Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
File: 71LcaSC94AdFBjC7_AIWreTgP2I.mft (raw, json)
Hash identifier: N/ZRdl78S4RUcsztTSNZQRLnn0zoasKcCxMUrRIksxM=
Subject key identifier: 43:CE:5E:7F:7F:F3:A9:62:FC:4E:55:14:CB:AB:28:78:A0:71:08:15
Authority key identifier: EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
Certificate issuer: /CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Certificate serial: 019F9091693D1C98A4FD6980AF8E7873E4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
Manifest number: 1491
Signing time: Thu 23 Jul 2026 20:01:16 +0000
Manifest this update: Thu 23 Jul 2026 20:01:16 +0000
Manifest next update: Fri 24 Jul 2026 20:01:16 +0000
Files and hashes: 1: 1-U6aXSNrwCxTePFdNUR5lBDEtfE.roa (hash: 5TwFfZ3mjpXZiK+WWFipXkRuzwCPyvQ/Hl+kyatEY/M=)
2: 71LcaSC94AdFBjC7_AIWreTgP2I.crl (hash: nvf6AxahxAEz9VryGTNRY2VCKXYHrEnbej5yEUGX3bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:69:3d:1c:98:a4:fd:69:80:af:8e:78:73:e4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Validity
Not Before: Jul 23 20:01:16 2026 GMT
Not After : Jul 24 20:01:16 2026 GMT
Subject: CN=43ce5e7f7ff3a962fc4e5514cbab2878a0710815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:9f:b4:97:30:09:1a:a2:35:68:10:d8:8f:
fe:e4:2c:9e:4d:16:e6:0f:ea:e4:28:6e:7e:f9:4b:
e1:30:5b:05:2b:15:63:ee:7d:65:1e:0b:d0:c5:72:
5d:51:56:7c:d0:79:15:1e:3d:8c:e1:8c:3a:cc:7b:
13:a7:d4:b9:8d:cd:16:4a:a0:94:70:c7:89:14:f8:
aa:5b:15:7f:50:50:4b:16:49:ae:b0:7a:15:23:0f:
e2:58:81:60:38:76:bc:c1:6c:8b:38:63:8c:44:7a:
30:1c:e9:57:e1:c7:92:25:de:96:3f:0e:84:ee:ce:
fa:53:95:0a:3e:d7:4f:84:0a:02:e1:8b:c6:ba:34:
fb:6f:b6:ad:4b:39:72:b9:4b:48:7b:05:55:fb:5f:
7e:46:c0:61:ab:0c:e1:11:c7:c9:ed:a4:43:6b:dd:
93:42:d5:d8:7b:e2:bc:af:82:d0:0b:de:9b:f9:b0:
9e:41:e8:e4:7f:fb:ba:8c:e1:f7:68:07:d2:6f:8f:
03:b0:d3:2a:68:8e:86:a7:3a:43:79:81:14:81:3c:
da:de:a7:00:17:33:1d:71:0c:c4:5d:5d:0a:8a:c9:
a5:74:2c:b9:9c:0b:e2:b3:25:fa:eb:66:cf:b1:a8:
98:09:e3:1d:d1:50:95:ba:87:e3:99:6b:6e:bd:ca:
a0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CE:5E:7F:7F:F3:A9:62:FC:4E:55:14:CB:AB:28:78:A0:71:08:15
X509v3 Authority Key Identifier:
keyid:EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f1:00:52:00:0b:73:86:57:94:f6:d9:51:cd:44:5f:27:da:
97:65:ca:ef:67:59:76:ce:15:cd:e2:88:2a:90:fa:1c:dc:e1:
e2:6a:f3:63:ed:e1:50:f7:04:d8:2b:c1:7f:ad:cd:6f:6e:a7:
e7:4b:e6:c5:e8:a1:1b:8c:85:4c:2b:4c:0e:e8:f4:75:97:95:
ce:ee:53:c7:2d:3d:dc:c2:05:a2:90:b5:26:e2:ed:f8:d3:22:
13:c8:d0:bd:a4:6f:05:c0:11:ee:da:39:90:89:65:0a:54:73:
96:70:94:c9:9c:23:0d:f2:1a:ce:72:32:d1:30:04:c4:2e:16:
54:0b:a3:e3:b4:b9:6c:1b:ae:10:b2:77:fe:1c:7b:78:a4:45:
4e:bf:26:b4:89:5d:54:26:ed:85:50:a9:8b:c7:40:80:9c:71:
13:54:b3:01:16:a0:db:ca:ec:46:70:5f:06:9d:f5:09:c2:77:
94:1e:b6:50:50:90:e9:1f:98:1f:86:f5:fb:8c:45:9d:af:7f:
64:76:83:c6:21:60:42:4a:e5:f9:50:b4:ba:58:42:c4:90:af:
47:95:0d:43:86:00:31:61:d1:55:3e:e5:88:be:ef:22:c5:28:
a7:e5:58:73:33:c7:10:0a:95:e5:e2:03:f6:dc:e1:2d:20:40:
2a:e4:3d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:13 2026 by rpki-client