Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
File: 52px9rqT9s9H6zF7K_0EnVzDl2A.mft (raw, json)
Hash identifier: fvWMd4HXEXbCriyWphFlSwBIOjpA2bt0GFhE/MjjHyA=
Subject key identifier: A5:B8:FF:CD:6E:9B:F0:F2:72:D3:D1:8B:D4:03:7C:DA:A3:86:C4:63
Authority key identifier: E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
Certificate issuer: /CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Certificate serial: 01A14917F9296D3BBBBC9142FD3167A06451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
Manifest number: 0EB6
Signing time: Sat 17 Oct 2026 09:01:10 +0000
Manifest this update: Sat 17 Oct 2026 09:01:10 +0000
Manifest next update: Sun 18 Oct 2026 09:01:10 +0000
Files and hashes: 1: 52px9rqT9s9H6zF7K_0EnVzDl2A.crl (hash: UaM0oL1PbhCq97++ti7IqDj1jH+9FaRShI+mhYJfdr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:17:f9:29:6d:3b:bb:bc:91:42:fd:31:67:a0:64:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Validity
Not Before: Oct 17 09:01:10 2026 GMT
Not After : Oct 18 09:01:10 2026 GMT
Subject: CN=a5b8ffcd6e9bf0f272d3d18bd4037cdaa386c463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:95:15:c4:89:a7:60:9c:af:d6:a3:ec:3e:
4f:35:ac:49:0e:49:69:11:7f:10:aa:4b:85:b8:fa:
a9:23:f6:71:b2:5a:f2:22:4b:86:ca:03:87:a1:71:
6a:51:fa:f1:20:a2:6e:56:2d:b3:4b:8a:ab:2c:a4:
e3:6c:59:ba:48:a3:57:87:f6:ae:87:be:68:0f:bd:
6d:b2:fa:32:4d:51:a5:26:ae:7c:5e:ae:6b:86:da:
de:8d:13:a0:30:a5:7f:a2:7f:3e:34:a7:10:dd:11:
5d:51:9d:7e:1e:97:66:a1:ec:44:10:84:73:15:a9:
94:be:b0:d7:2c:ce:5d:75:2c:af:c7:dd:b7:e4:10:
f1:88:bd:a8:19:1f:35:e7:4e:37:25:93:0c:5b:90:
ea:20:48:5a:ee:b8:d1:47:1a:96:8f:5d:29:7a:cb:
96:4c:c5:7e:94:fd:17:e0:f6:aa:c3:ad:98:64:b3:
36:93:93:72:1e:fd:18:bf:e6:59:2f:d9:2d:4c:08:
6f:9b:7c:f9:c1:bf:f8:2a:19:23:82:c5:cf:c0:f9:
69:58:66:e8:39:9c:7b:c0:1b:4c:b9:0f:c4:df:eb:
0a:50:7e:c0:01:87:76:cd:34:4c:db:7c:a0:7a:d7:
ce:3e:d1:00:b1:22:3e:8e:ef:60:a1:ad:31:57:5f:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B8:FF:CD:6E:9B:F0:F2:72:D3:D1:8B:D4:03:7C:DA:A3:86:C4:63
X509v3 Authority Key Identifier:
keyid:E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:51:1c:23:c2:7f:9d:7e:72:60:e2:4f:11:4b:fb:b1:e0:f9:
76:a8:8b:b8:5d:68:b7:ed:4e:ae:3d:27:c6:91:d4:4d:42:fd:
45:50:03:6b:11:cf:c4:ca:5e:98:f0:5a:d9:45:20:23:ef:61:
79:fa:20:7a:15:24:7c:ef:cb:f1:df:3b:11:96:e6:7b:08:b3:
fa:e2:9f:3c:e0:89:cf:88:d7:d9:09:bd:f6:08:33:44:d2:32:
dd:f6:7d:8d:68:1f:69:ad:cc:43:34:79:4d:8c:15:7b:a1:b3:
59:14:2f:18:ba:63:63:ba:42:11:b6:cf:02:80:82:7f:a3:55:
1b:14:69:b7:03:be:71:8e:cb:4e:e8:1c:49:76:f7:b0:07:5f:
bf:b1:b2:c6:e6:c5:4d:ca:79:dc:30:5e:62:54:25:ad:ce:8f:
5d:91:e5:df:9e:d0:9b:ee:1c:73:ce:d2:e4:04:89:3a:fb:00:
e6:74:ad:2a:ea:f2:fa:f9:69:28:7d:20:fd:13:df:7f:20:2c:
ab:fe:62:5a:8e:1c:e8:d7:30:c6:5f:d8:cb:e2:90:a7:0b:1c:
c9:70:c3:01:d1:f6:4d:51:c8:d5:d8:8f:9e:31:05:f3:c4:be:
a0:19:b3:97:61:4f:cd:0a:9d:1d:4a:a9:ec:56:6d:3f:91:3f:
0d:51:d7:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFJF/kpbTu7vJFC/TFnoGRRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NmE3MWY2YmE5M2Y2Y2Y0N2ViMzE3YjJiZmQwNDlkNWNj
Mzk3NjAwHhcNMjYxMDE3MDkwMTEwWhcNMjYxMDE4MDkwMTEwWjAzMTEwLwYDVQQD
EyhhNWI4ZmZjZDZlOWJmMGYyNzJkM2QxOGJkNDAzN2NkYWEzODZjNDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmaVFcSJp2Ccr9aj7D5PNaxJDklp
EX8QqkuFuPqpI/ZxslryIkuGygOHoXFqUfrxIKJuVi2zS4qrLKTjbFm6SKNXh/au
h75oD71tsvoyTVGlJq58Xq5rhtrejROgMKV/on8+NKcQ3RFdUZ1+HpdmoexEEIRz
FamUvrDXLM5ddSyvx9235BDxiL2oGR815043JZMMW5DqIEha7rjRRxqWj10pesuW
TMV+lP0X4Paqw62YZLM2k5NyHv0Yv+ZZL9ktTAhvm3z5wb/4KhkjgsXPwPlpWGbo
OZx7wBtMuQ/E3+sKUH7AAYd2zTRM23ygetfOPtEAsSI+ju9goa0xV19uGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKW4/81um/DyctPRi9QDfNqjhsRjMB8GA1UdIwQY
MBaAFOdqcfa6k/bPR+sxeyv9BJ1cw5dgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJweDlycVQ5czlINnpGN0tfMEVuVnpEbDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8yZjY5NDQtYjFmNy00OWJiLWJmZTct
YTM5MGYzY2UzYTU2LzEvNTJweDlycVQ5czlINnpGN0tfMEVuVnpEbDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8yZjY5NDQtYjFmNy00OWJiLWJmZTctYTM5MGYzY2UzYTU2
LzEvNTJweDlycVQ5czlINnpGN0tfMEVuVnpEbDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArlEcI8J/
nX5yYOJPEUv7seD5dqiLuF1ot+1Orj0nxpHUTUL9RVADaxHPxMpemPBa2UUgI+9h
efogehUkfO/L8d87EZbmewiz+uKfPOCJz4jX2Qm99ggzRNIy3fZ9jWgfaa3MQzR5
TYwVe6GzWRQvGLpjY7pCEbbPAoCCf6NVGxRptwO+cY7LTugcSXb3sAdfv7GyxubF
Tcp53DBeYlQlrc6PXZHl357Qm+4cc87S5ASJOvsA5nStKury+vlpKH0g/RPffyAs
q/5iWo4c6Ncwxl/Yy+KQpwscyXDDAdH2TVHI1diPnjEF88S+oBmzl2FPzQqdHUqp
7FZtP5E/DVHXRA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 18:38:07 2026 by rpki-client