Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
File: 54z133frZmwE77frs8o0BK3sNPs.mft (raw, json)
Hash identifier: ADMwArlss7XbuTIaH2bnLeMzZUX26GFU1yRS43O1Y5E=
Subject key identifier: A0:5E:D9:7F:77:DC:D2:99:0B:45:20:23:CF:94:E1:49:CC:D3:79:B6
Authority key identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
Certificate issuer: /CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Certificate serial: 019D27E06120D6419D4F6D6E026921F89406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
Manifest number: 0F66
Signing time: Thu 26 Mar 2026 02:01:49 +0000
Manifest this update: Thu 26 Mar 2026 02:01:49 +0000
Manifest next update: Fri 27 Mar 2026 02:01:49 +0000
Files and hashes: 1: 54z133frZmwE77frs8o0BK3sNPs.crl (hash: 5Q5n8y4Ewh3lhcxWiD7LeLpO+5p11nkf47Y+A/cwoWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:61:20:d6:41:9d:4f:6d:6e:02:69:21:f8:94:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Validity
Not Before: Mar 26 02:01:49 2026 GMT
Not After : Mar 27 02:01:49 2026 GMT
Subject: CN=a05ed97f77dcd2990b452023cf94e149ccd379b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:19:99:f7:c0:e2:b7:1e:d3:6b:8b:4c:bf:
c5:de:14:55:6d:44:d0:94:43:43:ff:c1:8d:18:40:
a5:f4:44:20:d2:2d:c7:ee:79:4c:8d:9f:c3:aa:d0:
06:cb:05:f5:62:e9:0d:04:8b:68:87:35:f9:cd:ec:
dd:d8:87:41:22:bd:fe:1e:36:fd:c6:95:19:04:f8:
49:72:87:17:28:fe:7e:29:e9:1b:4a:96:5d:fc:a0:
1e:b4:52:98:cb:1d:b5:81:9c:4a:5e:24:96:22:58:
55:3d:b4:5b:6b:b7:ac:e6:b0:e7:90:cd:cc:bd:28:
61:b3:62:a7:df:b7:c9:14:ce:b1:da:99:bb:b2:de:
9d:31:ea:4e:33:0c:e8:0e:3e:b3:11:26:b2:14:77:
69:4d:67:9f:74:10:e8:b9:e1:f5:b5:cb:80:9c:91:
af:c4:e6:95:11:0b:14:f9:9e:fb:ee:ae:75:64:39:
61:5a:39:a2:4f:7f:c6:13:37:fc:c0:4a:00:da:b8:
95:b9:9b:cb:d5:50:5d:cd:d8:15:31:29:ec:8f:b5:
66:48:24:b5:38:03:06:e2:6e:67:0b:b6:47:46:8b:
3e:e7:68:cc:be:9f:22:18:bb:cb:c6:ca:37:78:f4:
1c:b9:ee:97:1e:0e:72:27:26:d3:87:4f:db:cb:75:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5E:D9:7F:77:DC:D2:99:0B:45:20:23:CF:94:E1:49:CC:D3:79:B6
X509v3 Authority Key Identifier:
keyid:E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:dd:74:d5:88:b2:65:4d:91:b6:9e:81:0a:08:59:b0:1c:78:
2a:a3:97:4b:b9:b5:2e:d7:b5:3c:00:20:1f:d6:2c:1e:00:43:
06:e6:7f:68:7f:98:ff:cd:75:73:58:8b:6c:3d:51:2c:06:61:
2e:1c:db:e1:90:9a:c8:d5:13:be:eb:78:95:26:89:12:f4:36:
8b:bc:df:4a:15:da:28:37:8b:4c:29:a1:bf:7e:8c:18:66:fa:
c3:a2:36:c5:e5:76:4d:b6:43:94:81:52:7c:bb:50:bc:36:fd:
7a:e6:00:26:4d:80:13:63:04:a0:ca:da:f8:e2:2a:14:77:20:
44:55:c5:41:d5:db:d1:fb:44:c4:7b:26:cb:28:07:b7:86:68:
44:6a:56:e1:a7:df:a3:1f:32:21:39:cc:31:7c:92:df:40:af:
73:0e:73:a5:a7:a0:4c:57:85:a3:17:4b:cb:50:43:ba:9d:d6:
c0:4b:ee:ed:ad:da:e5:5b:37:2a:84:21:c1:67:ad:2c:e5:93:
b4:45:a5:98:43:a5:33:a4:f3:8b:e5:28:e9:00:ed:8e:4d:ec:
f7:24:32:24:d8:4d:b6:bf:e5:8c:8d:49:09:10:dd:f7:77:c9:
8f:a5:00:7f:34:af:fd:a7:6f:a1:0d:3c:ae:2f:2a:51:df:54:
31:15:25:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:36:55 2026 by rpki-client