:0e:15:6c:8f:ee:54:4e:54:9e:80:e9:1c:d9:c9:
33:c4:29:de:80:fb:fe:d1:1f:76:19:92:77:0c:63:
82:26:bd:c9:a9:18:ea:2a:f6:bf:c8:d5:0c:70:76:
68:8a:d9:bb:c4:11:45:d1:1d:73:f2:df:7c:bc:ac:
b6:e5:72:a6:4e:67:a9:d6:5e:f8:92:c4:74:01:08:
c8:ce:00:5b:47:ab:41:ea:2f:b9:69:9d:82:0f:4e:
6d:56:98:d0:81:1c:35:ac:5f:8a:47:30:7e:a8:de:
5a:fa:b5:bc:79:fd:c1:03:ae:39:d0:33:e2:c3:cf:
d7:c6:c3:27:6c:78:bb:32:6b:d8:c2:4d:f8:fa:35:
34:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:40:5B:C5:E2:1C:D6:29:72:A2:DC:A9:88:5A:F7:26:64:2B:69:42
X509v3 Authority Key Identifier:
keyid:E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1d:a9:6f:b4:fd:cf:23:8e:47:65:d3:8b:63:3c:e4:3b:53:
d4:78:18:26:91:15:82:28:d5:d3:ba:d9:8c:62:c7:d0:4e:4e:
c9:b4:9e:f4:71:2c:73:7b:2b:ab:9d:5a:6e:86:01:f0:e2:e7:
ef:5c:06:ce:70:c9:97:10:4b:ff:98:9a:4f:21:39:a8:aa:ff:
6f:cd:0a:43:2a:9d:64:30:fd:f2:2b:bf:40:e1:3c:81:d1:c1:
d3:43:53:d4:62:a7:82:46:4c:df:99:13:cc:08:bb:04:57:7c:
1c:d7:5d:0b:8b:38:e9:b4:2c:bb:14:dd:85:f5:cb:81:80:d7:
96:f1:c9:1c:3f:20:57:e7:c7:ad:b6:91:41:e3:60:d6:ab:b5:
d6:a7:cf:da:f0:f4:9e:60:72:de:84:14:48:ba:ce:ce:90:9e:
9f:06:e1:60:4a:28:bb:12:b8:c1:5a:9a:8c:86:45:d2:8e:1d:
fc:72:a2:78:90:dd:54:f9:df:48:6b:f8:f6:de:ae:3e:54:ef:
39:fb:d8:1b:11:71:38:1b:a9:06:d8:37:e1:16:a6:3a:99:60:
a3:78:40:fd:58:3b:61:be:c8:a3:04:ab:39:c4:8c:e7:7c:ad:
97:f2:4c:fa:e6:c8:59:36:94:05:00:ef:a9:85:12:57:66:73:
e4:47:34:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:01 2026 by rpki-client