Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json)
Hash identifier: tS6+6bhjUXrW9X6wmuLAMU87LP27w81wnGQj4Pd9Eno=
Subject key identifier: C1:2A:96:0E:B4:C6:90:9F:4C:79:1E:E8:EA:04:21:B7:A9:2F:68:17
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 019F91DAD383BEDD4AC017F383FC48D61008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
Manifest number: 0CC3
Signing time: Fri 24 Jul 2026 02:01:04 +0000
Manifest this update: Fri 24 Jul 2026 02:01:04 +0000
Manifest next update: Sat 25 Jul 2026 02:01:04 +0000
Files and hashes: 1: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: UJcZD8Q5gWs9xVul3rqbKoNgkDu1a3bSpNYC40SShT4=)
2: Y1lnQU48zLMaZj5jjMNu1jqCpH0.roa (hash: 7uDt9sXJ9Vu86jMv8zfP4uTHUwIIxRFk4x+ECZ536qo=)
3: aHre3p3mljnQo6pgr_PAHWNasWI.roa (hash: jfHBeKOKc5HfS6IdGbqjCGEVckZ/9KBZc/hoke7dPEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:d3:83:be:dd:4a:c0:17:f3:83:fc:48:d6:10:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Jul 24 02:01:04 2026 GMT
Not After : Jul 25 02:01:04 2026 GMT
Subject: CN=c12a960eb4c6909f4c791ee8ea0421b7a92f6817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:a9:60:79:65:35:2e:3e:dd:0e:67:7d:22:
c7:88:6d:a2:84:ba:bd:be:0f:cf:6d:57:97:81:9e:
16:56:e7:56:0e:ea:6f:ce:c1:3f:22:02:75:6d:d2:
24:86:3f:06:0e:49:a8:6d:51:6d:eb:91:69:a2:2e:
90:4a:79:16:f7:82:e0:2f:23:e3:0e:fe:17:24:7a:
c3:14:40:ae:d8:92:a9:65:c4:dd:50:3a:c0:fe:c1:
ce:97:db:7f:4d:88:0d:c4:de:0c:b4:65:c1:1f:89:
4b:b3:f5:e8:8c:5d:34:73:17:ed:63:09:01:e2:7a:
ac:67:fb:f5:0f:bb:6d:60:23:2a:6b:54:7f:c3:52:
9d:e4:8c:8b:01:25:5a:96:38:09:42:bf:f1:42:ee:
03:17:c5:a9:b7:04:08:9f:c5:68:7f:bf:e8:60:4d:
59:e8:8c:0e:c9:38:00:f7:0e:07:85:20:9d:46:43:
59:a6:33:4b:d3:52:e2:5c:c3:4c:0d:cf:be:02:66:
a8:f6:de:03:20:00:14:32:39:bf:6e:a9:65:3a:a8:
db:11:4f:47:b5:d5:e6:49:02:03:2d:77:f1:bd:74:
c2:3c:f2:d7:24:90:21:36:04:ef:24:7b:d4:14:8f:
fe:7a:00:a4:45:d5:d9:fa:b1:07:23:e4:97:12:09:
e4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2A:96:0E:B4:C6:90:9F:4C:79:1E:E8:EA:04:21:B7:A9:2F:68:17
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:8f:1f:b7:f7:f1:bd:4f:8e:74:23:a6:dc:1e:cb:34:6e:8e:
28:02:0b:d8:4d:b0:c8:ce:60:36:dd:11:c7:58:d3:a0:73:de:
1f:78:61:cf:e0:9b:1d:c3:8e:b8:21:74:62:a3:88:41:39:de:
4f:e1:ad:0f:8f:a7:7f:a6:59:c3:18:8a:c2:e7:ad:07:a0:f7:
90:db:11:a7:0c:3e:7e:cf:ab:77:b6:b6:64:11:c5:4a:b8:9b:
cf:08:6f:58:55:35:f5:e8:ef:67:df:73:c8:7c:b7:c8:ce:63:
c0:51:e6:c5:e3:ab:7f:2c:6f:5a:d4:49:39:6e:4a:ec:26:5b:
75:de:e8:37:be:bb:48:d2:ee:68:ec:f4:95:e8:b2:d9:0d:a9:
01:99:b6:0f:e5:3b:e0:4c:0c:9f:e8:de:48:19:ec:84:f5:49:
db:db:85:30:61:08:f6:3b:9f:72:a7:8a:ff:b4:aa:bc:dd:55:
96:1e:f1:26:00:93:7a:67:8b:c7:f1:00:91:4d:ef:cb:ea:c0:
7e:e1:8b:5b:e1:03:75:17:50:66:a6:14:15:3d:3f:dc:8b:1e:
64:8e:89:ec:2e:f7:c5:93:c8:c6:75:22:92:94:d4:66:2a:db:
b3:8f:15:f1:b5:d4:eb:62:36:88:51:d3:10:86:88:94:10:03:
13:0e:94:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2tODvt1KwBfzg/xI1hAIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjIxMGUzOGIxNjkwOWE3ZWU4ZmUzYjhkMDY2NDdmMDY2
NTI5MmIwHhcNMjYwNzI0MDIwMTA0WhcNMjYwNzI1MDIwMTA0WjAzMTEwLwYDVQQD
EyhjMTJhOTYwZWI0YzY5MDlmNGM3OTFlZThlYTA0MjFiN2E5MmY2ODE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMypYHllNS4+3Q5nfSLHiG2ihLq9
vg/PbVeXgZ4WVudWDupvzsE/IgJ1bdIkhj8GDkmobVFt65Fpoi6QSnkW94LgLyPj
Dv4XJHrDFECu2JKpZcTdUDrA/sHOl9t/TYgNxN4MtGXBH4lLs/XojF00cxftYwkB
4nqsZ/v1D7ttYCMqa1R/w1Kd5IyLASValjgJQr/xQu4DF8WptwQIn8Vof7/oYE1Z
6IwOyTgA9w4HhSCdRkNZpjNL01LiXMNMDc++Amao9t4DIAAUMjm/bqllOqjbEU9H
tdXmSQIDLXfxvXTCPPLXJJAhNgTvJHvUFI/+egCkRdXZ+rEHI+SXEgnkJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEqlg60xpCfTHke6OoEIbepL2gXMB8GA1UdIwQY
MBaAFOdiEOOLFpCafuj+O40GZH8GZSkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJJUTQ0c1drSnAtNlA0N2pRWmtmd1psS1NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82ZDZiNzYtYjRiNy00ZjdlLTg2Mjgt
Y2Y3OTQ2NThmNWJlLzEvNTJJUTQ0c1drSnAtNlA0N2pRWmtmd1psS1NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82ZDZiNzYtYjRiNy00ZjdlLTg2MjgtY2Y3OTQ2NThmNWJl
LzEvNTJJUTQ0c1drSnAtNlA0N2pRWmtmd1psS1NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtI8ft/fx
vU+OdCOm3B7LNG6OKAIL2E2wyM5gNt0Rx1jToHPeH3hhz+CbHcOOuCF0YqOIQTne
T+GtD4+nf6ZZwxiKwuetB6D3kNsRpww+fs+rd7a2ZBHFSribzwhvWFU19ejvZ99z
yHy3yM5jwFHmxeOrfyxvWtRJOW5K7CZbdd7oN767SNLuaOz0leiy2Q2pAZm2D+U7
4EwMn+jeSBnshPVJ29uFMGEI9jufcqeK/7SqvN1Vlh7xJgCTemeLx/EAkU3vy+rA
fuGLW+EDdRdQZqYUFT0/3IseZI6J7C73xZPIxnUikpTUZirbs48V8bXU62I2iFHT
EIaIlBADEw6U5g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:58:55 2026 by rpki-client