Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
File: 52px9rqT9s9H6zF7K_0EnVzDl2A.mft (raw, json)
Hash identifier: fStQ2Aq3Y4OpwuLX9rLAa+An/EF2vix/PJ3BALgQXa0=
Subject key identifier: 41:1D:59:11:84:9E:7E:27:7B:63:C6:2C:AF:1D:61:1D:1C:26:BE:F8
Authority key identifier: E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
Certificate issuer: /CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Certificate serial: 019D32633DA2460E934331ED2331686C6CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
Manifest number: 0C98
Signing time: Sat 28 Mar 2026 03:00:57 +0000
Manifest this update: Sat 28 Mar 2026 03:00:57 +0000
Manifest next update: Sun 29 Mar 2026 03:00:57 +0000
Files and hashes: 1: 52px9rqT9s9H6zF7K_0EnVzDl2A.crl (hash: TgFG+07rYWbNcuT1drvZq6Z+CxoODvF2kxtRcRY79W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:3d:a2:46:0e:93:43:31:ed:23:31:68:6c:6c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Validity
Not Before: Mar 28 03:00:57 2026 GMT
Not After : Mar 29 03:00:57 2026 GMT
Subject: CN=411d5911849e7e277b63c62caf1d611d1c26bef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f2:51:dd:45:4d:ac:0c:5f:87:e2:ac:04:0d:
38:bf:f6:07:00:5a:c9:e8:f2:56:38:31:29:90:4f:
a2:af:e5:ac:f3:26:3b:fd:db:d4:4a:55:21:e2:3c:
52:d3:30:cd:70:c8:63:d5:83:d1:81:67:1a:df:a4:
94:e2:23:35:1f:35:01:0b:ae:ef:a7:51:58:cb:08:
42:79:17:ff:bd:44:0f:9f:bb:8f:d5:8c:44:84:36:
92:e8:53:8e:6d:ec:33:d9:d0:29:ba:e1:18:66:b9:
42:b9:94:12:d6:3f:f4:15:57:88:2a:d9:a2:2b:2b:
ca:1b:ec:f6:3b:aa:cf:63:6c:a5:dd:70:e8:64:52:
90:7a:12:6b:11:5b:4e:29:c8:d3:06:46:a6:b6:0d:
80:b3:99:8a:08:e4:dd:81:ba:c9:a6:45:d1:7a:3b:
83:9b:ce:59:bd:bc:e2:52:df:b2:48:eb:30:71:14:
ca:13:86:92:72:5e:71:23:cc:d9:e7:5b:a4:77:9f:
11:2a:9b:72:19:95:39:1f:1c:96:36:ab:f4:ae:5c:
e5:d6:83:cd:84:9c:dc:08:32:9a:a4:e9:31:f7:dc:
6b:a1:12:02:4f:97:f0:7b:12:68:ff:73:3b:4c:d9:
32:21:9d:5f:e9:88:6b:d0:ad:e3:19:bb:7e:4d:a1:
de:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1D:59:11:84:9E:7E:27:7B:63:C6:2C:AF:1D:61:1D:1C:26:BE:F8
X509v3 Authority Key Identifier:
keyid:E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d8:54:6c:cc:60:e0:cb:f1:ea:b2:6f:91:24:23:be:a6:c4:
a5:59:86:25:c3:02:2f:54:51:7e:a4:45:0a:46:ba:8f:f3:4c:
9b:2b:fb:0f:a1:89:f1:3f:15:7b:f5:a8:a2:52:61:94:bf:12:
6a:82:d8:d8:97:a3:d1:d2:2b:9e:cc:11:14:1a:5a:cf:cf:6e:
63:fa:3a:ac:e3:37:a2:c1:7f:e7:af:d4:ed:2f:dd:17:d0:62:
14:38:66:5a:bd:a3:f3:5d:a9:a9:cb:a5:7b:2d:b3:7c:20:4b:
63:0c:48:de:03:fd:ba:cb:ef:bb:37:f3:8a:16:09:f6:32:42:
4e:20:cb:d5:07:7f:91:90:ac:be:09:39:3f:87:e3:04:db:07:
49:9d:ee:12:f5:cf:2f:50:e5:ba:e5:ff:25:06:c2:1d:6c:3d:
8b:e5:f9:72:a3:d3:44:e5:f9:ab:15:3c:f9:93:fb:40:12:a7:
a0:44:05:4b:6d:4b:c0:f9:26:87:c4:25:ca:8f:61:fc:e9:d5:
fe:e0:53:45:38:26:6c:dc:66:82:a4:18:50:62:9c:48:34:70:
34:21:0f:d4:07:b6:86:10:d1:e9:08:e5:cc:bc:1b:93:74:1c:
b8:46:69:ec:c5:4a:9b:7c:dc:6b:9b:3c:af:02:6b:e8:34:e1:
58:b5:1c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:10 2026 by rpki-client