Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
File: 71LcaSC94AdFBjC7_AIWreTgP2I.mft (raw, json)
Hash identifier: QYhJ/vkaXhXPtl8PrhgJANGz3a7xHjf5pu9E2qzKaow=
Subject key identifier: C5:CF:C3:C3:48:BC:A8:CB:CD:07:62:69:9E:99:5D:DA:B0:15:A7:99
Authority key identifier: EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
Certificate issuer: /CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Certificate serial: 019D2696124ADF9DAB337466C3246C4D070D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
Manifest number: 1351
Signing time: Wed 25 Mar 2026 20:01:02 +0000
Manifest this update: Wed 25 Mar 2026 20:01:02 +0000
Manifest next update: Thu 26 Mar 2026 20:01:02 +0000
Files and hashes: 1: 1-U6aXSNrwCxTePFdNUR5lBDEtfE.roa (hash: 5TwFfZ3mjpXZiK+WWFipXkRuzwCPyvQ/Hl+kyatEY/M=)
2: 71LcaSC94AdFBjC7_AIWreTgP2I.crl (hash: 48BiH1ZzayS/4UNWDKg/rnQPnmzWcV/d69ARp8IN0WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:12:4a:df:9d:ab:33:74:66:c3:24:6c:4d:07:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Validity
Not Before: Mar 25 20:01:02 2026 GMT
Not After : Mar 26 20:01:02 2026 GMT
Subject: CN=c5cfc3c348bca8cbcd0762699e995ddab015a799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:df:34:c1:95:8a:6a:d1:19:d5:06:9f:d2:
b9:e3:ef:73:51:a9:3d:aa:52:f9:aa:d0:d9:b1:14:
fb:81:34:4e:ac:4c:6f:02:67:db:a9:05:a4:7c:8f:
46:5d:41:ea:50:c6:0e:ce:ac:8e:0c:50:d3:78:86:
e8:c2:7e:e2:1f:5b:7b:fe:09:e5:06:2c:20:0b:f0:
e6:5e:a4:19:b4:69:60:36:b8:41:7e:3b:18:4e:97:
e4:63:1c:12:40:db:ab:ba:b5:27:33:5b:59:66:db:
db:d3:01:39:f1:d6:f9:c8:f2:13:91:5d:7b:fd:5c:
f5:72:02:7c:57:7c:56:1e:5b:ed:41:20:c5:c5:96:
6a:40:de:49:90:3c:63:4c:9f:aa:76:11:55:f0:9a:
1b:22:1c:54:8d:94:7b:0b:89:7f:5b:3b:24:20:38:
9d:21:ad:6d:c9:93:e0:89:1b:5e:42:63:0e:75:34:
5c:52:cd:04:bd:a2:ed:cb:3a:55:23:61:c8:23:42:
95:12:a3:34:d2:c5:f2:68:18:47:a7:ab:d9:e3:aa:
98:f3:e0:1f:e9:62:8d:29:63:4c:73:24:fb:ee:0e:
af:8e:ed:75:01:52:f5:0a:25:bc:2f:af:a3:97:f1:
13:41:4e:e6:65:f5:b8:6d:95:8f:1f:eb:04:1b:29:
8b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CF:C3:C3:48:BC:A8:CB:CD:07:62:69:9E:99:5D:DA:B0:15:A7:99
X509v3 Authority Key Identifier:
keyid:EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:57:fe:23:83:e0:95:4c:c4:51:2e:b7:51:dc:d4:58:9c:8d:
49:5c:8e:22:f5:12:22:89:99:fb:c1:b1:fb:e2:2d:36:96:a7:
9e:e8:1d:b2:79:4b:a9:ba:7c:ee:aa:dd:83:6c:12:e4:fe:30:
ae:6d:54:be:a4:2f:ac:44:1a:3d:9c:f0:d8:2c:c2:fa:be:fa:
2f:60:23:d7:37:7b:7b:f1:ef:16:3f:37:5b:0f:a7:31:74:f8:
8b:6e:ed:35:09:54:33:8e:c5:19:03:4b:95:12:27:84:5a:20:
b1:bb:7f:07:33:72:7a:d5:d2:1e:2b:d8:ba:27:db:51:57:ee:
aa:a9:f1:cf:a3:00:6d:9e:27:73:6d:ad:7f:5a:80:01:0e:c7:
3a:b8:6b:55:cc:c3:94:d6:dd:34:0e:eb:92:c6:7a:16:f1:9e:
c2:fb:58:49:71:54:c3:41:8c:c0:9f:1a:ca:e7:23:47:de:cb:
b6:39:34:b5:d5:df:ba:fd:f1:16:b1:74:74:ef:65:ec:83:7c:
4e:52:37:2b:21:5a:79:bc:90:d1:e9:dd:20:20:38:83:bf:c8:
3b:c1:e3:94:1c:cd:32:bf:c4:91:b3:a3:7e:27:a5:01:4c:0d:
40:c9:b7:a5:77:3e:48:ec:ff:50:36:bd:66:70:27:f1:29:7f:
f6:a2:ec:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:29:59 2026 by rpki-client