
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft
File: 56uLgItVmzffK-5YgugcjBUvW9c.mft (raw, json)
Hash identifier: gNyJlq5XosAp843qVyRvs9shVVyNoxWLT8VNHAMra/A=
Subject key identifier: 4C:2A:3D:3D:6D:88:21:AD:4C:0E:9B:7C:C5:87:2D:1F:10:3C:83:9E
Authority key identifier: E7:AB:8B:80:8B:55:9B:37:DF:2B:EE:58:82:E8:1C:8C:15:2F:5B:D7
Certificate issuer: /CN=e7ab8b808b559b37df2bee5882e81c8c152f5bd7
Certificate serial: 019E1EA384CEFBEFC4DD9529CFB2FCCC6BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56uLgItVmzffK-5YgugcjBUvW9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft
Manifest number: BC
Signing time: Wed 13 May 2026 00:01:33 +0000
Manifest this update: Wed 13 May 2026 00:01:33 +0000
Manifest next update: Thu 14 May 2026 00:01:33 +0000
Files and hashes: 1: 56uLgItVmzffK-5YgugcjBUvW9c.crl (hash: LTgEqVEshT+tgrcqBCYphSp7Ex0nDGIAtxcgiHQ/r54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/56uLgItVmzffK-5YgugcjBUvW9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:84:ce:fb:ef:c4:dd:95:29:cf:b2:fc:cc:6b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ab8b808b559b37df2bee5882e81c8c152f5bd7
Validity
Not Before: May 13 00:01:33 2026 GMT
Not After : May 14 00:01:33 2026 GMT
Subject: CN=4c2a3d3d6d8821ad4c0e9b7cc5872d1f103c839e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:d2:75:28:30:ae:e4:05:56:32:2d:3c:ac:
59:1b:82:3c:2c:85:98:a7:a0:aa:9b:8b:3d:af:ef:
59:aa:3f:a1:83:74:40:0b:bc:e3:c0:ef:cb:28:7b:
be:fb:81:22:f3:dc:72:c7:df:5e:c6:d6:ea:81:27:
dc:36:1b:9b:13:d4:50:67:d4:b4:9e:0d:40:c5:7e:
f3:c0:9a:24:e7:48:cd:f1:e4:97:f8:7f:cd:97:82:
a7:86:1b:a7:db:97:52:2b:ab:ba:9f:47:a9:9c:d9:
c6:84:18:1b:bf:74:ce:7b:f9:aa:37:11:2c:83:27:
87:5e:b6:56:62:fc:7f:00:97:c7:84:20:60:fd:5e:
20:40:c3:b2:b8:0f:46:2c:de:42:8a:9f:2a:d5:c9:
11:2a:08:56:68:07:b5:37:bf:e2:02:6c:31:82:e2:
74:d0:e2:de:4b:f6:98:55:70:af:87:2e:63:27:9c:
da:7e:0c:f5:d7:58:00:91:ef:77:be:49:2c:22:c3:
2a:d8:7d:d2:9c:d9:06:68:1f:35:34:6d:3a:0f:4d:
31:48:fa:1b:65:46:ef:15:b6:6e:21:c5:5a:62:3b:
7e:50:f3:15:bc:51:a4:2f:4d:6e:2c:4f:20:4c:d2:
b4:c0:89:bb:e6:62:77:f1:ba:c9:44:20:42:a3:91:
6c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2A:3D:3D:6D:88:21:AD:4C:0E:9B:7C:C5:87:2D:1F:10:3C:83:9E
X509v3 Authority Key Identifier:
keyid:E7:AB:8B:80:8B:55:9B:37:DF:2B:EE:58:82:E8:1C:8C:15:2F:5B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56uLgItVmzffK-5YgugcjBUvW9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:82:8a:1d:ef:5d:9b:15:17:88:03:b7:24:67:6e:e2:b9:67:
16:54:a2:62:49:77:de:54:34:dc:7d:59:b8:e6:ef:94:5b:7f:
2a:13:c3:e6:36:33:f0:aa:3d:a9:d0:9f:b2:0f:08:4f:e8:b1:
78:f8:59:9a:ef:a6:81:f0:28:92:92:0a:33:1c:0c:0a:0c:ad:
d1:5e:7a:22:9f:a7:7d:6c:5f:91:5a:a7:7e:57:a1:1f:e8:9c:
cd:58:18:d7:82:e7:a3:10:0d:0a:19:ab:a9:a2:7f:e3:dd:e6:
88:19:ef:29:cf:5e:f5:19:be:03:c7:31:5e:87:7b:7b:f6:61:
76:75:f0:16:b2:d8:b9:0c:7e:4f:2b:87:3a:6f:6c:1d:ca:69:
54:bc:d2:db:18:27:47:34:42:8d:a2:bf:5a:e1:f6:21:b1:4c:
d4:4e:4a:42:f0:15:47:68:01:dc:ed:15:ec:3b:78:43:2b:ec:
33:b7:72:ad:cf:aa:95:20:b3:7e:13:05:38:b1:30:cb:8a:4a:
6b:cd:41:60:d6:6b:5e:66:39:7e:1b:1e:09:82:b4:d7:5d:fb:
a6:0e:2e:a9:4c:64:8e:b8:6f:f0:72:3f:1e:56:fe:90:30:4c:
bc:43:f5:b6:1f:a6:0a:3c:ee:a0:06:bc:b9:0d:ce:f4:7c:2b:
1e:6d:c4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:00:38 2026 by rpki-client