Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File: dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier: 3sRKNXITsZkPoG1rMlSIJ87r0QkfikQAkiy4VufHQR8=
Subject key identifier: 52:BD:02:8B:B9:C5:79:91:ED:73:53:40:F1:EC:28:E2:47:52:CB:A6
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial: 01A0E174B660E452367CFC6DCA281F6F2626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number: 0EC2
Signing time: Sun 27 Sep 2026 06:01:57 +0000
Manifest this update: Sun 27 Sep 2026 06:01:57 +0000
Manifest next update: Mon 28 Sep 2026 06:01:57 +0000
Files and hashes: 1: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: UQVDz7/VCIq7m+h8hWfnNFnDafW2bAgkWNNQEKKJgB0=)
2: tCljQdoQCYAGdZbsiUMFE-XsaJE.roa (hash: 00v6c7Mm0TodzD2o33hMR8x5qaiYr+lOoZwclNiSZ/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:b6:60:e4:52:36:7c:fc:6d:ca:28:1f:6f:26:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Validity
Not Before: Sep 27 06:01:57 2026 GMT
Not After : Sep 28 06:01:57 2026 GMT
Subject: CN=52bd028bb9c57991ed735340f1ec28e24752cba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:ff:17:51:92:f3:d7:fb:9d:79:d4:98:9a:
38:27:43:63:34:b5:20:bf:a3:82:09:e2:a1:15:e7:
03:ca:e3:e0:e7:36:2e:5f:f8:2f:d9:1c:03:00:73:
5e:93:f3:88:55:33:8e:d7:6a:ab:94:79:77:ee:ff:
99:ff:59:1f:db:26:40:bb:54:00:8e:77:e6:87:76:
40:1d:7b:05:ac:fe:e5:85:78:0b:8a:f7:ab:27:45:
f1:52:92:52:a2:10:af:be:eb:0b:10:08:c9:fd:0c:
e6:89:a1:3f:95:33:bc:2c:fa:23:46:ad:7b:56:67:
e9:76:49:7e:22:6f:93:2b:60:fb:77:15:df:a3:b3:
58:df:c7:5d:0b:71:53:9d:cd:bd:d8:7d:7b:31:a6:
b9:70:2b:97:c1:9a:90:1d:11:51:3e:93:46:28:c7:
92:db:b8:67:da:f3:91:38:d8:58:77:03:74:07:7e:
59:68:d5:be:99:36:e9:a0:03:76:b3:88:20:70:7e:
c5:87:39:e7:3c:8c:d1:57:ad:b2:e7:2e:ec:1a:83:
e1:7b:7b:86:3a:33:01:ec:e0:a1:16:59:42:68:21:
f4:f8:06:62:98:8b:e1:b8:c8:c2:9c:c7:0d:82:5b:
07:26:a9:38:cd:c8:63:c2:90:6e:97:9a:8d:d9:4c:
80:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BD:02:8B:B9:C5:79:91:ED:73:53:40:F1:EC:28:E2:47:52:CB:A6
X509v3 Authority Key Identifier:
keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a5:e0:43:01:2f:c0:5c:48:70:50:aa:a3:8b:10:47:db:f8:
ae:19:0c:6e:bc:45:fd:26:07:30:66:26:64:44:b7:24:39:97:
d9:cf:d0:52:82:78:8f:3e:ff:aa:65:93:b7:4b:35:7f:4e:d4:
1d:36:eb:d6:b8:bc:af:52:91:4f:74:5d:27:9f:7d:e3:c0:12:
48:e5:1f:17:6b:88:f9:48:8d:f8:cc:97:89:ec:7d:a0:6f:ae:
3a:90:df:16:ce:e8:de:ae:46:c1:aa:74:7b:a8:39:b4:bd:53:
c7:f5:7c:03:25:5d:1c:dd:01:42:41:0e:b4:10:68:ca:98:3f:
a5:22:bb:56:8a:b7:8b:c1:a2:b1:d9:0e:87:82:fb:c6:d5:0d:
55:fa:3b:35:e4:07:25:b2:d1:34:b7:08:61:7f:de:ae:b3:85:
7f:5d:f9:e4:14:9c:2b:d3:d1:1f:f6:bc:40:c9:78:55:d7:78:
7d:49:b4:6b:51:ea:c7:20:c6:5c:82:9f:48:38:3e:e3:a0:71:
ec:e7:6b:9f:1f:88:df:c5:25:ea:46:b5:b7:6b:12:a7:4f:fc:
fd:04:27:a3:ee:69:dd:e0:58:f3:53:f5:1a:05:34:06:9e:72:
c5:82:c1:55:a7:1f:b1:5f:71:31:6d:0f:43:d2:16:67:a4:69:
2e:ab:97:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:42:41 2026 by rpki-client