Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
File: 75pS4318rMafjv78dTO8CxjLXmc.mft (raw, json)
Hash identifier: jqSJ+7v7VlApBMyFXHdjdznFemjYSxOOnl9BXxy7uXM=
Subject key identifier: B8:6E:F6:66:CB:DF:99:07:AB:68:82:65:04:D3:55:09:23:72:2D:25
Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
Certificate issuer: /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Certificate serial: 019CABD98E04E91A67E6FD5685DD62EC09B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
Manifest number: 0A08
Signing time: Mon 02 Mar 2026 00:01:27 +0000
Manifest this update: Mon 02 Mar 2026 00:01:27 +0000
Manifest next update: Tue 03 Mar 2026 00:01:27 +0000
Files and hashes: 1: 75pS4318rMafjv78dTO8CxjLXmc.crl (hash: PXItMzM09Yj8q7pzmsGgyfoKiNSX1JQxcPq0U/3kB2E=)
2: DGYXYWLKOeu5jzMoeESZW6Y77nY.roa (hash: NEwVDGeOxuD3CwmTZN1xHgpekj6E23kVoku+iTke+5k=)
3: h1r4ZumAOZuwV9fE7OfAlVgJv4A.roa (hash: boWg3/ilHJUif1jBV2hi//oKfIFrSzEio17woe1bvV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:8e:04:e9:1a:67:e6:fd:56:85:dd:62:ec:09:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Validity
Not Before: Mar 2 00:01:27 2026 GMT
Not After : Mar 3 00:01:27 2026 GMT
Subject: CN=b86ef666cbdf9907ab68826504d3550923722d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:58:89:a8:e4:c6:88:8d:fb:67:5a:93:aa:95:
37:8e:c5:0a:cb:42:0f:c7:a5:8e:19:1c:08:37:57:
36:10:d5:0d:55:75:81:94:a7:ca:dc:3d:05:ab:63:
40:f7:23:dc:4f:15:19:80:25:b1:6f:75:f1:3d:bb:
fb:43:72:ed:a6:a0:aa:c8:9d:bd:df:d0:17:9a:a0:
97:23:1c:1b:db:5c:ef:79:63:4f:1d:44:dd:8b:10:
f6:39:d9:3a:7b:32:0d:bf:24:84:c5:fd:91:64:af:
7e:6f:c8:23:04:ae:13:8c:d7:31:67:1a:a4:05:b1:
8e:30:b8:6c:6f:41:a6:fe:1f:e3:03:4e:e5:5c:f9:
1e:52:6f:56:f3:bf:60:bd:06:3f:b4:ca:be:08:8c:
cd:7b:fa:18:62:e2:7d:d0:7d:f7:49:61:01:99:89:
ff:a7:d1:f2:f8:ba:45:67:50:a1:04:da:24:fe:35:
e4:ac:6b:d7:45:46:04:80:58:e8:c9:b3:35:68:12:
c6:3e:ac:69:ad:61:e4:dc:89:e9:6d:0b:eb:e5:06:
a7:53:67:75:cf:f5:c5:bd:5e:94:d0:c7:2a:c8:14:
0e:31:3e:37:2a:3e:cd:99:c9:47:ba:fa:e4:54:d0:
6b:e5:bb:59:e4:5e:5e:bd:95:24:52:b5:36:aa:77:
8e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6E:F6:66:CB:DF:99:07:AB:68:82:65:04:D3:55:09:23:72:2D:25
X509v3 Authority Key Identifier:
keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:81:1f:a7:0b:fd:87:ee:e7:83:b7:78:57:65:52:44:d7:3d:
c6:b5:02:70:ca:9c:36:c4:de:77:06:3e:f1:3d:a2:f8:05:7d:
85:04:88:7e:2b:1c:e6:6e:89:3e:2b:61:6f:27:87:c9:28:f6:
fe:e7:8e:78:1c:1f:66:b5:64:eb:3c:04:b3:ba:34:30:ab:8d:
2d:a3:04:57:1c:85:b7:63:ce:cd:af:f2:87:1e:8d:c5:eb:4f:
55:96:6a:c9:ba:8f:e9:0f:9f:04:78:5b:a3:c5:1a:2f:0b:f2:
5b:cd:33:f8:8c:53:e8:60:b8:2f:b3:3a:41:dd:e0:e0:8f:15:
51:9b:bd:2e:fb:c5:2b:d6:c8:fe:4d:da:83:58:27:f8:72:03:
60:1e:15:28:58:c9:22:24:f3:0c:99:1d:a8:7a:60:e1:68:bb:
5b:8d:7b:57:ad:c2:4d:15:f7:7a:96:d0:d9:25:8a:3f:44:28:
4d:38:24:e0:f4:2e:2d:69:c6:48:55:ac:be:f8:59:bc:23:d1:
e6:1f:4c:94:6a:c1:23:de:bd:f2:bf:6e:29:05:bd:c4:21:22:
01:90:f7:7a:41:6b:f5:09:b0:8a:4e:e6:1f:a1:13:91:82:a3:
45:98:85:8e:ff:c0:93:3c:6e:b0:cd:c7:07:2c:e5:53:dd:59:
15:ac:f2:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Y4E6Rpn5v1Whd1i7AmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmOWE1MmUzN2Q3Y2FjYzY5ZjhlZmVmYzc1MzNiYzBiMThj
YjVlNjcwHhcNMjYwMzAyMDAwMTI3WhcNMjYwMzAzMDAwMTI3WjAzMTEwLwYDVQQD
EyhiODZlZjY2NmNiZGY5OTA3YWI2ODgyNjUwNGQzNTUwOTIzNzIyZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11iJqOTGiI37Z1qTqpU3jsUKy0IP
x6WOGRwIN1c2ENUNVXWBlKfK3D0Fq2NA9yPcTxUZgCWxb3XxPbv7Q3LtpqCqyJ29
39AXmqCXIxwb21zveWNPHUTdixD2Odk6ezINvySExf2RZK9+b8gjBK4TjNcxZxqk
BbGOMLhsb0Gm/h/jA07lXPkeUm9W879gvQY/tMq+CIzNe/oYYuJ90H33SWEBmYn/
p9Hy+LpFZ1ChBNok/jXkrGvXRUYEgFjoybM1aBLGPqxprWHk3InpbQvr5QanU2d1
z/XFvV6U0McqyBQOMT43Kj7NmclHuvrkVNBr5btZ5F5evZUkUrU2qneOpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhu9mbL35kHq2iCZQTTVQkjci0lMB8GA1UdIwQY
MBaAFO+aUuN9fKzGn47+/HUzvAsYy15nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzVwUzQzMThyTWFmanY3OGRUTzhDeGpMWG1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80YzZkODgtZjgyOC00M2Y5LTk2NDEt
YjFhOWJkMjg2NTFlLzEvNzVwUzQzMThyTWFmanY3OGRUTzhDeGpMWG1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80YzZkODgtZjgyOC00M2Y5LTk2NDEtYjFhOWJkMjg2NTFl
LzEvNzVwUzQzMThyTWFmanY3OGRUTzhDeGpMWG1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYEfpwv9
h+7ng7d4V2VSRNc9xrUCcMqcNsTedwY+8T2i+AV9hQSIfisc5m6JPithbyeHySj2
/ueOeBwfZrVk6zwEs7o0MKuNLaMEVxyFt2POza/yhx6NxetPVZZqybqP6Q+fBHhb
o8UaLwvyW80z+IxT6GC4L7M6Qd3g4I8VUZu9LvvFK9bI/k3ag1gn+HIDYB4VKFjJ
IiTzDJkdqHpg4Wi7W417V63CTRX3epbQ2SWKP0QoTTgk4PQuLWnGSFWsvvhZvCPR
5h9MlGrBI9698r9uKQW9xCEiAZD3ekFr9Qmwik7mH6ETkYKjRZiFjv/AkzxusM3H
ByzlU91ZFazytg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:00 2026 by rpki-client