Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
File: 75pS4318rMafjv78dTO8CxjLXmc.mft (raw, json)
Hash identifier: NQGPFI9Mrzn9IKVE575+AhqR64kJ/qj0wIdH6dQv0Ig=
Subject key identifier: A1:16:20:26:40:3E:4B:53:B8:86:7B:B9:C9:44:52:67:02:8A:67:6C
Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
Certificate issuer: /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Certificate serial: 019D9B50E21B5306CCCC5B43DCDEF62126DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
Manifest number: 0A84
Signing time: Fri 17 Apr 2026 12:01:02 +0000
Manifest this update: Fri 17 Apr 2026 12:01:02 +0000
Manifest next update: Sat 18 Apr 2026 12:01:02 +0000
Files and hashes: 1: 75pS4318rMafjv78dTO8CxjLXmc.crl (hash: OJuZJR4aqS6tCJv5RPB6DLKt5xOtqZkU+cduvEP73gI=)
2: DGYXYWLKOeu5jzMoeESZW6Y77nY.roa (hash: NEwVDGeOxuD3CwmTZN1xHgpekj6E23kVoku+iTke+5k=)
3: h1r4ZumAOZuwV9fE7OfAlVgJv4A.roa (hash: boWg3/ilHJUif1jBV2hi//oKfIFrSzEio17woe1bvV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:e2:1b:53:06:cc:cc:5b:43:dc:de:f6:21:26:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Validity
Not Before: Apr 17 12:01:02 2026 GMT
Not After : Apr 18 12:01:02 2026 GMT
Subject: CN=a1162026403e4b53b8867bb9c9445267028a676c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:1b:bb:49:fc:ba:26:3a:8c:84:cd:0e:36:
f6:33:3f:ff:4d:55:8e:0e:c7:89:7b:23:9c:11:88:
4a:e6:a0:86:89:84:7a:3d:4e:c3:a1:c2:81:2c:15:
e5:db:21:3e:dc:a7:9f:34:a6:b6:0b:6e:d6:ee:23:
a7:00:c4:9d:71:43:1e:2c:cf:e4:bb:2a:f4:b6:0c:
b5:52:b6:f5:a9:35:b7:a3:4d:0d:63:f1:9c:04:67:
68:5c:e2:37:2d:b3:25:8b:d5:4f:fd:ce:96:71:d0:
ea:b6:1d:1a:b2:d4:96:de:a0:29:f3:05:2e:6f:e3:
87:21:84:14:35:d5:2c:4c:91:d9:4a:20:f2:3f:1d:
1c:d9:e3:4d:fe:07:9b:e7:41:90:32:4c:fc:cc:00:
96:65:7d:9e:cc:a7:6b:12:5f:b5:f9:ee:37:b2:8c:
43:63:dc:8b:e2:16:fe:f9:09:56:fb:17:1c:5c:50:
63:26:ae:3c:26:71:4c:c1:f7:3a:fa:91:b2:28:59:
6f:ce:5e:1e:f0:79:81:1e:1b:9d:a3:31:9a:0f:99:
de:5b:e4:1b:a2:d6:aa:9b:38:e0:b2:50:26:4d:35:
fe:95:fd:0c:d4:46:97:92:eb:72:57:f8:0a:66:b6:
62:09:6b:1c:29:f1:cd:3e:9e:f8:6a:1c:ee:35:36:
aa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:16:20:26:40:3E:4B:53:B8:86:7B:B9:C9:44:52:67:02:8A:67:6C
X509v3 Authority Key Identifier:
keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7e:30:12:e1:c2:21:61:e6:a9:80:8a:b0:66:9f:12:99:de:
59:1f:7c:41:ac:2b:21:5b:5e:9b:b4:f0:8d:a7:77:a9:24:eb:
e7:b7:6b:19:8e:7f:7e:da:c5:51:df:35:55:d1:85:7e:ea:1f:
7d:90:3e:5d:20:d6:aa:72:a9:0b:18:45:5f:5c:38:b1:29:24:
3d:e9:95:a4:cc:f5:06:56:33:89:12:99:d1:62:e6:70:0c:fe:
6f:d0:06:7a:7d:3b:14:fc:ee:41:1d:54:57:79:ea:10:60:b7:
18:1b:ac:c1:44:a3:dc:ce:74:2d:64:0f:fa:a2:34:ac:8e:8b:
fb:74:0f:46:0f:64:8c:25:c3:16:94:33:75:a3:fc:1e:97:7d:
9d:88:58:83:b2:e0:5e:80:0f:d3:f3:62:c0:02:82:fe:9b:4f:
28:02:7a:6c:cd:9f:d4:57:9e:ee:49:f3:87:1e:44:2b:bb:85:
70:ad:25:41:fc:49:e4:6e:f4:86:75:2b:81:b4:05:ef:5e:00:
0a:fd:81:d9:3a:39:11:37:04:a5:96:73:01:60:00:6d:57:a9:
59:b8:8c:6a:e1:c2:b2:0f:51:6d:d0:45:0a:3c:f4:cd:f3:b9:
7c:c9:5c:eb:41:d9:a5:0e:28:60:d6:47:19:9f:0c:75:f9:8d:
bd:3a:e5:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUOIbUwbMzFtD3N72ISbeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmOWE1MmUzN2Q3Y2FjYzY5ZjhlZmVmYzc1MzNiYzBiMThj
YjVlNjcwHhcNMjYwNDE3MTIwMTAyWhcNMjYwNDE4MTIwMTAyWjAzMTEwLwYDVQQD
EyhhMTE2MjAyNjQwM2U0YjUzYjg4NjdiYjljOTQ0NTI2NzAyOGE2NzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYAbu0n8uiY6jITNDjb2Mz//TVWO
DseJeyOcEYhK5qCGiYR6PU7DocKBLBXl2yE+3KefNKa2C27W7iOnAMSdcUMeLM/k
uyr0tgy1Urb1qTW3o00NY/GcBGdoXOI3LbMli9VP/c6WcdDqth0astSW3qAp8wUu
b+OHIYQUNdUsTJHZSiDyPx0c2eNN/geb50GQMkz8zACWZX2ezKdrEl+1+e43soxD
Y9yL4hb++QlW+xccXFBjJq48JnFMwfc6+pGyKFlvzl4e8HmBHhudozGaD5neW+Qb
otaqmzjgslAmTTX+lf0M1EaXkutyV/gKZrZiCWscKfHNPp74ahzuNTaqWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEWICZAPktTuIZ7uclEUmcCimdsMB8GA1UdIwQY
MBaAFO+aUuN9fKzGn47+/HUzvAsYy15nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzVwUzQzMThyTWFmanY3OGRUTzhDeGpMWG1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80YzZkODgtZjgyOC00M2Y5LTk2NDEt
YjFhOWJkMjg2NTFlLzEvNzVwUzQzMThyTWFmanY3OGRUTzhDeGpMWG1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80YzZkODgtZjgyOC00M2Y5LTk2NDEtYjFhOWJkMjg2NTFl
LzEvNzVwUzQzMThyTWFmanY3OGRUTzhDeGpMWG1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARH4wEuHC
IWHmqYCKsGafEpneWR98QawrIVtem7Twjad3qSTr57drGY5/ftrFUd81VdGFfuof
fZA+XSDWqnKpCxhFX1w4sSkkPemVpMz1BlYziRKZ0WLmcAz+b9AGen07FPzuQR1U
V3nqEGC3GBuswUSj3M50LWQP+qI0rI6L+3QPRg9kjCXDFpQzdaP8Hpd9nYhYg7Lg
XoAP0/NiwAKC/ptPKAJ6bM2f1Fee7knzhx5EK7uFcK0lQfxJ5G70hnUrgbQF714A
Cv2B2To5ETcEpZZzAWAAbVepWbiMauHCsg9RbdBFCjz0zfO5fMlc60HZpQ4oYNZH
GZ8MdfmNvTrlOA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:16:51 2026 by rpki-client