Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
File: 71LcaSC94AdFBjC7_AIWreTgP2I.mft (raw, json)
Hash identifier: E0D4ohkjQnndX+zb5wPS60UkBWLRKRwLxau/CmNO7Uk=
Subject key identifier: 65:6C:A5:8B:09:3A:3D:3A:2B:E2:14:8E:31:31:42:43:03:64:A7:14
Authority key identifier: EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
Certificate issuer: /CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Certificate serial: 01A0CD47C188753C8EB3D64877AE96420534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
Manifest number: 1535
Signing time: Wed 23 Sep 2026 08:00:26 +0000
Manifest this update: Wed 23 Sep 2026 08:00:26 +0000
Manifest next update: Thu 24 Sep 2026 08:00:26 +0000
Files and hashes: 1: 1-U6aXSNrwCxTePFdNUR5lBDEtfE.roa (hash: 5TwFfZ3mjpXZiK+WWFipXkRuzwCPyvQ/Hl+kyatEY/M=)
2: 71LcaSC94AdFBjC7_AIWreTgP2I.crl (hash: KviCitCNSw5P77d9V72RUx/WUq/kSuPQZX4ivO8VLnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:c1:88:75:3c:8e:b3:d6:48:77:ae:96:42:05:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Validity
Not Before: Sep 23 08:00:26 2026 GMT
Not After : Sep 24 08:00:26 2026 GMT
Subject: CN=656ca58b093a3d3a2be2148e313142430364a714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:76:31:55:f2:6f:95:9e:d2:62:dc:79:4d:
c1:a3:7d:b1:20:ef:77:fb:b1:06:b9:04:37:10:bb:
24:b6:42:27:19:08:43:53:dd:e1:76:2a:65:eb:76:
55:58:f5:a7:1a:08:ba:cf:b8:c5:15:f9:f0:af:a7:
c2:10:59:e7:38:34:16:69:7b:d0:78:b7:70:01:19:
08:78:8a:97:e5:8f:dc:28:6f:a0:cf:cf:e1:b7:3d:
a8:c1:da:6f:5f:56:99:77:f5:ae:e8:cf:c8:80:78:
23:d3:bd:b5:0d:07:88:74:e2:64:84:2e:da:b4:ca:
09:a4:56:c2:91:f2:de:41:22:dd:fe:47:c5:a0:71:
9f:c7:f3:71:ba:b6:d1:5e:2d:2b:b9:17:16:82:1a:
1a:e3:53:be:5b:6b:cd:2e:9b:c0:02:df:ee:68:c3:
ad:33:a8:f9:f6:6a:17:db:7f:d0:fe:db:7a:34:e5:
5c:ba:d3:4a:c4:be:04:5f:91:df:28:9c:84:ba:7e:
16:4e:3f:ab:4f:af:45:8e:3f:f4:10:97:7a:09:a7:
8d:90:06:1e:78:48:bf:ac:b0:89:e2:2b:79:8b:6b:
e1:93:6d:8b:6c:ee:dc:b6:7f:af:e1:a4:30:14:b8:
f9:d8:6f:dc:b2:2c:20:c7:56:67:64:d9:89:c6:77:
2e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6C:A5:8B:09:3A:3D:3A:2B:E2:14:8E:31:31:42:43:03:64:A7:14
X509v3 Authority Key Identifier:
keyid:EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:90:18:dd:e4:8c:42:2c:56:39:4f:27:0f:85:71:51:e0:a0:
bd:9a:c2:48:13:31:e6:5a:34:75:f4:33:1a:05:8f:e7:9d:42:
5a:00:e2:03:02:23:6a:f9:8f:80:2c:bc:f5:fd:81:14:0d:ef:
ea:ee:25:a1:3c:a1:f0:35:3a:26:f4:f8:18:55:2f:fa:4a:99:
52:fc:10:0f:9d:2d:fb:88:2c:20:35:84:5e:cc:4b:56:92:fa:
58:16:0c:e0:2f:68:c3:f3:1b:ac:05:eb:3f:cf:10:4e:2f:16:
69:ac:f2:a9:f8:be:20:c0:3e:5b:9b:c9:dc:ae:ef:51:15:22:
54:e0:47:85:5f:1c:d7:d9:7c:cd:bd:32:89:60:8f:62:17:08:
49:2a:b1:b1:20:da:f0:1f:cc:5e:3f:b5:f5:63:ab:9e:2f:dc:
04:a1:2f:e8:d4:2f:2f:d4:19:a7:26:66:a3:e8:b6:a9:8c:b9:
da:89:f8:98:ec:63:06:0a:38:f5:8a:58:29:9f:54:08:84:5d:
34:95:c7:f5:eb:6d:37:f6:8d:7e:14:64:58:c7:29:88:a2:88:
64:04:b4:7c:d1:a5:6b:c5:24:02:81:9d:0e:cc:b6:48:39:6a:
48:04:70:09:37:63:55:75:b7:28:dd:7c:6f:c0:f0:26:2b:3a:
df:38:1f:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNR8GIdTyOs9ZId66WQgU0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTJkYzY5MjBiZGUwMDc0NTA2MzBiYmZjMDIxNmFkZTRl
MDNmNjIwHhcNMjYwOTIzMDgwMDI2WhcNMjYwOTI0MDgwMDI2WjAzMTEwLwYDVQQD
Eyg2NTZjYTU4YjA5M2EzZDNhMmJlMjE0OGUzMTMxNDI0MzAzNjRhNzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHZ2MVXyb5We0mLceU3Bo32xIO93
+7EGuQQ3ELsktkInGQhDU93hdipl63ZVWPWnGgi6z7jFFfnwr6fCEFnnODQWaXvQ
eLdwARkIeIqX5Y/cKG+gz8/htz2owdpvX1aZd/Wu6M/IgHgj0721DQeIdOJkhC7a
tMoJpFbCkfLeQSLd/kfFoHGfx/NxurbRXi0ruRcWghoa41O+W2vNLpvAAt/uaMOt
M6j59moX23/Q/tt6NOVcutNKxL4EX5HfKJyEun4WTj+rT69Fjj/0EJd6CaeNkAYe
eEi/rLCJ4it5i2vhk22LbO7ctn+v4aQwFLj52G/csiwgx1ZnZNmJxncuHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVspYsJOj06K+IUjjExQkMDZKcUMB8GA1UdIwQY
MBaAFO9S3GkgveAHRQYwu/wCFq3k4D9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFMY2FTQzk0QWRGQmpDN19BSVdyZVRnUDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yNzg0N2MtNTExMy00YTRiLWE3ODgt
NzY0MzYzYjEzY2QyLzEvNzFMY2FTQzk0QWRGQmpDN19BSVdyZVRnUDJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8yNzg0N2MtNTExMy00YTRiLWE3ODgtNzY0MzYzYjEzY2Qy
LzEvNzFMY2FTQzk0QWRGQmpDN19BSVdyZVRnUDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJAY3eSM
QixWOU8nD4VxUeCgvZrCSBMx5lo0dfQzGgWP551CWgDiAwIjavmPgCy89f2BFA3v
6u4loTyh8DU6JvT4GFUv+kqZUvwQD50t+4gsIDWEXsxLVpL6WBYM4C9ow/MbrAXr
P88QTi8Waazyqfi+IMA+W5vJ3K7vURUiVOBHhV8c19l8zb0yiWCPYhcISSqxsSDa
8B/MXj+19WOrni/cBKEv6NQvL9QZpyZmo+i2qYy52on4mOxjBgo49YpYKZ9UCIRd
NJXH9ettN/aNfhRkWMcpiKKIZAS0fNGla8UkAoGdDsy2SDlqSARwCTdjVXW3KN18
b8DwJis63zgfVQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:27:25 2026 by rpki-client