Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
File: 738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json)
Hash identifier: DcPq1H3AG4C1w1bSJUzFSDXsxqDFUdqU65Nzh6+shxk=
Subject key identifier: BC:C0:A6:76:E0:D4:EA:99:18:6F:2E:75:05:2D:2C:D1:6A:35:A7:34
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 019CAB342D668A89D4DE98BA2FA80A10BD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 21:00:49 +0000
Manifest this update: Sun 01 Mar 2026 21:00:49 +0000
Manifest next update: Mon 02 Mar 2026 21:00:49 +0000
Files and hashes: 1: 1hsgVZkjGiwPGwbT4Yu5mw_gR1E.roa (hash: sbJm7A7LKoBguraWEh+cEaoDEunVqRtivursvoz8Rkw=)
2: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: zOS35ET+1dRPZdWl2GafG6vnQomh6/tF6vUaiRNw5hs=)
3: uTawXit8aKEj4eVxiOZXv6mDUXQ.roa (hash: XkBO6tOwqDjqwxQC1w04z4HLKY8F+H0OZu2mmN1+iAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:2d:66:8a:89:d4:de:98:ba:2f:a8:0a:10:bd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Mar 1 21:00:49 2026 GMT
Not After : Mar 2 21:00:49 2026 GMT
Subject: CN=bcc0a676e0d4ea99186f2e75052d2cd16a35a734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:c9:e8:17:84:24:66:6c:a8:aa:06:93:a4:
32:e3:0c:44:30:d5:7e:29:76:cc:3e:15:60:ff:d4:
be:1b:df:f1:97:1a:de:14:31:9e:64:8a:74:aa:63:
36:42:83:15:4e:4f:97:c2:27:96:65:10:d2:73:a9:
8a:58:db:e7:4a:44:0e:ce:97:2e:aa:a0:2c:8b:33:
dd:98:51:84:76:c0:74:d5:b3:59:fb:c6:0b:bc:5d:
43:8b:a1:f4:ea:3d:62:93:f5:b0:71:f3:51:fd:7e:
46:46:a9:43:fb:a3:8c:7f:f8:c6:af:30:8c:50:d5:
c5:6b:b0:e9:2e:d5:96:22:db:88:b6:06:71:74:43:
2f:4c:0c:ea:00:58:53:f7:9d:50:88:87:9b:b5:89:
a2:2e:13:f1:96:15:6a:6d:dd:a8:2c:2b:d5:d3:3b:
9d:68:6c:1e:06:65:7a:2d:b1:3a:46:b1:d0:5a:e2:
f8:02:d7:58:d0:d9:b0:f2:a4:54:5d:c4:27:d8:5c:
a9:e4:0f:a9:5c:64:12:b7:0a:3a:68:0d:5b:33:37:
55:8f:58:06:fb:bd:ac:5a:2f:8f:0a:ad:3a:24:03:
81:b8:35:0f:7d:22:9b:ce:ad:c0:72:5b:90:c4:fd:
cb:c4:52:98:58:95:45:9e:cf:d2:43:9d:25:e7:31:
a0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C0:A6:76:E0:D4:EA:99:18:6F:2E:75:05:2D:2C:D1:6A:35:A7:34
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3f:28:3d:a8:88:a4:f8:08:7b:2a:fb:58:19:bf:27:e8:8a:
22:67:9c:1b:13:d6:37:f1:e4:17:2c:98:da:df:c8:45:2d:57:
0c:18:0d:bc:02:7b:b6:4a:ae:fc:6a:4a:75:7e:ae:62:37:a1:
f4:f5:36:3f:c3:e1:fb:ee:40:6d:64:17:90:a9:df:07:51:c8:
44:f9:92:af:88:a8:06:93:af:83:c4:c7:e3:51:dc:12:c2:05:
d3:96:16:b6:6e:12:56:e9:40:fb:a1:63:46:dc:b4:5e:5d:49:
3b:e0:32:43:94:27:e5:5f:49:97:2f:25:a1:19:0f:0f:c6:1b:
87:ab:1a:82:10:a9:a4:94:83:e9:ff:0f:35:93:3a:e0:5e:22:
70:d9:be:1f:15:27:9d:3f:aa:f5:2f:09:bc:c2:95:19:b4:c7:
21:a4:57:cf:f2:cb:56:f1:c4:fa:b7:f9:a3:d4:c3:bd:3b:1a:
8e:8a:61:fc:b0:55:fc:60:4e:a9:ce:7b:0a:8a:39:5d:53:d2:
1c:bf:96:3c:66:64:db:98:7f:22:cd:0e:60:c1:66:a5:e7:41:
77:12:76:6d:88:f7:34:df:43:e5:ce:d3:df:c5:9e:c6:4d:02:
7a:b1:be:d9:db:9c:e6:43:17:ba:5b:da:ab:4f:27:1e:c6:66:
a6:62:8a:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNC1mionU3pi6L6gKEL1HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmN2YzMWJkNmQ5ODVlNDUyOTljMzFkMDUyY2E0YThlYmVm
NTU3OGIwHhcNMjYwMzAxMjEwMDQ5WhcNMjYwMzAyMjEwMDQ5WjAzMTEwLwYDVQQD
EyhiY2MwYTY3NmUwZDRlYTk5MTg2ZjJlNzUwNTJkMmNkMTZhMzVhNzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0DJ6BeEJGZsqKoGk6Qy4wxEMNV+
KXbMPhVg/9S+G9/xlxreFDGeZIp0qmM2QoMVTk+XwieWZRDSc6mKWNvnSkQOzpcu
qqAsizPdmFGEdsB01bNZ+8YLvF1Di6H06j1ik/WwcfNR/X5GRqlD+6OMf/jGrzCM
UNXFa7DpLtWWItuItgZxdEMvTAzqAFhT951QiIebtYmiLhPxlhVqbd2oLCvV0zud
aGweBmV6LbE6RrHQWuL4AtdY0Nmw8qRUXcQn2Fyp5A+pXGQStwo6aA1bMzdVj1gG
+72sWi+PCq06JAOBuDUPfSKbzq3AcluQxP3LxFKYWJVFns/SQ50l5zGg6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzApnbg1OqZGG8udQUtLNFqNac0MB8GA1UdIwQY
MBaAFO9/Mb1tmF5FKZwx0FLKSo6+9VeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQt
YTc2M2RmM2FlZTZkLzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQtYTc2M2RmM2FlZTZk
LzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaD8oPaiI
pPgIeyr7WBm/J+iKImecGxPWN/HkFyyY2t/IRS1XDBgNvAJ7tkqu/GpKdX6uYjeh
9PU2P8Ph++5AbWQXkKnfB1HIRPmSr4ioBpOvg8TH41HcEsIF05YWtm4SVulA+6Fj
Rty0Xl1JO+AyQ5Qn5V9Jly8loRkPD8Ybh6saghCppJSD6f8PNZM64F4icNm+HxUn
nT+q9S8JvMKVGbTHIaRXz/LLVvHE+rf5o9TDvTsajoph/LBV/GBOqc57Coo5XVPS
HL+WPGZk25h/Is0OYMFmpedBdxJ2bYj3NN9D5c7T38Wexk0CerG+2duc5kMXulva
q08nHsZmpmKKPQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:55 2026 by rpki-client