Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
File: 52m60wYYMt6bfXw3Nzf0NGxsBuY.mft (raw, json)
Hash identifier: v3vbGuNTIW2hNJSaKOW0tcdXmAda9DddzsGcA0lxeho=
Subject key identifier: 23:DE:06:24:50:44:34:55:99:F9:BB:1C:E6:ED:73:A7:E2:53:71:25
Authority key identifier: E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
Certificate issuer: /CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Certificate serial: 019D26CCE2D147ECB3C38B627128DDE3A034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
Manifest number: 0D2C
Signing time: Wed 25 Mar 2026 21:00:54 +0000
Manifest this update: Wed 25 Mar 2026 21:00:54 +0000
Manifest next update: Thu 26 Mar 2026 21:00:54 +0000
Files and hashes: 1: 52m60wYYMt6bfXw3Nzf0NGxsBuY.crl (hash: fd91IdkgAuB0rG6/qJw8G6UMEIrP4J6B/PF9lc6ARpk=)
2: j0JhEA-c9iMD5136iBFWqIHVdMQ.roa (hash: Zp2pE/2Kh9ONHpYyffNxRWr9NvAgWzlzJEozlIUnxBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e2:d1:47:ec:b3:c3:8b:62:71:28:dd:e3:a0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Validity
Not Before: Mar 25 21:00:54 2026 GMT
Not After : Mar 26 21:00:54 2026 GMT
Subject: CN=23de06245044345599f9bb1ce6ed73a7e2537125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:8b:d1:6b:fe:8b:cd:ef:09:35:b1:16:6e:
24:77:dd:ab:58:71:e9:e5:0d:fa:f0:3d:09:34:72:
43:16:ee:ea:e3:80:c1:07:20:66:40:99:5b:fe:b3:
85:41:fd:00:a8:a7:c9:5a:79:cc:74:bd:5e:74:90:
42:a8:53:7e:6f:b9:82:db:02:90:ca:e2:03:7b:f9:
cd:f2:7e:6b:1f:1b:ba:36:b8:43:c2:de:96:83:0d:
85:5f:9e:ac:9c:ae:75:7a:62:dd:e6:6f:61:40:35:
e8:41:db:1a:ad:8b:b0:63:60:1e:5b:5c:c9:fa:76:
43:67:c2:83:94:82:ff:83:41:a5:5c:95:d9:56:34:
0d:4f:2e:de:be:f4:5b:81:cc:56:6b:d2:1e:84:94:
65:22:e9:6e:c9:7a:38:a2:30:e4:4e:eb:4d:d9:1b:
46:a0:a9:1c:c5:d3:e2:db:f8:49:6b:7e:43:79:2f:
27:3f:2b:ee:e7:3f:53:0a:a4:68:d8:56:e4:1a:35:
7e:a0:3e:db:e6:03:53:75:ed:70:4d:12:67:62:a5:
aa:bb:1a:ce:b9:74:1e:e1:ee:24:8e:67:71:c9:47:
72:da:bb:a3:71:32:5d:c2:b9:00:bb:98:53:14:02:
4c:76:4d:2b:19:06:a0:06:42:d1:95:34:07:80:b8:
7d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DE:06:24:50:44:34:55:99:F9:BB:1C:E6:ED:73:A7:E2:53:71:25
X509v3 Authority Key Identifier:
keyid:E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:77:82:8c:62:4d:95:02:e3:07:b0:c1:d5:87:5a:b1:ad:bc:
de:f7:34:6b:80:92:7b:4e:f7:97:7f:55:da:0a:a0:17:18:28:
a8:74:e6:83:0e:d7:94:27:4e:6f:11:c2:62:a7:65:7b:7a:d8:
54:bc:89:90:38:3b:d0:c5:b5:29:e4:e0:9a:f6:52:aa:d9:98:
f6:ce:d8:1b:83:d8:4e:80:7b:12:15:90:b1:82:68:a3:20:db:
27:58:da:82:f6:73:a5:b0:fb:ab:dd:88:6f:1a:0d:9c:b4:99:
50:89:4e:80:a8:d0:43:d1:bc:63:98:41:18:49:fa:ee:7f:c3:
d0:6c:b0:90:25:34:ba:0e:5e:f4:3b:a2:82:5f:f3:9c:13:ae:
77:31:ea:22:0f:af:37:2c:43:c3:0e:60:34:48:de:8d:ae:39:
f4:cb:18:e7:c8:7c:45:de:3a:eb:ec:66:77:b0:48:11:a0:42:
8e:fa:6f:a6:49:2e:cc:d6:7d:91:fb:58:c6:9d:f4:ee:09:9b:
a9:22:fc:d1:92:1e:fe:af:93:d6:24:6b:4f:16:a9:49:42:b0:
ef:86:c2:c9:be:87:ac:59:de:03:aa:39:d1:f4:91:84:2f:73:
47:96:c6:c8:d8:f0:3d:4a:17:e0:d4:20:13:a8:3b:dd:ff:c3:
db:6a:93:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzOLRR+yzw4ticSjd46A0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjliYWQzMDYxODMyZGU5YjdkN2MzNzM3MzdmNDM0NmM2
YzA2ZTYwHhcNMjYwMzI1MjEwMDU0WhcNMjYwMzI2MjEwMDU0WjAzMTEwLwYDVQQD
EygyM2RlMDYyNDUwNDQzNDU1OTlmOWJiMWNlNmVkNzNhN2UyNTM3MTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLyL0Wv+i83vCTWxFm4kd92rWHHp
5Q368D0JNHJDFu7q44DBByBmQJlb/rOFQf0AqKfJWnnMdL1edJBCqFN+b7mC2wKQ
yuIDe/nN8n5rHxu6NrhDwt6Wgw2FX56snK51emLd5m9hQDXoQdsarYuwY2AeW1zJ
+nZDZ8KDlIL/g0GlXJXZVjQNTy7evvRbgcxWa9IehJRlIuluyXo4ojDkTutN2RtG
oKkcxdPi2/hJa35DeS8nPyvu5z9TCqRo2FbkGjV+oD7b5gNTde1wTRJnYqWquxrO
uXQe4e4kjmdxyUdy2rujcTJdwrkAu5hTFAJMdk0rGQagBkLRlTQHgLh9YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPeBiRQRDRVmfm7HObtc6fiU3ElMB8GA1UdIwQY
MBaAFOdputMGGDLem318Nzc39DRsbAbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJtNjB3WVlNdDZiZlh3M056ZjBOR3hzQnVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kMWJjZGEtOTI3MC00M2EzLWJhYWUt
MmNjOGRjNGYwMjIwLzEvNTJtNjB3WVlNdDZiZlh3M056ZjBOR3hzQnVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kMWJjZGEtOTI3MC00M2EzLWJhYWUtMmNjOGRjNGYwMjIw
LzEvNTJtNjB3WVlNdDZiZlh3M056ZjBOR3hzQnVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXeCjGJN
lQLjB7DB1Ydasa283vc0a4CSe073l39V2gqgFxgoqHTmgw7XlCdObxHCYqdle3rY
VLyJkDg70MW1KeTgmvZSqtmY9s7YG4PYToB7EhWQsYJooyDbJ1jagvZzpbD7q92I
bxoNnLSZUIlOgKjQQ9G8Y5hBGEn67n/D0GywkCU0ug5e9Duigl/znBOudzHqIg+v
NyxDww5gNEjeja459MsY58h8Rd466+xmd7BIEaBCjvpvpkkuzNZ9kftYxp307gmb
qSL80ZIe/q+T1iRrTxapSUKw74bCyb6HrFneA6o50fSRhC9zR5bGyNjwPUoX4NQg
E6g73f/D22qTTg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:43 2026 by rpki-client