Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
File: 738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json)
Hash identifier: srzsv36E1JhjJdju8sh+u20HbGiZyDmCftDbt75TOCc=
Subject key identifier: 66:E3:78:18:2E:4A:A7:6D:B5:9D:B0:C7:68:23:80:B1:09:C2:02:8C
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 019EC03664BBBDD84CEC7B5CD8A09BABC4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 09:00:50 +0000
Manifest this update: Sat 13 Jun 2026 09:00:50 +0000
Manifest next update: Sun 14 Jun 2026 09:00:50 +0000
Files and hashes: 1: 1hsgVZkjGiwPGwbT4Yu5mw_gR1E.roa (hash: sbJm7A7LKoBguraWEh+cEaoDEunVqRtivursvoz8Rkw=)
2: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: v9tj7AWPfKVMkLMqU2l0WG+zi7JErFegrzYTiK8ZTn4=)
3: uTawXit8aKEj4eVxiOZXv6mDUXQ.roa (hash: XkBO6tOwqDjqwxQC1w04z4HLKY8F+H0OZu2mmN1+iAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:64:bb:bd:d8:4c:ec:7b:5c:d8:a0:9b:ab:c4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Jun 13 09:00:50 2026 GMT
Not After : Jun 14 09:00:50 2026 GMT
Subject: CN=66e378182e4aa76db59db0c7682380b109c2028c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c1:da:d8:4e:19:74:fd:57:bd:50:bf:e1:0e:
d3:39:6e:d8:20:26:fc:77:9b:4a:61:4a:a4:30:00:
56:8e:c2:09:d4:6d:51:e4:34:49:27:d2:59:a4:13:
33:3b:50:8b:5a:b3:63:23:44:b6:a7:8d:97:26:17:
8b:6d:62:0c:ef:d5:14:0d:05:a8:13:9d:bc:9c:08:
c1:93:55:37:35:3a:28:d9:ed:f7:a6:66:a1:39:e8:
ad:f8:77:b4:67:65:4a:a9:20:e6:92:9e:7e:0e:ea:
ba:fd:ca:7f:b6:1e:6e:2c:5c:9d:e4:16:c3:5d:7a:
6e:61:9b:39:10:56:6a:c9:a7:96:2b:84:ed:78:7e:
78:0a:41:39:22:ef:a8:9a:3d:8e:83:3e:e5:9f:0b:
14:18:3e:ba:61:78:e4:d4:69:5e:f7:be:83:b6:3c:
3b:1a:b6:4c:6a:73:3b:c1:8d:59:f7:08:90:42:76:
4b:b0:ac:b8:87:b5:e3:17:24:01:9e:09:cc:1d:af:
58:82:f5:f8:64:5a:3f:37:c3:03:0a:95:b4:8a:42:
80:83:6e:6a:0c:e2:6c:a8:1e:f4:97:c8:a0:98:af:
18:ef:76:a5:ae:f8:5f:31:ce:f8:08:e7:50:a4:ab:
ce:03:4a:48:46:eb:5c:52:b6:fb:f2:89:48:89:8b:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E3:78:18:2E:4A:A7:6D:B5:9D:B0:C7:68:23:80:B1:09:C2:02:8C
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:46:45:64:c2:0c:23:f5:3b:f0:3a:31:b9:77:e9:68:d9:b4:
d7:23:24:91:77:97:4d:70:8e:4b:2b:8a:9b:d3:ff:dd:2b:c9:
7a:e3:9e:27:37:92:ca:46:c7:37:98:00:8e:67:34:f0:37:fb:
17:7e:ff:53:f2:b7:da:15:45:8a:70:d8:87:68:2c:35:ed:ae:
05:81:33:ee:c0:89:93:15:34:1d:f3:cb:e2:cc:58:1b:18:d7:
b6:ad:56:f5:46:0b:2d:f6:53:66:9f:36:64:0a:34:b5:d9:f7:
b2:31:f4:7c:70:75:51:50:69:c1:c2:b4:77:f7:d1:46:99:14:
b8:08:6f:96:19:7a:dc:c8:c4:0a:a5:af:66:75:70:cc:3f:83:
16:61:d2:f0:5a:7b:4e:dd:5a:20:2e:80:1d:c0:51:ea:6a:0c:
8a:6e:4c:18:d4:b2:b8:38:ab:28:3a:b0:68:7b:c8:83:80:18:
8a:a1:5c:f7:62:73:14:65:2a:a6:02:33:29:dc:e9:06:27:f9:
46:cc:a0:6d:20:a4:e0:91:59:44:cf:51:9f:4c:63:fc:92:5a:
ac:56:53:86:c0:54:38:ce:40:f3:f9:fb:2f:89:b4:eb:5f:fe:
ae:18:f7:59:1b:66:de:83:22:c6:72:ae:e9:80:9d:ab:c9:2b:
1f:48:05:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:51:52 2026 by rpki-client