Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
File: 76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json)
Hash identifier: JhMjKi3V1qUO+vtOvV6hr7qpOdw3peXPtGuvYnkYxnA=
Subject key identifier: DF:3E:1E:D2:27:D0:60:8A:FE:94:86:EC:B2:AB:AF:BC:E6:62:59:EC
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Certificate issuer: /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial: 019D25F13C8D495BC814DAF6EB50CF203B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
Manifest number: 1194
Signing time: Wed 25 Mar 2026 17:00:59 +0000
Manifest this update: Wed 25 Mar 2026 17:00:59 +0000
Manifest next update: Thu 26 Mar 2026 17:00:59 +0000
Files and hashes: 1: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: CPqtfFlYdoCVLGhrOuh1gbo8whkEoHQPI/XSdGFM9mg=)
2: d0r-Z1tATflEg34xH8LpeTJxCeg.roa (hash: /VLriREqzzV93h2U9Y2YNTNewlDjbuqqOCTeloMXxjY=)
3: z2ya0O-Zt1HkSFnRFpNhzUiEpKw.roa (hash: Bw/EG1OV5fOeDsNlaq4pIbVENapXiEYMLsr9/Cjedk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:3c:8d:49:5b:c8:14:da:f6:eb:50:cf:20:3b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
Validity
Not Before: Mar 25 17:00:59 2026 GMT
Not After : Mar 26 17:00:59 2026 GMT
Subject: CN=df3e1ed227d0608afe9486ecb2abafbce66259ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:88:d8:52:cf:0a:d3:1a:f0:a4:d8:0a:81:
94:2c:0c:c4:15:9e:dd:c3:90:2e:fe:ea:1f:73:f3:
0d:04:84:56:7f:43:bb:26:36:bf:1d:d0:96:e8:e2:
27:db:67:8a:49:4c:28:c8:61:10:cf:75:9f:9e:c8:
4e:79:ec:47:f0:4f:d1:7f:1a:90:f9:60:1d:6b:c2:
eb:7a:71:38:ac:8e:00:60:bb:8d:a3:e9:50:5a:85:
c3:47:01:20:3d:81:80:df:19:05:81:75:41:d3:0d:
f7:dc:13:28:06:ac:4e:6b:d2:cc:17:64:25:68:bc:
21:15:6b:ab:ce:72:a0:c4:a4:b9:a2:22:0d:98:04:
f3:c4:e7:8d:60:62:6f:c5:37:b9:0a:18:10:26:72:
8c:2e:54:77:bb:f0:9d:63:67:3c:94:d3:46:73:62:
14:1c:43:31:dc:d0:e8:2f:79:b7:99:2e:7f:29:fa:
1b:fe:0a:a2:ed:b1:13:28:0e:a2:b4:16:32:c7:10:
80:5b:44:47:e9:74:83:e0:22:c7:2e:74:c7:de:cf:
d6:b3:5c:f8:b5:3f:df:18:66:e5:ad:8d:c3:25:57:
e9:13:da:ea:e6:76:f3:4f:c6:a2:36:2b:30:7a:3e:
22:ad:49:26:d1:41:77:f0:0a:0f:cc:e3:87:21:73:
11:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3E:1E:D2:27:D0:60:8A:FE:94:86:EC:B2:AB:AF:BC:E6:62:59:EC
X509v3 Authority Key Identifier:
keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:96:a2:ba:47:f5:d3:33:98:3d:99:fb:f5:7e:12:bf:d6:1a:
de:15:f7:77:9e:e1:36:18:1c:ae:ad:f2:42:a9:df:91:98:e1:
d9:ab:34:69:d5:b5:07:dd:82:81:e8:ec:5a:84:f7:8d:ba:96:
aa:7f:ce:57:8f:a8:72:1d:fa:54:6f:2b:7d:63:bc:70:17:cc:
87:6d:6c:98:ca:b9:96:32:c1:c1:81:e5:03:e8:16:a2:90:2c:
39:86:17:07:52:e6:19:0b:c4:ae:4e:bf:b2:1d:a2:92:20:00:
c2:cc:15:81:41:76:9c:c9:f1:a8:63:43:1f:ed:b5:de:ea:a8:
1e:6c:a6:9e:a7:3c:3b:78:eb:75:e9:99:db:5b:55:a4:d8:68:
73:ad:71:30:5b:4e:30:d3:b1:69:f3:93:a4:9e:75:a9:1b:62:
0a:c5:0b:68:2f:43:8b:0c:25:07:24:85:2b:02:b7:14:2c:a9:
39:23:89:00:a3:47:3e:8d:2f:99:51:d6:b2:90:bb:8b:f4:91:
0c:08:7e:af:51:35:39:d8:84:cc:23:82:d1:7d:46:47:22:96:
fb:f8:99:c2:ca:85:d8:e5:31:71:1b:c8:3b:8a:8d:a9:ae:de:
45:63:4e:35:ed:bc:a9:fa:c3:12:29:ab:6c:3d:7e:2f:0a:2d:
8a:1f:cc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:01 2026 by rpki-client