
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft
File: 56uLgItVmzffK-5YgugcjBUvW9c.mft (raw, json)
Hash identifier: djVHKW6ONgHEZhzF2O31ZPHoCtbysNqwcNWkwvZJ+J8=
Subject key identifier: 0F:27:9B:1E:56:1B:47:02:C7:22:01:40:6B:34:F0:2D:D4:1D:AC:45
Authority key identifier: E7:AB:8B:80:8B:55:9B:37:DF:2B:EE:58:82:E8:1C:8C:15:2F:5B:D7
Certificate issuer: /CN=e7ab8b808b559b37df2bee5882e81c8c152f5bd7
Certificate serial: 019D33080A6C13273AA6C8842732A63E8468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56uLgItVmzffK-5YgugcjBUvW9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft
Manifest number: 42
Signing time: Sat 28 Mar 2026 06:00:57 +0000
Manifest this update: Sat 28 Mar 2026 06:00:57 +0000
Manifest next update: Sun 29 Mar 2026 06:00:57 +0000
Files and hashes: 1: 56uLgItVmzffK-5YgugcjBUvW9c.crl (hash: VfuVrD6e5fQXgL9dn3TA4e/uPPM3HymwbnKLcCpKP4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/56uLgItVmzffK-5YgugcjBUvW9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:0a:6c:13:27:3a:a6:c8:84:27:32:a6:3e:84:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ab8b808b559b37df2bee5882e81c8c152f5bd7
Validity
Not Before: Mar 28 06:00:57 2026 GMT
Not After : Mar 29 06:00:57 2026 GMT
Subject: CN=0f279b1e561b4702c72201406b34f02dd41dac45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:f6:1c:e1:33:88:1f:2e:b0:5a:65:ee:a7:
b9:a8:10:b7:7a:5b:70:c9:ba:2d:a5:23:2b:8d:ad:
4f:20:f0:a9:ef:f0:52:d5:a2:ca:02:b9:67:2f:fc:
44:e4:27:2f:7c:17:34:cf:3f:bc:e3:3a:7a:4b:53:
eb:23:9b:45:76:ea:08:cb:b1:fb:01:23:e0:73:68:
5f:b6:68:48:8a:f0:93:58:39:f9:73:fa:22:38:ab:
1a:fd:94:34:ff:62:f8:a9:4e:66:0f:58:f5:a1:80:
16:04:53:cf:5a:cc:3e:15:16:cd:ac:03:04:0c:05:
2a:ed:4e:39:dc:ee:22:39:a9:53:69:03:27:37:5d:
59:93:36:1f:14:41:e9:98:e2:18:44:24:cd:0d:9c:
6e:9b:15:72:ef:5f:97:15:61:67:a1:e6:a5:7a:f9:
ed:c3:26:13:ff:d0:24:e4:82:c4:e9:25:f6:c9:1a:
4a:c7:8c:d7:97:18:1b:c6:52:84:66:45:99:63:56:
9a:d9:b3:eb:86:4b:1f:9c:9b:84:9d:c6:df:38:64:
31:7d:4b:12:05:12:60:9c:69:1a:f0:11:9b:55:b9:
76:53:0a:39:1e:8b:9a:73:8e:84:e1:c9:49:ff:b8:
62:49:8f:31:c4:3f:36:8d:1c:3a:78:06:f3:28:2c:
dd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:27:9B:1E:56:1B:47:02:C7:22:01:40:6B:34:F0:2D:D4:1D:AC:45
X509v3 Authority Key Identifier:
keyid:E7:AB:8B:80:8B:55:9B:37:DF:2B:EE:58:82:E8:1C:8C:15:2F:5B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56uLgItVmzffK-5YgugcjBUvW9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3e:d4:03:60:fa:12:80:18:13:ed:25:c6:d8:15:c0:6d:0c:
a7:f9:54:b8:59:66:f1:86:eb:df:23:9f:64:c2:b6:97:6c:32:
98:8a:0e:56:28:6d:53:31:a5:6d:5f:8a:bf:e0:ff:80:20:47:
d5:c6:4e:b2:5b:82:14:fd:b9:26:73:d5:72:61:af:1d:2f:bc:
64:7f:0d:6a:6e:71:5d:3b:ac:2b:af:dd:0b:77:5f:32:e2:35:
f9:70:7a:bc:c9:59:6f:e6:74:ee:2d:53:9c:dc:dd:b3:09:86:
cf:fe:27:bb:07:bf:9a:23:73:97:dd:54:7d:29:a4:d8:13:ef:
bc:50:8a:54:6e:fe:ec:cc:bf:b1:69:e5:44:00:5f:36:bc:58:
0e:3b:82:ae:94:36:41:37:0c:aa:1a:89:06:56:7b:1e:b6:37:
dd:41:fe:7a:57:7d:f3:59:f6:65:54:66:7a:52:96:2b:be:71:
9a:b7:f4:35:f2:af:9f:5d:52:75:ea:f3:40:41:d2:45:c7:b5:
f9:eb:1b:75:ff:ee:88:39:91:2b:bb:53:13:0a:e4:fa:7f:d0:
f2:bc:9e:fd:41:13:80:16:0d:07:5f:71:9e:d2:c4:eb:ad:2b:
e4:41:a3:f3:8a:c3:11:a4:16:02:d0:48:79:bb:74:8e:67:12:
e1:9e:aa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 09:55:06 2026 by rpki-client