Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
File: 52vcVigM5dn89QMlGKfsm2HizO0.mft (raw, json)
Hash identifier: GOUCmetowsK3Qt5WPQKYCzPnZdyNNP2Agnye9vobw9Y=
Subject key identifier: EC:FA:1F:0C:62:0C:FD:E9:C4:70:19:32:14:65:35:5E:3C:6F:77:28
Authority key identifier: E7:6B:DC:56:28:0C:E5:D9:FC:F5:03:25:18:A7:EC:9B:61:E2:CC:ED
Certificate issuer: /CN=e76bdc56280ce5d9fcf5032518a7ec9b61e2cced
Certificate serial: 01A00101C93F456049351A0992B81444F275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52vcVigM5dn89QMlGKfsm2HizO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
Manifest number: 14C9
Signing time: Fri 14 Aug 2026 16:01:29 +0000
Manifest this update: Fri 14 Aug 2026 16:01:29 +0000
Manifest next update: Sat 15 Aug 2026 16:01:29 +0000
Files and hashes: 1: 52vcVigM5dn89QMlGKfsm2HizO0.crl (hash: z5L/tbuBMbwnYT4KOqDMXuIGm5pP3et6ZzJP8VVNNEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/52vcVigM5dn89QMlGKfsm2HizO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:c9:3f:45:60:49:35:1a:09:92:b8:14:44:f2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76bdc56280ce5d9fcf5032518a7ec9b61e2cced
Validity
Not Before: Aug 14 16:01:29 2026 GMT
Not After : Aug 15 16:01:29 2026 GMT
Subject: CN=ecfa1f0c620cfde9c47019321465355e3c6f7728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:a4:30:60:7a:20:50:66:e0:f6:57:a1:20:
f9:cb:67:ed:69:f3:6d:54:e5:ed:1a:7e:13:eb:b4:
a1:c2:71:d9:3c:6c:ab:2a:d9:5d:1d:02:9b:58:9e:
11:f3:4d:71:dd:3b:0a:bf:23:18:43:21:c7:f8:e7:
66:b0:95:46:57:31:29:c9:13:17:1a:19:19:22:0c:
d1:45:48:96:46:96:14:e7:ee:8d:bc:c5:db:14:bb:
1b:fe:92:22:f7:b7:2a:17:f3:f8:1b:b2:0b:3b:a0:
44:0b:22:48:7a:cb:ca:ff:2a:e6:36:e0:cd:1e:2e:
82:69:99:9e:14:52:8f:06:c0:e0:4c:89:af:ea:ca:
14:65:b4:4a:7b:28:6c:41:42:47:23:9a:56:d6:9d:
bf:79:cd:48:85:13:e8:b1:1d:4c:8a:eb:4d:d0:61:
e7:50:ce:0f:01:75:de:c9:e8:e7:7a:9d:65:e9:22:
53:89:6b:27:5b:e2:94:b2:9a:56:77:a6:24:0c:43:
33:80:b8:0d:e2:ec:32:bb:8e:23:1f:47:f8:7e:96:
22:c0:d0:94:b7:85:e1:49:6a:61:99:d0:4e:b0:34:
ee:d6:29:27:64:79:c6:00:87:25:fb:d9:8d:0a:0b:
af:1d:0f:53:b6:0c:77:c5:73:93:1c:f2:bc:e5:f7:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FA:1F:0C:62:0C:FD:E9:C4:70:19:32:14:65:35:5E:3C:6F:77:28
X509v3 Authority Key Identifier:
keyid:E7:6B:DC:56:28:0C:E5:D9:FC:F5:03:25:18:A7:EC:9B:61:E2:CC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52vcVigM5dn89QMlGKfsm2HizO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:70:af:bd:06:1b:9b:25:7a:7c:1e:1d:d6:83:15:1e:81:e3:
c1:30:8d:9f:7f:ff:52:5e:59:83:26:dd:f9:7a:a0:24:94:15:
10:c0:a7:6b:79:73:37:a8:16:66:a2:e8:32:27:86:bc:bd:28:
85:ae:8f:cb:41:e6:3b:59:d1:5d:cb:a9:d1:a2:e4:8f:47:d4:
18:2c:3b:0e:1a:d9:06:5c:e9:a8:2d:1f:4b:11:bf:fc:2c:6a:
2a:41:93:70:52:8f:2d:52:32:b1:04:06:c5:d0:ed:98:4d:38:
38:0e:b1:68:48:71:c3:b8:67:37:2e:25:3c:27:10:7c:fd:b7:
49:c2:d0:c3:62:f6:c0:27:24:18:8c:1e:e2:d2:cf:3b:3c:64:
37:38:3f:11:ca:29:26:e3:a6:9d:62:80:f1:0c:dd:61:f6:cc:
17:f0:fd:b8:76:91:ba:a7:e6:1c:92:a3:d5:2e:8e:be:53:fd:
a5:dd:b0:69:0a:77:83:f1:a9:97:13:93:14:52:f8:8b:71:31:
92:4c:59:2b:50:b8:69:c3:3e:50:49:9e:2a:d9:47:2c:08:f8:
a5:70:8e:31:74:25:3f:9d:0e:09:82:68:72:eb:ac:cc:ff:50:
b3:a9:d0:8e:fd:6f:03:00:b4:fb:8b:73:b2:72:07:fb:a6:bf:
ca:c1:6a:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAck/RWBJNRoJkrgURPJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NmJkYzU2MjgwY2U1ZDlmY2Y1MDMyNTE4YTdlYzliNjFl
MmNjZWQwHhcNMjYwODE0MTYwMTI5WhcNMjYwODE1MTYwMTI5WjAzMTEwLwYDVQQD
EyhlY2ZhMWYwYzYyMGNmZGU5YzQ3MDE5MzIxNDY1MzU1ZTNjNmY3NzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IOkMGB6IFBm4PZXoSD5y2ftafNt
VOXtGn4T67ShwnHZPGyrKtldHQKbWJ4R801x3TsKvyMYQyHH+OdmsJVGVzEpyRMX
GhkZIgzRRUiWRpYU5+6NvMXbFLsb/pIi97cqF/P4G7ILO6BECyJIesvK/yrmNuDN
Hi6CaZmeFFKPBsDgTImv6soUZbRKeyhsQUJHI5pW1p2/ec1IhRPosR1MiutN0GHn
UM4PAXXeyejnep1l6SJTiWsnW+KUsppWd6YkDEMzgLgN4uwyu44jH0f4fpYiwNCU
t4XhSWphmdBOsDTu1iknZHnGAIcl+9mNCguvHQ9Ttgx3xXOTHPK85fcB4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOz6HwxiDP3pxHAZMhRlNV48b3coMB8GA1UdIwQY
MBaAFOdr3FYoDOXZ/PUDJRin7Jth4sztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJ2Y1ZpZ001ZG44OVFNbEdLZnNtMkhpek8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zZGRkNmEtMzAyNS00MTk2LTg0YzIt
ZjFjMjRhODEzOWRiLzEvNTJ2Y1ZpZ001ZG44OVFNbEdLZnNtMkhpek8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8zZGRkNmEtMzAyNS00MTk2LTg0YzItZjFjMjRhODEzOWRi
LzEvNTJ2Y1ZpZ001ZG44OVFNbEdLZnNtMkhpek8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHCvvQYb
myV6fB4d1oMVHoHjwTCNn3//Ul5Zgybd+XqgJJQVEMCna3lzN6gWZqLoMieGvL0o
ha6Py0HmO1nRXcup0aLkj0fUGCw7DhrZBlzpqC0fSxG//CxqKkGTcFKPLVIysQQG
xdDtmE04OA6xaEhxw7hnNy4lPCcQfP23ScLQw2L2wCckGIwe4tLPOzxkNzg/Ecop
JuOmnWKA8QzdYfbMF/D9uHaRuqfmHJKj1S6OvlP9pd2waQp3g/GplxOTFFL4i3Ex
kkxZK1C4acM+UEmeKtlHLAj4pXCOMXQlP50OCYJocuuszP9Qs6nQjv1vAwC0+4tz
snIH+6a/ysFqvQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:41 2026 by rpki-client