Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
File: 738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json)
Hash identifier: eJ7dk9w8oSlhueraFCgcyjamcSqsyMvoHeb/MvuEfQY=
Subject key identifier: B1:A2:0C:BD:2E:71:09:8C:26:5E:69:EA:A8:90:04:AE:A7:0C:4D:E7
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 019FA9E276016A2B9E3CDA7E454196F72CBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 18:00:18 +0000
Manifest this update: Tue 28 Jul 2026 18:00:18 +0000
Manifest next update: Wed 29 Jul 2026 18:00:18 +0000
Files and hashes: 1: 1hsgVZkjGiwPGwbT4Yu5mw_gR1E.roa (hash: sbJm7A7LKoBguraWEh+cEaoDEunVqRtivursvoz8Rkw=)
2: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: S5hfrztRPLyGMRhH9I1Tt0X0+kdIrThFidsDcAsFGUI=)
3: uTawXit8aKEj4eVxiOZXv6mDUXQ.roa (hash: XkBO6tOwqDjqwxQC1w04z4HLKY8F+H0OZu2mmN1+iAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:76:01:6a:2b:9e:3c:da:7e:45:41:96:f7:2c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Jul 28 18:00:18 2026 GMT
Not After : Jul 29 18:00:18 2026 GMT
Subject: CN=b1a20cbd2e71098c265e69eaa89004aea70c4de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:4b:9a:69:29:59:6a:f4:22:2e:5a:a8:a6:
38:7f:af:cc:d7:7c:8b:46:4e:dc:77:d4:1f:30:ee:
ca:73:26:a1:8a:38:e9:6b:4b:d3:27:41:9c:ba:5c:
4c:3c:f2:ee:cd:d4:68:89:d2:20:6c:3f:30:9d:43:
bb:3d:dc:99:e7:12:8f:2c:1c:d2:8b:70:1d:4c:6d:
68:62:ad:9e:ed:cc:fd:45:cd:98:e1:a4:da:cb:6a:
94:dd:8b:fa:f8:c2:db:6b:e2:a7:ee:cd:86:cc:2f:
5c:af:11:e5:b3:ba:91:f4:88:b9:66:e2:c6:0e:06:
46:8e:dc:f0:76:a7:a6:06:81:01:48:8a:1d:a1:f9:
61:b8:ec:72:a6:58:a2:86:20:68:e5:aa:d3:56:56:
4b:2e:fa:ff:8a:0d:cb:0c:90:79:71:87:c2:6e:f5:
7e:c3:bd:a2:4b:e7:2d:52:5d:04:c8:af:aa:1b:16:
7a:ac:e9:c5:aa:d8:b7:c4:c5:d6:f3:d5:77:0b:5a:
63:c4:0b:5b:f5:f8:73:8a:fb:11:d5:1b:e6:90:e1:
da:1d:63:ce:6f:74:6e:06:df:6f:5f:71:ba:58:c6:
11:a7:f6:3e:da:b8:17:ca:6b:bc:d6:21:58:01:e6:
0e:1c:7c:09:71:77:97:c7:b2:7d:17:11:93:c8:5d:
eb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A2:0C:BD:2E:71:09:8C:26:5E:69:EA:A8:90:04:AE:A7:0C:4D:E7
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4e:fa:2a:ad:fd:92:58:38:5e:8d:cb:a9:62:b6:e4:8b:a5:
41:04:67:5a:a1:a6:02:92:62:57:e8:fd:3c:1e:02:ee:6e:b0:
9d:b7:24:13:67:a9:1a:8b:ca:83:cf:ec:75:fb:39:17:0e:d4:
25:11:33:22:af:74:00:92:bc:b2:f3:4d:76:88:12:58:84:61:
d5:94:c6:47:fb:c3:a2:bd:44:44:1e:74:45:db:dc:88:da:14:
5c:7f:c3:c7:3c:9c:61:e2:3d:32:e1:e3:a5:6c:d3:16:b0:f3:
21:1e:0c:54:65:19:d7:cd:c3:57:9b:61:ff:bc:19:0e:16:63:
f9:84:6c:40:c9:0a:68:4f:d3:29:b9:f4:07:10:98:13:58:a5:
77:88:d6:9e:82:0a:47:c4:01:25:b8:e5:1e:a1:8b:40:27:9c:
0c:e1:a9:ae:de:57:df:17:51:9a:8c:8a:86:f5:26:db:30:4a:
c7:b4:e0:79:f6:8a:31:47:69:5b:9d:0b:42:aa:db:e2:b8:ff:
a7:67:a5:ee:a3:12:8e:45:56:b0:28:58:09:99:fa:cd:41:f7:
14:62:00:8a:f5:07:27:5b:e9:15:83:fc:82:06:bd:64:00:43:
93:08:a8:42:9c:c0:e5:16:0e:df:93:5f:18:cb:d9:17:99:c7:
7d:13:a0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:11 2026 by rpki-client