Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
File: 52vcVigM5dn89QMlGKfsm2HizO0.mft (raw, json)
Hash identifier: jII/FZY2iNEt0IMHkyIAzf8+LQHe7U8JCj4k/wNsmvE=
Subject key identifier: A2:41:03:73:A7:FB:E6:C6:5E:7F:8B:99:4E:2B:E0:2D:F5:D3:61:70
Authority key identifier: E7:6B:DC:56:28:0C:E5:D9:FC:F5:03:25:18:A7:EC:9B:61:E2:CC:ED
Certificate issuer: /CN=e76bdc56280ce5d9fcf5032518a7ec9b61e2cced
Certificate serial: 01A0D94D66BE86AE32FDFB82274D32FBF16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52vcVigM5dn89QMlGKfsm2HizO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
Manifest number: 1539
Signing time: Fri 25 Sep 2026 16:02:03 +0000
Manifest this update: Fri 25 Sep 2026 16:02:03 +0000
Manifest next update: Sat 26 Sep 2026 16:02:03 +0000
Files and hashes: 1: 52vcVigM5dn89QMlGKfsm2HizO0.crl (hash: gBltsiyEinKDHer3pvOE6K7imtw6i/pEO+TS/UtGVmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/52vcVigM5dn89QMlGKfsm2HizO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:66:be:86:ae:32:fd:fb:82:27:4d:32:fb:f1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76bdc56280ce5d9fcf5032518a7ec9b61e2cced
Validity
Not Before: Sep 25 16:02:03 2026 GMT
Not After : Sep 26 16:02:03 2026 GMT
Subject: CN=a2410373a7fbe6c65e7f8b994e2be02df5d36170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1a:3a:e2:ca:2b:14:12:9f:b8:58:42:51:4e:
ee:76:d4:a1:8a:b7:78:52:49:84:e9:66:d7:ac:7f:
43:8a:c9:8b:8f:5b:51:72:b3:d2:05:90:b2:02:94:
3c:38:cc:73:36:47:6b:34:fc:f2:62:f7:67:bb:86:
6e:14:10:99:85:d1:62:5d:0c:0e:ee:de:a3:fa:69:
f1:19:e6:1f:9a:70:ea:77:43:47:99:58:39:53:c6:
1c:b0:3c:d7:df:3e:b0:3b:c7:91:96:ec:bd:42:c3:
26:c6:bd:81:80:43:dc:d2:d9:d8:22:6b:5f:e0:b3:
b9:34:9b:78:00:a7:ef:be:9d:bc:db:72:f2:ce:e0:
f0:a0:d0:73:15:a4:a6:42:9f:60:0c:a0:84:05:c0:
7e:cc:f2:14:5e:59:22:19:09:de:c5:45:5e:96:d4:
92:bf:7d:73:0c:56:4c:c2:06:79:d6:b6:0d:01:9b:
2e:56:f7:ff:2d:19:ba:3b:14:96:59:2d:da:d3:53:
61:bd:02:3f:31:41:c5:f3:6b:c3:39:8c:00:86:fc:
ff:8c:c4:4d:a9:37:28:97:8f:21:1f:94:df:c1:45:
31:3e:75:57:6e:aa:dc:d5:7d:f6:c9:fa:c3:49:aa:
16:a8:1b:a7:a0:e5:07:40:c9:9f:c0:aa:12:99:8f:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:41:03:73:A7:FB:E6:C6:5E:7F:8B:99:4E:2B:E0:2D:F5:D3:61:70
X509v3 Authority Key Identifier:
keyid:E7:6B:DC:56:28:0C:E5:D9:FC:F5:03:25:18:A7:EC:9B:61:E2:CC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52vcVigM5dn89QMlGKfsm2HizO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:85:de:31:88:f0:c4:8c:56:8c:15:c1:77:2c:8c:47:33:d4:
b9:87:fd:4c:0c:c3:1e:74:a1:56:43:55:24:1c:fc:f4:03:aa:
33:45:49:d3:ae:e6:8c:bb:b9:69:a4:47:76:c1:63:71:1a:6d:
d7:6f:6e:11:91:43:e9:cc:88:37:21:2a:78:ba:e5:e3:6b:aa:
83:2b:28:7f:cc:0b:77:a0:53:c0:8d:7c:a7:dd:6a:2d:f9:c6:
26:ef:d8:80:cc:e8:ff:8a:9a:91:f7:e7:c7:b0:eb:c7:bd:27:
f3:7a:8d:a6:08:89:fd:02:75:86:c0:80:53:31:38:6c:e7:e5:
99:e7:1b:fd:a1:a5:7e:cc:5b:83:64:0b:0b:c2:ae:58:54:ad:
f1:bc:d0:2a:71:29:fe:df:28:0e:5b:1f:b9:ae:5b:e5:ad:8d:
af:72:27:ff:92:fc:44:ed:04:79:cd:54:f6:74:dd:ff:cd:4b:
42:0b:09:81:ab:5c:ba:ce:67:c7:9b:ea:e0:8a:e5:4d:a1:df:
56:5d:62:a5:46:eb:42:b8:f6:6e:ef:39:5f:19:7d:d4:a4:95:
bd:ba:fa:9c:5d:d9:0a:95:87:95:d5:29:8b:2c:ce:82:fe:a4:
1b:a9:25:09:98:1c:41:db:7f:f5:54:15:a8:33:e7:03:12:f6:
a0:f1:a0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:45:16 2026 by rpki-client