Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
File: 75S8y9TC4P-PeqsEXhSjEfOy-f4.mft (raw, json)
Hash identifier: FOwk7lfMliV4ON6S7FRXgbNy5gKmyTTftWjxQIUJHzo=
Subject key identifier: 88:CB:5B:CB:D5:D8:41:4F:87:87:CC:8C:6D:80:24:DD:71:31:7F:AE
Authority key identifier: EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
Certificate issuer: /CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Certificate serial: 019CABDA08B760D960100D5B001683711691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
Manifest number: 0439
Signing time: Mon 02 Mar 2026 00:01:58 +0000
Manifest this update: Mon 02 Mar 2026 00:01:58 +0000
Manifest next update: Tue 03 Mar 2026 00:01:58 +0000
Files and hashes: 1: 75S8y9TC4P-PeqsEXhSjEfOy-f4.crl (hash: rUslGAV9Fk0yTJhmDIh5fLxfMd/I47VlNx+kQWVvYfQ=)
2: T402uwWdle2-wACzD9ONw9UX7Q0.roa (hash: qH2p5m4fwAtgkEGn5eHmdKfPUlYPjTmqTH+gzJaccXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:08:b7:60:d9:60:10:0d:5b:00:16:83:71:16:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Validity
Not Before: Mar 2 00:01:58 2026 GMT
Not After : Mar 3 00:01:58 2026 GMT
Subject: CN=88cb5bcbd5d8414f8787cc8c6d8024dd71317fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:aa:19:df:80:ed:ce:a8:d9:69:7f:e4:0c:3a:
c1:81:09:48:a9:4a:4e:24:6a:9e:1f:9d:30:76:b8:
f3:0d:54:e7:ca:2b:50:1c:13:40:e5:d5:52:93:4a:
e8:99:f6:54:4b:07:91:26:2d:a2:7c:db:8e:b5:0d:
dc:50:b8:6e:fa:a7:b8:fd:e7:10:53:2a:89:4e:e1:
52:af:e9:95:a8:ea:28:6e:22:1b:74:4d:53:cb:5e:
d0:d1:20:d3:f6:7f:0b:7a:cf:ba:8e:90:72:a5:67:
83:91:36:ee:25:f7:4a:13:84:16:b4:ac:d6:26:f0:
88:04:96:d1:37:ed:06:7b:c3:88:16:2d:bd:31:5b:
90:28:12:02:f5:1f:d6:83:37:7b:e4:b1:ae:3b:c6:
ed:04:a2:30:70:e6:a6:6d:10:21:6a:0b:a6:5a:ca:
83:d0:5e:24:cb:90:73:60:40:ea:52:36:f9:ff:d6:
6c:8c:83:6c:cd:78:d5:d6:bd:33:a5:a1:94:9a:8b:
e1:fc:f6:cd:d7:b3:40:0f:6d:ba:d7:76:c7:e4:6a:
e6:87:f6:af:2f:58:1e:48:7e:e0:1d:7f:7c:da:35:
53:0e:8b:f5:c7:52:86:48:a5:13:8c:02:e4:9a:0b:
13:a3:bb:eb:c5:af:83:18:3c:a8:13:c8:b1:fb:47:
30:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CB:5B:CB:D5:D8:41:4F:87:87:CC:8C:6D:80:24:DD:71:31:7F:AE
X509v3 Authority Key Identifier:
keyid:EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b7:31:eb:7a:f0:ba:c1:08:2d:34:4d:8b:14:fa:6b:5c:33:
1c:b1:f9:8c:88:a7:a6:14:f0:65:f0:5e:22:73:65:71:f6:9a:
b9:31:4a:93:82:38:f1:be:72:b1:19:d9:79:30:13:fe:db:10:
52:ff:4e:41:0e:83:1f:26:cf:97:d8:b3:cb:af:9a:75:37:9b:
9e:ab:18:b7:37:e9:0f:ce:08:85:5d:00:48:4b:d8:1b:e3:71:
03:f7:79:24:a7:3d:b1:5a:80:a9:fc:a6:eb:29:ae:bf:60:cb:
d4:bf:0e:8b:a9:fd:5e:c3:51:3d:eb:1b:09:9c:5b:b9:42:c2:
ea:80:22:a6:93:9a:2b:e8:8b:63:22:46:3a:1b:1a:c8:b4:31:
5a:62:72:b8:6a:2b:fe:40:37:66:68:8f:d5:32:69:f5:29:21:
7c:36:ef:a2:13:06:35:2e:4d:6c:cb:a1:ae:49:28:95:e8:7a:
ae:b3:9c:6f:63:45:a2:d3:ef:18:4a:cf:0f:0a:5a:f0:23:e5:
a4:31:07:41:a2:26:aa:ca:5e:c9:a4:d6:8a:04:a6:d9:fb:ad:
1f:08:69:54:85:80:6d:29:5d:b3:dc:36:4b:e1:e6:79:31:c3:
73:1d:62:29:39:5d:89:34:1f:bc:2d:2b:59:6f:99:ad:5f:f1:
d0:b5:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:36 2026 by rpki-client