Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
File: 76AvL3KWXJ4cmy1X6j_BL8-skQM.mft (raw, json)
Hash identifier: ITM07JqT6A+L+6cJl+eWLX0wdqJiR9Zn2bO8vhevhgs=
Subject key identifier: 16:31:34:A1:29:D1:63:5E:F1:C6:0B:B1:D3:3E:56:77:1A:9F:6C:FF
Authority key identifier: EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
Certificate issuer: /CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Certificate serial: 019D3307EF449197ABA777CB3B152585F562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
Manifest number: 1887
Signing time: Sat 28 Mar 2026 06:00:51 +0000
Manifest this update: Sat 28 Mar 2026 06:00:51 +0000
Manifest next update: Sun 29 Mar 2026 06:00:51 +0000
Files and hashes: 1: 76AvL3KWXJ4cmy1X6j_BL8-skQM.crl (hash: S2T8u7h3Rn4gd6ZJaecz87VqbfwCnCSmkFIiwQAkD9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:ef:44:91:97:ab:a7:77:cb:3b:15:25:85:f5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Validity
Not Before: Mar 28 06:00:51 2026 GMT
Not After : Mar 29 06:00:51 2026 GMT
Subject: CN=163134a129d1635ef1c60bb1d33e56771a9f6cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:20:a3:65:46:a5:6b:ee:af:7d:4f:a0:bc:
d7:c8:e1:df:da:22:3a:b0:c9:3b:1c:bc:dd:e0:81:
91:5c:07:62:2a:ad:85:27:20:19:1c:ee:fa:c4:19:
30:76:8a:83:e3:53:1e:9f:ce:67:c9:3f:cd:04:9a:
39:61:2a:4a:ab:5b:d5:9c:ea:d8:6e:b7:a1:6b:96:
b5:bf:5e:d1:c4:c7:45:4b:40:03:b7:9a:dd:23:d4:
5c:88:c9:6c:62:a0:45:b3:2a:76:7b:3b:27:03:af:
39:5d:d2:a5:5b:a4:9f:02:eb:5d:37:c9:34:e9:42:
91:e5:31:f1:36:32:ee:8c:a2:f5:12:ad:a4:24:76:
26:28:32:3c:aa:bf:9b:fc:dd:d1:81:a9:bb:67:4a:
a4:25:93:f7:92:54:2f:c8:76:db:5b:45:08:37:f8:
39:18:a0:b7:da:a8:1f:03:7c:29:1d:2e:66:fd:77:
67:db:5f:be:8a:17:b6:18:96:f5:22:68:de:df:91:
3e:a9:79:53:5b:5d:ff:1a:b3:b9:75:bb:7d:f2:16:
85:d2:d3:86:56:dc:4b:34:4a:4a:47:29:05:2b:9f:
b9:b3:c6:5c:91:99:8a:ca:09:70:53:e5:41:d2:25:
59:1f:75:0c:c1:4d:61:52:70:a0:1d:34:df:02:d1:
6d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:31:34:A1:29:D1:63:5E:F1:C6:0B:B1:D3:3E:56:77:1A:9F:6C:FF
X509v3 Authority Key Identifier:
keyid:EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:be:95:b4:db:64:a7:af:47:5d:7f:9c:df:02:82:2e:0c:f1:
62:94:29:70:c6:53:bd:d2:09:5b:30:a5:2f:44:f9:2d:03:17:
f2:bd:3e:9c:10:a1:5c:78:d5:29:83:55:a6:26:76:59:55:c4:
19:46:5a:5c:5a:65:49:e8:a6:a7:4d:c1:e4:3c:3e:0f:00:9e:
e8:a8:87:36:d2:bb:bb:3e:04:0d:c0:89:a6:fd:ff:ac:9a:48:
bb:b5:bd:6f:b4:ce:95:18:be:95:47:60:c0:db:e7:6d:49:ae:
8e:e8:8b:fa:4a:99:20:63:d8:53:2c:a6:38:4c:89:e3:95:4a:
8d:a2:d1:30:d1:df:93:8f:6d:ee:08:7d:3a:64:f5:f3:00:13:
9c:72:3e:5e:a2:e0:e6:11:72:77:ab:d2:c4:b6:1c:6d:7a:3b:
0d:91:82:94:f0:83:56:42:97:08:2a:a5:26:9c:e2:bf:c6:27:
98:e2:db:1b:e3:0c:f1:53:1f:e2:5e:90:22:c1:d3:24:ea:36:
30:f1:71:c2:f3:67:58:c0:bb:99:ed:2b:16:a2:92:32:bf:5f:
f0:df:e5:e1:94:77:68:53:01:ea:21:55:58:a9:8f:bd:da:05:
eb:ad:a7:ba:94:b9:6d:e6:91:d2:37:52:d6:64:52:f0:87:10:
be:0f:74:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zB+9EkZerp3fLOxUlhfViMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTAyZjJmNzI5NjVjOWUxYzliMmQ1N2VhM2ZjMTJmY2Zh
YzkxMDMwHhcNMjYwMzI4MDYwMDUxWhcNMjYwMzI5MDYwMDUxWjAzMTEwLwYDVQQD
EygxNjMxMzRhMTI5ZDE2MzVlZjFjNjBiYjFkMzNlNTY3NzFhOWY2Y2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLQgo2VGpWvur31PoLzXyOHf2iI6
sMk7HLzd4IGRXAdiKq2FJyAZHO76xBkwdoqD41Men85nyT/NBJo5YSpKq1vVnOrY
breha5a1v17RxMdFS0ADt5rdI9RciMlsYqBFsyp2ezsnA685XdKlW6SfAutdN8k0
6UKR5THxNjLujKL1Eq2kJHYmKDI8qr+b/N3Rgam7Z0qkJZP3klQvyHbbW0UIN/g5
GKC32qgfA3wpHS5m/Xdn21++ihe2GJb1Imje35E+qXlTW13/GrO5dbt98haF0tOG
VtxLNEpKRykFK5+5s8ZckZmKyglwU+VB0iVZH3UMwU1hUnCgHTTfAtFtLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYxNKEp0WNe8cYLsdM+Vncan2z/MB8GA1UdIwQY
MBaAFO+gLy9yllyeHJstV+o/wS/PrJEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81OGRjNWQtODlhYi00MmJkLThiYWEt
NDg4OTI2Y2ZkYzJkLzEvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81OGRjNWQtODlhYi00MmJkLThiYWEtNDg4OTI2Y2ZkYzJk
LzEvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB76VtNtk
p69HXX+c3wKCLgzxYpQpcMZTvdIJWzClL0T5LQMX8r0+nBChXHjVKYNVpiZ2WVXE
GUZaXFplSeimp03B5Dw+DwCe6KiHNtK7uz4EDcCJpv3/rJpIu7W9b7TOlRi+lUdg
wNvnbUmujuiL+kqZIGPYUyymOEyJ45VKjaLRMNHfk49t7gh9OmT18wATnHI+XqLg
5hFyd6vSxLYcbXo7DZGClPCDVkKXCCqlJpziv8YnmOLbG+MM8VMf4l6QIsHTJOo2
MPFxwvNnWMC7me0rFqKSMr9f8N/l4ZR3aFMB6iFVWKmPvdoF662nupS5beaR0jdS
1mRS8IcQvg90fg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:06:44 2026 by rpki-client