Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json)
Hash identifier: LeNV0iikVtfMEYlIaYpn4oo/xkjonD94IcBRDbvv3Lg=
Subject key identifier: 31:3C:42:52:71:1A:C0:54:17:A6:34:81:E1:32:1C:35:14:8B:BE:7B
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 01A0D07FF25002F6701F3D2C2B0C82F81439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
Manifest number: 0D68
Signing time: Wed 23 Sep 2026 23:00:41 +0000
Manifest this update: Wed 23 Sep 2026 23:00:41 +0000
Manifest next update: Thu 24 Sep 2026 23:00:41 +0000
Files and hashes: 1: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: YFZaVmPkm4F8vv+tSbbiuwHPaht4shQ1A1WrfbQMLio=)
2: Y1lnQU48zLMaZj5jjMNu1jqCpH0.roa (hash: 7uDt9sXJ9Vu86jMv8zfP4uTHUwIIxRFk4x+ECZ536qo=)
3: aHre3p3mljnQo6pgr_PAHWNasWI.roa (hash: jfHBeKOKc5HfS6IdGbqjCGEVckZ/9KBZc/hoke7dPEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:f2:50:02:f6:70:1f:3d:2c:2b:0c:82:f8:14:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Sep 23 23:00:41 2026 GMT
Not After : Sep 24 23:00:41 2026 GMT
Subject: CN=313c4252711ac05417a63481e1321c35148bbe7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:b9:0f:88:de:e4:b9:db:4e:15:4f:3f:0e:
9e:b0:aa:44:02:98:90:5b:37:e6:5d:89:b1:47:d6:
0d:62:73:9d:47:d9:af:84:a1:3c:2b:c2:ee:1b:c0:
9e:7a:bf:c5:94:03:c0:3d:82:c6:62:22:28:3e:0f:
6c:cc:32:a7:c6:69:1c:11:4d:a0:af:c3:a5:50:4f:
d4:24:cf:c0:d6:cf:85:2f:c1:8e:d6:2e:3e:3d:8b:
01:50:58:41:64:c7:c5:f8:ae:8a:ef:fb:ef:d3:a7:
2f:c1:e2:11:46:49:f7:b5:7e:c0:4b:25:4e:4f:ba:
fb:e0:9b:96:41:fb:79:b6:0c:fd:1e:d9:c4:ed:c2:
4e:ee:75:a8:6b:7d:13:ce:0c:f3:20:bd:33:01:e5:
d9:f4:77:f9:e0:f8:4f:d8:13:98:95:96:8a:ea:c1:
ca:ba:e1:bd:b1:5a:15:0a:fb:bb:2b:fb:39:d7:4b:
0a:93:91:5f:27:87:b9:21:3b:03:ec:69:8f:12:3a:
23:fc:19:40:70:d2:58:98:98:b2:77:71:24:60:72:
f8:05:6d:fa:df:cd:e4:6e:47:9f:d9:5f:0d:27:9d:
98:2c:27:43:f3:d8:3c:10:80:17:52:a2:d2:c1:43:
a6:51:da:f9:9f:c9:fb:23:d8:19:3e:78:ba:4b:93:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3C:42:52:71:1A:C0:54:17:A6:34:81:E1:32:1C:35:14:8B:BE:7B
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7e:cd:85:4a:f4:64:b3:91:3d:5a:9d:aa:ce:67:66:b7:2a:
a2:b5:f1:3f:44:5f:85:ed:86:86:02:8a:7b:7b:20:cc:67:f3:
7f:57:f0:cd:c2:09:b1:36:d9:81:a4:b4:04:cc:0c:e9:25:f9:
64:8b:0b:d1:bb:b3:f9:18:02:6c:84:a5:73:f5:0d:da:62:7e:
c2:a8:25:ff:62:8e:13:44:e5:8a:e4:8e:22:1e:62:5d:81:f6:
11:31:94:2d:cd:78:15:1e:c4:81:06:39:cf:8c:56:75:4f:08:
54:bd:63:f0:7b:2a:89:83:66:72:06:34:77:fc:11:76:35:ad:
b5:41:44:ef:00:92:52:f3:79:46:81:c8:c2:13:38:a3:dd:87:
ff:b3:10:c6:ce:bf:0c:0c:2c:54:5b:ac:00:3f:7e:69:d9:df:
2a:ac:79:27:d5:0a:f1:aa:85:05:17:fa:0a:be:66:9c:a4:fe:
4b:cf:44:2a:7b:5d:85:4e:c6:3f:f7:6d:14:84:1d:8d:67:ed:
cb:88:e6:98:20:a0:8f:13:08:7e:89:71:98:f4:fd:32:4a:ec:
05:c7:b9:07:74:63:03:f5:4f:3a:4b:8f:dc:55:f5:2d:fc:c1:
b6:71:7f:b3:43:9f:05:84:f0:08:9d:b7:37:17:45:50:0e:74:
52:36:2d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:52:29 2026 by rpki-client