Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
File: 738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json)
Hash identifier: 6cZUIbbBxq240gVcmVfENWPi+K78ZHcE5bpFgnmSgMI=
Subject key identifier: B5:49:C0:C8:66:23:92:2F:7A:F8:FC:AD:23:53:EE:5B:49:6C:8C:20
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 019DA453EAB97154F1F24F7AF4A9AEC9FCA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
Manifest number: 18CB
Signing time: Sun 19 Apr 2026 06:00:56 +0000
Manifest this update: Sun 19 Apr 2026 06:00:56 +0000
Manifest next update: Mon 20 Apr 2026 06:00:56 +0000
Files and hashes: 1: 1hsgVZkjGiwPGwbT4Yu5mw_gR1E.roa (hash: sbJm7A7LKoBguraWEh+cEaoDEunVqRtivursvoz8Rkw=)
2: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: vltp5pT2mxMJ3l6Atg14DeW0qWKJEXl7b50wPyuVqmc=)
3: uTawXit8aKEj4eVxiOZXv6mDUXQ.roa (hash: XkBO6tOwqDjqwxQC1w04z4HLKY8F+H0OZu2mmN1+iAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:ea:b9:71:54:f1:f2:4f:7a:f4:a9:ae:c9:fc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Apr 19 06:00:56 2026 GMT
Not After : Apr 20 06:00:56 2026 GMT
Subject: CN=b549c0c86623922f7af8fcad2353ee5b496c8c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:d3:28:39:b7:46:3a:eb:90:96:55:df:b2:
f7:38:84:ac:6f:3f:e6:90:c7:0f:48:33:8e:ff:a3:
3b:73:4a:0c:a7:07:a9:12:37:d4:7b:bb:8f:a4:08:
4a:74:44:b3:20:5e:44:f0:7f:36:cb:75:d4:c9:18:
af:f1:fe:90:4b:56:09:d3:40:64:bd:e3:ec:52:05:
0c:45:35:5e:e4:09:19:8a:ff:e6:20:61:20:4b:d2:
4b:c2:71:64:99:dd:50:22:0b:7f:bb:3d:aa:c3:0a:
8a:7a:11:45:e6:d4:cf:12:d3:01:5d:14:d4:83:84:
53:be:d6:37:32:c8:04:9c:92:32:80:a6:b6:91:b0:
c4:3b:b5:22:77:85:02:98:5e:e5:66:80:e4:c6:53:
d7:cf:eb:c4:76:96:f9:ec:21:18:3f:d8:06:fc:9e:
92:fb:da:10:ae:ab:91:fc:3e:d1:2e:24:d8:16:6b:
57:7a:ab:b9:ce:f8:5d:3a:2a:97:17:64:49:4a:7c:
77:e0:6a:e6:98:2d:17:7b:02:18:44:91:27:c6:ac:
5b:6f:13:1f:e6:9e:40:10:3d:a3:30:52:69:13:db:
22:fa:8b:06:d7:31:94:d6:8c:d3:47:16:10:a4:2e:
3c:47:ba:c7:78:d0:92:52:de:3c:a3:2f:d3:6a:04:
43:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:49:C0:C8:66:23:92:2F:7A:F8:FC:AD:23:53:EE:5B:49:6C:8C:20
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:47:5c:23:ab:01:cf:b5:68:c0:ba:91:c0:d4:1b:a2:02:45:
b0:a8:32:8d:05:21:c3:0a:b6:73:37:44:9e:54:61:4c:6b:57:
53:36:0a:c0:af:c6:76:7c:71:a9:0e:ad:49:fa:2c:ee:e3:03:
08:a5:12:21:41:bd:66:ba:9c:68:1a:93:60:f0:b9:0b:bd:09:
2a:9b:b1:2d:6b:97:1e:84:e8:7c:58:13:d4:5d:d1:d8:58:ed:
44:a9:42:33:a4:3d:ef:f3:1d:11:c2:a4:fd:27:1e:37:d6:d8:
b6:0f:56:51:68:c8:b3:ec:9c:89:75:20:bd:11:b3:3b:26:b8:
21:48:bf:72:58:2d:d8:03:1c:e0:82:79:d0:91:7c:7f:63:f0:
0f:6c:30:8a:32:be:23:72:05:6e:2b:ad:cd:f1:c5:2c:49:bf:
7a:10:9e:e3:f9:f0:9c:42:af:46:41:b7:cc:fd:39:b8:4e:81:
95:1d:40:e4:56:56:65:9d:a8:63:e4:4f:73:b6:a9:c5:5c:e6:
cd:25:e9:24:db:43:bb:0f:22:98:b7:d1:90:6e:9a:05:7b:84:
f0:2b:cb:0c:ec:e8:1d:ed:68:83:58:3b:52:50:7c:6b:bb:31:
27:b3:be:22:16:fa:cd:6c:93:c0:34:ff:3c:f5:5a:f9:a2:83:
44:2f:4e:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU+q5cVTx8k969KmuyfylMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmN2YzMWJkNmQ5ODVlNDUyOTljMzFkMDUyY2E0YThlYmVm
NTU3OGIwHhcNMjYwNDE5MDYwMDU2WhcNMjYwNDIwMDYwMDU2WjAzMTEwLwYDVQQD
EyhiNTQ5YzBjODY2MjM5MjJmN2FmOGZjYWQyMzUzZWU1YjQ5NmM4YzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCjTKDm3RjrrkJZV37L3OISsbz/m
kMcPSDOO/6M7c0oMpwepEjfUe7uPpAhKdESzIF5E8H82y3XUyRiv8f6QS1YJ00Bk
vePsUgUMRTVe5AkZiv/mIGEgS9JLwnFkmd1QIgt/uz2qwwqKehFF5tTPEtMBXRTU
g4RTvtY3MsgEnJIygKa2kbDEO7Uid4UCmF7lZoDkxlPXz+vEdpb57CEYP9gG/J6S
+9oQrquR/D7RLiTYFmtXequ5zvhdOiqXF2RJSnx34GrmmC0XewIYRJEnxqxbbxMf
5p5AED2jMFJpE9si+osG1zGU1ozTRxYQpC48R7rHeNCSUt48oy/TagRDJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVJwMhmI5Ivevj8rSNT7ltJbIwgMB8GA1UdIwQY
MBaAFO9/Mb1tmF5FKZwx0FLKSo6+9VeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQt
YTc2M2RmM2FlZTZkLzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQtYTc2M2RmM2FlZTZk
LzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkdcI6sB
z7VowLqRwNQbogJFsKgyjQUhwwq2czdEnlRhTGtXUzYKwK/GdnxxqQ6tSfos7uMD
CKUSIUG9ZrqcaBqTYPC5C70JKpuxLWuXHoTofFgT1F3R2FjtRKlCM6Q97/MdEcKk
/SceN9bYtg9WUWjIs+yciXUgvRGzOya4IUi/clgt2AMc4IJ50JF8f2PwD2wwijK+
I3IFbiutzfHFLEm/ehCe4/nwnEKvRkG3zP05uE6BlR1A5FZWZZ2oY+RPc7apxVzm
zSXpJNtDuw8imLfRkG6aBXuE8CvLDOzoHe1og1g7UlB8a7sxJ7O+Ihb6zWyTwDT/
PPVa+aKDRC9O9Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:19:02 2026 by rpki-client