Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
File: 52px9rqT9s9H6zF7K_0EnVzDl2A.mft (raw, json)
Hash identifier: jLL9TLmlD+MKf0aohHdkRlx1h+HZYdlaD4wif+CHsKM=
Subject key identifier: AD:65:39:9D:0F:75:B1:FC:A3:F8:90:A1:21:D6:D3:38:B7:E6:F9:F0
Authority key identifier: E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
Certificate issuer: /CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Certificate serial: 019D382EB06CF9F374C26D0DCC5B9C08225B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
Manifest number: 0C9B
Signing time: Sun 29 Mar 2026 06:01:17 +0000
Manifest this update: Sun 29 Mar 2026 06:01:17 +0000
Manifest next update: Mon 30 Mar 2026 06:01:17 +0000
Files and hashes: 1: 52px9rqT9s9H6zF7K_0EnVzDl2A.crl (hash: 84fbgaQiEpzTw6ylvgljWZfb+AFNxs0MjAwL/fGSMzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:b0:6c:f9:f3:74:c2:6d:0d:cc:5b:9c:08:22:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Validity
Not Before: Mar 29 06:01:17 2026 GMT
Not After : Mar 30 06:01:17 2026 GMT
Subject: CN=ad65399d0f75b1fca3f890a121d6d338b7e6f9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:37:f4:b9:ce:ee:43:e4:26:54:93:05:e6:
ce:e2:c1:33:fe:eb:bf:3c:9c:70:ec:2a:ff:2f:97:
4d:4e:dc:c6:50:7a:21:ae:f8:fa:a4:51:f0:20:37:
b1:75:ac:4c:9e:78:da:d7:86:f5:02:3d:25:1b:b4:
b9:97:41:54:19:66:e2:87:c3:4e:87:77:07:e8:99:
95:65:de:ef:65:ce:fe:95:72:1b:96:05:5d:c8:04:
0a:fc:2b:ac:43:9f:79:a4:90:c2:6f:e8:0d:31:98:
ed:8a:b1:bd:67:c1:88:80:22:f0:d7:7e:d9:19:42:
92:36:05:ca:30:07:fe:6d:91:e0:56:ba:0f:04:92:
a2:21:bb:2c:b7:09:44:09:ee:12:11:ca:43:b6:bf:
2d:64:2c:d6:db:05:6b:93:bf:20:e8:d6:58:41:45:
c5:c8:f8:71:88:53:d2:fe:0a:66:ec:2b:68:38:bb:
5f:71:ec:70:af:c3:3a:14:5a:ef:9d:68:7d:c6:e5:
bf:9a:75:70:47:2e:87:53:c3:6c:21:a2:b8:65:dd:
51:84:3c:79:59:c2:ba:d4:e3:53:9b:3e:79:fa:cc:
a4:16:9a:7a:4d:a7:90:56:81:dd:d8:83:de:12:a5:
fa:fe:1d:98:27:ac:86:00:a6:a8:2f:1a:56:ce:d8:
43:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:65:39:9D:0F:75:B1:FC:A3:F8:90:A1:21:D6:D3:38:B7:E6:F9:F0
X509v3 Authority Key Identifier:
keyid:E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c5:e5:e3:96:3f:a5:09:da:9f:46:53:d1:00:14:25:94:f7:
6a:67:c2:0f:ea:6b:e1:47:76:8f:88:91:36:06:b7:5f:b3:3c:
df:59:03:88:74:3e:d9:ad:9f:d7:94:8e:26:3d:88:71:80:48:
1f:ca:a2:70:11:fb:7e:8e:2a:f7:86:34:18:0a:b1:6a:ed:e9:
28:db:1f:98:ea:4f:f1:a3:0b:e0:44:a5:fd:a0:ac:b8:e9:a0:
58:94:f9:e0:11:39:76:2e:76:26:c5:81:02:52:cd:77:69:e3:
89:81:e1:cb:8a:03:ab:77:fb:39:85:82:0e:fb:a6:ba:40:a4:
a0:fc:d9:1a:07:3a:f1:9f:14:3d:bb:f2:37:cb:e3:f7:9e:34:
c7:5f:58:10:d2:44:1b:b0:46:2f:c7:29:9f:eb:2d:54:4c:c9:
bc:53:26:c6:3c:33:53:12:9f:60:11:31:06:7b:a7:30:bd:e2:
2c:57:48:36:ad:41:86:af:96:2a:15:10:89:df:07:cf:fd:e4:
66:a5:47:5c:b1:d3:03:63:08:67:cf:21:ba:c2:84:d3:7e:08:
5e:a4:57:92:88:1c:8c:17:5e:7b:14:ce:af:1e:1f:13:2b:a0:
f2:54:7b:a3:da:88:09:1a:e1:49:ae:72:7c:87:e6:61:1e:ba:
b2:72:60:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:17 2026 by rpki-client