Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
File: 52vcVigM5dn89QMlGKfsm2HizO0.mft (raw, json)
Hash identifier: XJHONpo6icsNKodtwYymnawbH6ARawughL7YkDt+92o=
Subject key identifier: 17:05:BD:F6:DE:13:69:64:B8:4A:76:2F:43:A1:47:ED:A3:ED:38:10
Authority key identifier: E7:6B:DC:56:28:0C:E5:D9:FC:F5:03:25:18:A7:EC:9B:61:E2:CC:ED
Certificate issuer: /CN=e76bdc56280ce5d9fcf5032518a7ec9b61e2cced
Certificate serial: 01A15AB057E19CA6E9B83DB5E892AA6FDF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52vcVigM5dn89QMlGKfsm2HizO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
Manifest number: 157C
Signing time: Tue 20 Oct 2026 19:01:08 +0000
Manifest this update: Tue 20 Oct 2026 19:01:08 +0000
Manifest next update: Wed 21 Oct 2026 19:01:08 +0000
Files and hashes: 1: 52vcVigM5dn89QMlGKfsm2HizO0.crl (hash: HOyuz0qTAFhpH+Vhb7U+hJvKEM/1UL5Czlv/KAHTZwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/52vcVigM5dn89QMlGKfsm2HizO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:b0:57:e1:9c:a6:e9:b8:3d:b5:e8:92:aa:6f:df:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76bdc56280ce5d9fcf5032518a7ec9b61e2cced
Validity
Not Before: Oct 20 19:01:08 2026 GMT
Not After : Oct 21 19:01:08 2026 GMT
Subject: CN=1705bdf6de136964b84a762f43a147eda3ed3810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:16:26:bd:61:1b:be:b0:b2:34:10:e8:57:
06:65:8c:3e:ca:2e:71:be:3a:52:09:86:64:9b:ea:
f0:24:36:c9:d4:77:80:ff:80:08:ef:da:14:04:2c:
12:60:e4:95:58:15:28:ed:5f:27:41:1b:d9:46:56:
fd:10:20:7e:fe:ad:f1:77:f4:33:b1:2f:11:9a:7d:
7e:0b:8e:0f:33:bf:0f:73:0b:0f:2d:29:e9:d7:6f:
3b:b9:cc:9e:d1:a1:61:6e:5a:3a:4b:ea:63:5e:09:
69:75:be:92:99:a8:48:97:7c:9b:7b:a7:ff:0f:97:
3b:4c:29:5c:84:fc:44:98:7f:04:c7:42:6e:0f:1a:
82:ea:cc:da:9c:57:61:2a:62:c1:34:36:29:5f:0b:
e2:ad:67:d5:6f:26:33:b0:93:4c:54:0c:de:fe:fd:
28:36:18:eb:64:06:4e:1d:48:5c:29:54:a3:59:0d:
2e:40:0d:0a:a7:e3:5e:92:18:97:67:b7:65:36:a5:
82:ec:94:39:bb:f1:55:eb:c2:4d:a1:f2:55:b0:55:
70:e1:3f:40:9d:8f:c4:ba:05:9f:55:74:ff:7f:36:
f5:07:0c:93:d9:bd:8b:d4:93:72:ef:1a:ea:f3:4e:
c0:a6:e2:c7:70:08:de:05:d1:9b:4f:85:a7:0f:3b:
b6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:05:BD:F6:DE:13:69:64:B8:4A:76:2F:43:A1:47:ED:A3:ED:38:10
X509v3 Authority Key Identifier:
keyid:E7:6B:DC:56:28:0C:E5:D9:FC:F5:03:25:18:A7:EC:9B:61:E2:CC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52vcVigM5dn89QMlGKfsm2HizO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:12:cf:22:be:0a:ff:94:70:6d:2c:da:c4:c3:b9:8d:7c:3d:
91:d7:66:79:bb:f6:72:44:8b:60:57:6b:6a:10:f4:23:76:23:
02:29:b7:45:92:ee:64:65:29:75:0c:2e:b7:d5:ee:55:d4:17:
bd:6d:f0:55:91:5b:90:59:04:a6:73:ca:2e:1c:71:ac:67:e1:
39:85:72:e4:22:fd:b1:e1:8d:00:79:61:af:7e:67:81:6f:33:
a2:5d:44:55:b9:b9:cf:af:d5:aa:76:82:eb:d2:99:ae:6f:43:
8d:e7:08:67:83:bc:3f:6a:de:35:55:2b:be:f3:1b:1e:97:c9:
3b:60:b9:5f:00:c2:a3:c0:d1:68:8d:dd:67:d5:af:67:3c:44:
72:74:9b:2e:0f:6e:23:7d:c6:a5:0c:13:ba:00:b0:9e:dc:b6:
44:96:c8:c7:56:84:94:b4:4b:78:a0:db:6f:6b:00:7e:3d:ca:
33:4e:3a:0b:f2:8b:9c:2f:f6:65:6e:a8:e5:6d:5d:79:cd:60:
11:6a:a6:89:28:c0:79:e8:7e:60:74:92:65:f7:4d:b3:ac:62:
27:20:88:20:e3:d6:3c:43:33:cf:65:51:fd:5f:fb:2d:f9:38:
ac:99:06:58:48:f4:5a:6d:f2:9e:49:34:82:7f:eb:bb:ad:16:
b8:fd:81:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:06:25 2026 by rpki-client