Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/139d97-5068-4143-b94e-58b246de5b33/1/78Xbv2Q-C4qlG0N8qu9wD94sV1k.mft
File: 78Xbv2Q-C4qlG0N8qu9wD94sV1k.mft (raw, json)
Hash identifier: X836GYIzSJJsNDzDkkbO5D4q+vIFEnM5rCh/kEPttFY=
Subject key identifier: 2B:A1:17:42:B3:B2:C1:A0:36:47:39:2F:44:AA:8B:97:73:D4:D0:9D
Authority key identifier: EF:C5:DB:BF:64:3E:0B:8A:A5:1B:43:7C:AA:EF:70:0F:DE:2C:57:59
Certificate issuer: /CN=efc5dbbf643e0b8aa51b437caaef700fde2c5759
Certificate serial: 019D33E41C67F8C458EDCBC3CFB5B0226DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78Xbv2Q-C4qlG0N8qu9wD94sV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/139d97-5068-4143-b94e-58b246de5b33/1/78Xbv2Q-C4qlG0N8qu9wD94sV1k.mft
Manifest number: 27
Signing time: Sat 28 Mar 2026 10:01:20 +0000
Manifest this update: Sat 28 Mar 2026 10:01:20 +0000
Manifest next update: Sun 29 Mar 2026 10:01:20 +0000
Files and hashes: 1: 5fz1zKYJK1UTJkPiRCb-jDr6mSk.asa (hash: 44T26rsoEycmXc15VpmD9Up9fj9Nmv9b3qSTrcMSSmg=)
2: 78Xbv2Q-C4qlG0N8qu9wD94sV1k.crl (hash: Pa+MNW5GixQ5o0I9/xiCPmSsEOw2ir6xpzxFmQANTD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/139d97-5068-4143-b94e-58b246de5b33/1/78Xbv2Q-C4qlG0N8qu9wD94sV1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/139d97-5068-4143-b94e-58b246de5b33/1/78Xbv2Q-C4qlG0N8qu9wD94sV1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/78Xbv2Q-C4qlG0N8qu9wD94sV1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e4:1c:67:f8:c4:58:ed:cb:c3:cf:b5:b0:22:6d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efc5dbbf643e0b8aa51b437caaef700fde2c5759
Validity
Not Before: Mar 28 10:01:20 2026 GMT
Not After : Mar 29 10:01:20 2026 GMT
Subject: CN=2ba11742b3b2c1a03647392f44aa8b9773d4d09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8d:28:ec:a8:9a:91:b5:0c:ff:4e:ae:31:18:
9b:6d:35:aa:45:38:a9:d6:e8:64:6a:4f:d4:d8:16:
f9:f3:23:9d:c9:94:b0:d6:d3:23:64:26:b1:64:c0:
b3:c0:5f:da:f9:5b:1f:f8:78:f2:a0:ce:5f:39:be:
22:35:c0:2f:cf:65:0b:95:f6:ff:cf:d3:c8:ef:5e:
e2:af:c0:df:57:c2:5f:be:b6:db:d1:5a:23:9c:0d:
70:49:54:a5:f9:8b:72:b0:3f:36:d9:96:1d:cb:7f:
93:fc:34:70:6e:73:26:76:c8:ac:74:7e:d1:06:97:
fc:ff:f9:ac:1f:d0:20:9e:67:7c:2b:60:d3:9d:74:
7a:87:7e:a2:eb:80:62:e1:87:90:ea:f4:cc:33:41:
e1:e7:98:4f:be:fd:39:c4:7e:1d:69:70:39:17:45:
b9:77:f3:11:4c:4e:0b:91:b2:91:fa:cb:1e:e7:5c:
f0:fb:49:6d:1b:69:cd:bd:9b:0b:90:ea:5f:2e:af:
f1:83:15:83:69:b8:5d:48:fa:0f:e5:bd:f5:da:13:
4d:bb:1b:aa:a3:5b:54:69:d3:d8:51:0a:ae:aa:2e:
ba:67:d3:e2:1a:36:7b:44:94:ed:91:fc:e1:96:3c:
69:f8:7c:41:0b:eb:bb:5b:80:21:7f:e6:d3:b4:be:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A1:17:42:B3:B2:C1:A0:36:47:39:2F:44:AA:8B:97:73:D4:D0:9D
X509v3 Authority Key Identifier:
keyid:EF:C5:DB:BF:64:3E:0B:8A:A5:1B:43:7C:AA:EF:70:0F:DE:2C:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78Xbv2Q-C4qlG0N8qu9wD94sV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/139d97-5068-4143-b94e-58b246de5b33/1/78Xbv2Q-C4qlG0N8qu9wD94sV1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/139d97-5068-4143-b94e-58b246de5b33/1/78Xbv2Q-C4qlG0N8qu9wD94sV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b3:ea:c1:9b:99:b1:33:0b:16:da:83:db:25:12:b0:48:4f:
d2:32:f0:04:22:c8:d0:73:c8:eb:25:58:2e:eb:87:e4:1e:72:
34:73:21:b0:e3:fe:58:1e:ff:9d:95:8f:df:77:f3:50:2e:4c:
b6:9c:f5:92:76:12:80:68:78:59:a0:2f:ad:86:b4:77:81:07:
c9:ed:58:51:d4:b7:40:e7:53:32:fb:ac:12:46:e5:79:6c:86:
52:a2:b5:2f:04:83:29:a2:0d:0b:78:43:19:e8:ac:f7:16:f3:
f8:d5:92:e5:7d:7b:18:4d:b3:b2:f9:8f:27:0b:d2:48:59:4d:
e8:26:da:7c:64:8f:75:1c:23:60:a2:2c:b6:ba:14:6c:d5:a3:
05:46:6f:f8:32:a8:90:e3:48:61:f0:55:a1:77:b7:39:d4:dc:
b1:76:0c:02:c5:e2:3b:e8:bd:5c:96:a4:9c:48:5f:a8:f5:06:
d5:fb:b9:d9:1d:d8:28:d9:27:e4:56:ce:b6:0a:22:1a:75:31:
5f:2b:2b:77:7d:e8:ab:a2:58:72:e9:c7:c0:16:5e:72:ed:29:
58:41:e4:0a:9c:cb:60:25:c3:d4:13:f5:0d:1f:1a:75:0a:be:
c2:8a:1d:0d:81:37:c1:6d:cf:e6:a7:6b:b7:48:45:97:9c:fd:
8b:c8:b6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:49 2026 by rpki-client