Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
File: 52px9rqT9s9H6zF7K_0EnVzDl2A.mft (raw, json)
Hash identifier: 68T0PByhFfwp3GctSRaFvn9PPhMSUv4ARNyeZ7w5cY4=
Subject key identifier: 64:B4:08:A6:E6:00:BE:E1:EC:EA:ED:C2:E2:0E:81:F0:63:73:30:F2
Authority key identifier: E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
Certificate issuer: /CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Certificate serial: 01A10391F2E41377531C87B03C339E01C24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
Manifest number: 0E92
Signing time: Sat 03 Oct 2026 21:00:58 +0000
Manifest this update: Sat 03 Oct 2026 21:00:58 +0000
Manifest next update: Sun 04 Oct 2026 21:00:58 +0000
Files and hashes: 1: 52px9rqT9s9H6zF7K_0EnVzDl2A.crl (hash: 3H3jD7BSFwg0RM5i0Ttr6Ip01HkjQGsipBeKRyroQ9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:91:f2:e4:13:77:53:1c:87:b0:3c:33:9e:01:c2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Validity
Not Before: Oct 3 21:00:58 2026 GMT
Not After : Oct 4 21:00:58 2026 GMT
Subject: CN=64b408a6e600bee1eceaedc2e20e81f0637330f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:b1:c7:63:60:f0:75:de:0a:2a:7c:1f:c3:
6a:9a:17:78:a0:ce:de:ac:98:35:f5:4e:67:1c:64:
39:6a:21:1d:51:ce:06:d6:a2:fb:45:a8:88:0b:ae:
5a:ba:8f:a3:31:3b:56:c7:ef:bb:6a:64:ec:97:1b:
f2:f0:c4:2c:44:91:4e:43:0b:43:bc:01:5f:59:83:
9a:ed:f8:c7:a3:ef:80:bc:a5:2e:ab:67:04:64:5e:
0f:2a:b7:d9:88:cf:9d:44:d0:bf:b4:2b:d4:c2:cb:
40:46:a7:d9:00:89:30:cb:c6:46:3d:b4:2e:bb:7b:
34:18:42:38:65:df:96:51:bd:04:b1:d2:31:61:55:
34:e1:da:06:9f:c4:2e:ac:ba:11:be:34:bc:5d:11:
95:12:54:f2:51:62:2e:bc:86:82:e4:8f:7a:d3:74:
a9:62:bf:f4:e8:cb:b8:25:d9:4a:c8:01:af:cb:9e:
19:50:64:74:ee:00:14:a3:f3:49:d2:b7:b9:40:e1:
0a:7d:05:5b:84:f5:60:34:52:d0:4d:db:92:d8:c5:
10:8e:01:79:51:f3:a6:66:98:0b:a7:a7:83:8a:12:
24:c7:cd:96:ee:da:f0:ab:47:27:ee:72:0f:a7:e1:
e5:1c:96:fa:29:a5:12:e3:5a:be:db:83:cd:83:18:
a6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B4:08:A6:E6:00:BE:E1:EC:EA:ED:C2:E2:0E:81:F0:63:73:30:F2
X509v3 Authority Key Identifier:
keyid:E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:01:e4:1d:e8:8d:af:97:d5:d7:0d:f2:87:19:0b:34:e1:48:
8a:85:ba:79:ed:78:0a:8d:99:3d:b4:42:23:05:3c:1e:cb:53:
b2:a8:48:84:5a:88:db:62:62:4b:27:19:b2:d2:42:00:1a:2c:
0d:34:f1:3d:cd:5f:7d:78:d3:73:93:07:a2:64:5b:86:3a:43:
8d:05:70:bc:29:3b:fc:68:4c:23:75:f2:2a:42:34:bd:9d:28:
65:0c:d3:d6:35:01:58:4f:ed:1a:a3:ce:fb:5f:79:c9:9c:9a:
24:4c:5d:77:00:f9:bb:12:3a:40:f9:cc:93:b6:4e:1b:68:b2:
b0:17:da:82:3c:3a:0f:fe:d3:c8:d8:30:e3:07:56:2a:05:20:
17:08:6e:56:66:ba:8a:1d:04:eb:70:bc:02:f2:70:76:58:78:
5b:f9:49:73:5e:46:d3:5a:3d:e8:24:dc:39:a0:9b:0c:20:ae:
04:3e:04:e1:99:c3:dc:54:f4:8f:60:08:8b:6a:2a:70:14:9e:
92:7e:7c:7d:b3:df:ce:63:eb:d5:2e:31:4f:1e:59:c5:c5:79:
bb:de:d8:f1:fd:da:18:a5:9b:83:d8:0d:3a:c9:02:36:c2:ba:
74:2f:7f:c9:43:c0:de:a6:34:f9:36:3b:c9:33:fe:9a:52:4b:
68:b2:a3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:00:29 2026 by rpki-client