Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft
File: 56uLgItVmzffK-5YgugcjBUvW9c.mft (raw, json)
Hash identifier: +FxdYdgHTEh27GxyAnd7IziFAifBot3/K6g8XAbRlAw=
Subject key identifier: 53:A6:85:A1:9D:C0:34:67:1D:04:20:F2:85:54:A0:E6:82:03:1A:00
Authority key identifier: E7:AB:8B:80:8B:55:9B:37:DF:2B:EE:58:82:E8:1C:8C:15:2F:5B:D7
Certificate issuer: /CN=e7ab8b808b559b37df2bee5882e81c8c152f5bd7
Certificate serial: 01A0CE2401B38F7A3F4DD05CE51A5103D887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56uLgItVmzffK-5YgugcjBUvW9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft
Manifest number: 0220
Signing time: Wed 23 Sep 2026 12:01:01 +0000
Manifest this update: Wed 23 Sep 2026 12:01:01 +0000
Manifest next update: Thu 24 Sep 2026 12:01:01 +0000
Files and hashes: 1: 56uLgItVmzffK-5YgugcjBUvW9c.crl (hash: ZzSf/8+4oKsNtRAtA/oODYorJglei66ZcTgQOmltPmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/56uLgItVmzffK-5YgugcjBUvW9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:01:b3:8f:7a:3f:4d:d0:5c:e5:1a:51:03:d8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ab8b808b559b37df2bee5882e81c8c152f5bd7
Validity
Not Before: Sep 23 12:01:01 2026 GMT
Not After : Sep 24 12:01:01 2026 GMT
Subject: CN=53a685a19dc034671d0420f28554a0e682031a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:8f:f4:36:80:75:98:7f:73:d6:4f:fd:88:
e7:d7:7b:d1:0a:20:53:57:b6:a7:c7:35:4c:b7:72:
1b:83:83:d2:b6:eb:28:50:a4:4e:70:14:ff:6b:6d:
7f:fd:08:f5:56:71:6c:9d:26:49:28:1c:d6:a1:14:
2a:f0:a8:7a:43:52:23:12:47:c3:a2:f5:69:af:bd:
bd:f2:91:17:2d:57:91:43:c6:ea:11:1a:9a:70:19:
cb:0e:38:80:19:96:dc:3d:1a:61:64:6a:23:4f:1f:
68:bd:df:64:e4:a0:52:dd:79:2c:03:36:2b:d1:2e:
05:cd:e6:74:0a:5c:f7:ca:33:5f:18:6a:88:de:1f:
cd:f2:09:36:cd:bd:e0:62:68:48:37:d9:18:ad:ca:
37:5b:ba:ad:96:a8:ab:2b:ce:ca:a4:d9:b9:e1:aa:
29:ad:de:78:3d:07:70:2c:a8:1a:1c:97:38:0b:35:
3c:18:0a:9b:d5:9f:d5:65:13:dc:35:fa:ba:7d:e2:
cb:62:07:94:5d:ba:88:e6:04:bd:2e:93:9e:f9:89:
6e:dc:fe:6b:9e:40:9d:f8:07:15:af:63:c7:6e:d7:
dd:87:05:b7:8e:59:8e:d9:9b:07:1d:24:88:b7:bb:
f1:62:72:05:6e:96:78:44:68:c9:7b:4b:2f:e1:c6:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A6:85:A1:9D:C0:34:67:1D:04:20:F2:85:54:A0:E6:82:03:1A:00
X509v3 Authority Key Identifier:
keyid:E7:AB:8B:80:8B:55:9B:37:DF:2B:EE:58:82:E8:1C:8C:15:2F:5B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56uLgItVmzffK-5YgugcjBUvW9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/11dce1-6e50-4bfe-af01-0437929ded5b/1/56uLgItVmzffK-5YgugcjBUvW9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:26:07:e0:6e:fc:5a:f0:28:88:d0:54:5d:54:62:84:1d:86:
04:89:63:27:f2:82:a8:62:1e:1f:dc:52:64:21:59:8b:cb:f8:
12:6b:59:87:f5:b1:3a:e0:2d:47:bd:61:7d:52:47:19:bb:50:
02:ab:e0:90:e3:40:54:36:57:2b:06:59:bc:ba:67:41:c5:87:
28:63:d2:b1:e7:ef:73:c5:03:b8:73:e4:7a:fd:c2:ee:84:c0:
7a:87:3e:b8:97:49:40:a6:a5:c1:3e:22:3b:99:59:4d:f3:f9:
62:5e:e3:29:29:3a:16:e6:20:ab:7d:82:3b:39:d2:6e:9d:a1:
85:9c:04:95:1e:30:95:65:5d:d9:a5:6e:27:6f:c8:90:c9:29:
80:4b:3c:50:f3:35:17:20:a9:b6:c4:16:b3:49:c1:a4:eb:e5:
87:3b:32:61:92:1f:0f:3f:49:c1:41:5e:01:f0:f8:c7:f5:2c:
1e:84:a2:83:28:cb:76:f1:59:25:32:96:44:7e:4a:ef:37:c5:
f4:f0:10:f0:96:6c:18:aa:15:3e:fa:55:10:ec:aa:a3:15:83:
cb:70:8b:c9:2c:e8:05:83:d7:fc:86:ac:41:6f:ea:9b:07:cc:
df:bf:6c:41:94:9c:00:05:f1:d2:a5:ba:fd:ed:ed:ee:eb:e1:
e7:2d:1a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:43:48 2026 by rpki-client