Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
File: 738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json)
Hash identifier: 9hGZje9rwROHOyTfbmDemaRCTPTapHfgxtQtb//sjJQ=
Subject key identifier: A7:8B:BB:DE:B7:AD:68:73:86:F9:95:30:D0:58:88:2C:EA:36:D1:42
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 01A0C5C50CE0A63B7DE20A36F737F146BC59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
Manifest number: 1A6A
Signing time: Mon 21 Sep 2026 21:00:20 +0000
Manifest this update: Mon 21 Sep 2026 21:00:20 +0000
Manifest next update: Tue 22 Sep 2026 21:00:20 +0000
Files and hashes: 1: 1hsgVZkjGiwPGwbT4Yu5mw_gR1E.roa (hash: sbJm7A7LKoBguraWEh+cEaoDEunVqRtivursvoz8Rkw=)
2: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: UqoraDJR/rMEsEvI+tAm8NpnKtQiCU2EqpW8qKxoTYM=)
3: uTawXit8aKEj4eVxiOZXv6mDUXQ.roa (hash: XkBO6tOwqDjqwxQC1w04z4HLKY8F+H0OZu2mmN1+iAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:0c:e0:a6:3b:7d:e2:0a:36:f7:37:f1:46:bc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Sep 21 21:00:20 2026 GMT
Not After : Sep 22 21:00:20 2026 GMT
Subject: CN=a78bbbdeb7ad687386f99530d058882cea36d142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:68:2c:22:e5:b7:b5:27:4b:ab:d6:a5:28:
4f:ab:c4:3a:a2:44:cd:50:ad:a3:62:89:d3:06:a3:
02:95:c1:cc:f0:81:f2:4c:ab:8f:85:d4:56:43:cf:
9b:08:14:68:6a:d9:1a:0b:66:b5:f6:31:44:6d:2b:
44:04:b8:24:29:a5:52:36:ec:19:f7:7d:14:5f:4f:
33:d1:3e:ad:82:d4:89:24:37:71:56:c4:b0:2e:3f:
b4:e4:a0:f0:7b:ef:4e:be:5f:06:bf:11:a7:d8:dd:
68:81:1b:29:a9:ea:79:d0:d8:fc:bf:33:cc:e8:d4:
14:14:ca:1a:fa:91:cf:b6:e9:7e:2f:7b:3f:e0:7e:
69:70:45:23:d5:92:e0:98:d0:d7:d3:b8:6b:d7:a3:
47:dc:9f:5a:8d:f5:ee:b8:07:fd:53:6c:d6:e4:6f:
b2:38:33:3b:bf:28:d3:c5:8e:a0:2c:3b:6d:7d:b5:
45:fd:e8:72:9a:bf:b8:0a:d0:6e:17:54:4c:2f:72:
3d:8c:7f:8a:6f:d6:4c:d0:ca:73:e5:87:f0:d0:b7:
7b:c3:c4:88:dc:83:42:05:ab:20:c6:af:1f:5c:f9:
01:7e:a4:e6:d2:e5:83:df:78:c7:c9:c3:eb:a7:5f:
bc:12:c9:3d:a5:1e:f0:d6:1b:82:89:5f:76:e5:66:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8B:BB:DE:B7:AD:68:73:86:F9:95:30:D0:58:88:2C:EA:36:D1:42
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ee:38:c0:90:5f:cb:bc:17:48:9a:87:be:88:ee:eb:88:0a:
01:37:20:16:7e:24:2d:a0:9f:c8:dd:a5:ae:2f:1c:63:32:06:
36:dd:b3:f1:40:10:fe:72:a7:ad:2a:60:05:78:77:20:da:34:
83:b3:54:45:85:5b:fe:39:8b:24:da:7d:d4:d6:78:51:ad:d1:
73:cf:01:50:5b:78:dc:80:c1:e6:9a:da:ed:c1:43:0e:aa:54:
83:d8:46:9b:e2:ce:a4:74:eb:f2:5b:f1:17:00:63:11:ea:a6:
a4:2f:c4:2b:cb:4b:d2:9c:42:7c:3b:d3:fd:1b:3b:cc:15:47:
a5:35:57:f7:d0:5b:76:a3:13:bc:dc:40:2b:21:f4:ae:98:87:
4c:84:da:ef:1f:ff:1a:5d:45:a2:a2:cc:a3:f3:f2:8f:11:cc:
2e:ad:97:53:fa:aa:96:5a:19:a8:af:fb:65:93:21:93:5e:c0:
d4:27:95:20:dc:e0:d1:cb:60:f7:1f:77:e9:47:ab:7d:f2:62:
6a:45:a6:0b:79:1a:c0:82:69:29:df:8b:7b:09:5b:c3:c4:62:
fe:bb:49:37:a1:37:77:28:62:40:ee:c1:bc:da:45:93:c1:4e:
96:f6:87:2e:56:fc:51:15:38:c5:79:91:df:70:09:4f:8d:71:
a8:71:14:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFxQzgpjt94go29zfxRrxZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmN2YzMWJkNmQ5ODVlNDUyOTljMzFkMDUyY2E0YThlYmVm
NTU3OGIwHhcNMjYwOTIxMjEwMDIwWhcNMjYwOTIyMjEwMDIwWjAzMTEwLwYDVQQD
EyhhNzhiYmJkZWI3YWQ2ODczODZmOTk1MzBkMDU4ODgyY2VhMzZkMTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MxoLCLlt7UnS6vWpShPq8Q6okTN
UK2jYonTBqMClcHM8IHyTKuPhdRWQ8+bCBRoatkaC2a19jFEbStEBLgkKaVSNuwZ
930UX08z0T6tgtSJJDdxVsSwLj+05KDwe+9Ovl8GvxGn2N1ogRspqep50Nj8vzPM
6NQUFMoa+pHPtul+L3s/4H5pcEUj1ZLgmNDX07hr16NH3J9ajfXuuAf9U2zW5G+y
ODM7vyjTxY6gLDttfbVF/ehymr+4CtBuF1RML3I9jH+Kb9ZM0Mpz5Yfw0Ld7w8SI
3INCBasgxq8fXPkBfqTm0uWD33jHycPrp1+8Esk9pR7w1huCiV925WaBwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeLu963rWhzhvmVMNBYiCzqNtFCMB8GA1UdIwQY
MBaAFO9/Mb1tmF5FKZwx0FLKSo6+9VeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQt
YTc2M2RmM2FlZTZkLzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQtYTc2M2RmM2FlZTZk
LzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfe44wJBf
y7wXSJqHvoju64gKATcgFn4kLaCfyN2lri8cYzIGNt2z8UAQ/nKnrSpgBXh3INo0
g7NURYVb/jmLJNp91NZ4Ua3Rc88BUFt43IDB5pra7cFDDqpUg9hGm+LOpHTr8lvx
FwBjEeqmpC/EK8tL0pxCfDvT/Rs7zBVHpTVX99BbdqMTvNxAKyH0rpiHTITa7x//
Gl1FoqLMo/PyjxHMLq2XU/qqlloZqK/7ZZMhk17A1CeVINzg0ctg9x936UerffJi
akWmC3kawIJpKd+Lewlbw8Ri/rtJN6E3dyhiQO7BvNpFk8FOlvaHLlb8URU4xXmR
33AJT41xqHEUkQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:51:43 2026 by rpki-client