Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
File: 71hLUR2WpK5sljABl_hPlqOvwkY.mft (raw, json)
Hash identifier: aNkMn8BMoqM8msMqs7XT1z1aUqFgc29VVdj7jqTx3q4=
Subject key identifier: 02:A5:3D:79:1C:F3:34:D5:E8:39:7A:C1:F0:1A:45:DB:A5:89:08:29
Authority key identifier: EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46
Certificate issuer: /CN=ef584b511d96a4ae6c96300197f84f96a3afc246
Certificate serial: 019E1CEBD9ACDF64DC5A8EDF2416F99CB142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
Manifest number: 0FE6
Signing time: Tue 12 May 2026 16:01:19 +0000
Manifest this update: Tue 12 May 2026 16:01:19 +0000
Manifest next update: Wed 13 May 2026 16:01:19 +0000
Files and hashes: 1: 71hLUR2WpK5sljABl_hPlqOvwkY.crl (hash: gcWyssgGvTMSDMPA0zSKfUnAjLn+jwSX1UaTh3Cw7kE=)
2: VyE6DesxM1H-hav0gDjcdVAVU4s.roa (hash: fCSRySt/k47Xd3pTSkERi1iNanOCOBE7CKIzsNuCBZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:d9:ac:df:64:dc:5a:8e:df:24:16:f9:9c:b1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef584b511d96a4ae6c96300197f84f96a3afc246
Validity
Not Before: May 12 16:01:19 2026 GMT
Not After : May 13 16:01:19 2026 GMT
Subject: CN=02a53d791cf334d5e8397ac1f01a45dba5890829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:0b:31:a9:5c:9c:c3:f1:0b:c9:36:44:5d:
d4:2c:b8:ff:04:ac:6e:6a:ac:b0:37:23:40:1a:57:
98:fd:85:8a:e5:e6:de:6a:db:2e:c5:ab:82:ec:37:
1f:7a:0d:6d:b6:e4:17:c6:f7:b4:15:bb:d6:2c:08:
3c:ed:10:4f:02:a1:8d:60:78:2a:7e:c9:b3:0d:a6:
9e:0c:5e:7a:95:88:aa:a3:79:1f:6f:cb:97:5f:a8:
0b:9b:91:ed:ea:65:ed:14:35:a8:59:e9:14:b0:2d:
ad:33:6c:dc:1b:9d:94:c1:56:53:7d:f0:1b:aa:9b:
b4:3b:76:d9:9a:d6:ed:62:78:45:f1:ec:3a:e5:bc:
80:7c:57:dc:1c:48:63:05:97:f6:a6:81:e7:7f:11:
a0:a9:71:3a:a6:59:68:e0:6f:7a:ed:e4:f6:8c:3f:
07:4b:ab:58:2b:db:c9:62:bf:9a:91:dc:0e:69:77:
ea:14:6a:15:4c:f6:16:52:65:6f:8f:dc:af:89:af:
21:f5:d0:10:0e:9d:e9:91:00:0b:a5:8c:66:43:6a:
88:7e:68:0c:48:dd:32:c6:ab:bf:d3:fd:2a:7e:99:
73:d9:c3:9c:b7:cf:94:1b:4f:34:e3:d2:b8:b6:9d:
d5:1d:ce:03:8b:da:26:1d:fd:db:c1:cd:f8:ac:e7:
83:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A5:3D:79:1C:F3:34:D5:E8:39:7A:C1:F0:1A:45:DB:A5:89:08:29
X509v3 Authority Key Identifier:
keyid:EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:70:87:9f:39:a3:fc:e0:07:c4:de:c3:8c:e0:9a:56:46:05:
10:22:05:62:2a:c9:47:40:98:ee:fc:02:19:be:86:8b:4b:6d:
9c:31:fb:fe:b2:ab:b0:0e:f9:22:ee:ad:6e:2b:90:a9:0b:e2:
c7:a8:82:8f:f3:78:f7:98:3e:78:da:31:0d:1a:cf:8e:13:44:
60:d5:87:5a:12:1d:38:a7:a1:3b:b1:a0:8d:3e:8e:8e:37:e8:
1c:1f:24:8e:17:88:51:a5:38:6c:e7:04:5f:ba:f8:69:b5:df:
43:00:7e:7c:fb:9c:d8:c1:72:a9:9d:e7:e4:b7:e2:90:b4:4e:
6c:a7:66:de:a8:80:16:ca:c1:5b:5f:cb:8b:bc:17:a7:08:f9:
8b:69:55:67:90:69:03:0e:6d:9b:a1:63:a0:fc:8c:bf:d9:aa:
33:23:60:8e:01:98:9a:45:33:9e:55:f5:f3:6a:6d:80:a6:88:
84:da:35:82:08:17:be:da:7f:7b:05:1d:a0:e9:9c:83:54:c1:
ae:ca:f1:2d:1b:02:79:d0:24:15:1e:58:11:6a:8c:53:07:2f:
3b:01:6e:e9:ab:3d:f3:cc:f4:9a:b0:92:5f:aa:5a:41:52:a0:
64:9a:34:cf:7a:67:02:d2:5d:2d:13:5e:0a:b9:70:cb:ca:d1:
e1:01:ae:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:35 2026 by rpki-client