Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
File: 73VRezFhoEd2JBMwFhQhdnmoJgg.mft (raw, json)
Hash identifier: QRBgd9U9GqP5se0Pz0r/Yzar2b4ZeFfotp3BD7pKnbs=
Subject key identifier: 71:81:EC:A5:58:DB:AE:91:04:B7:7D:93:34:36:5C:FC:FF:4D:DF:4D
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Certificate issuer: /CN=ef75517b3161a047762413301614217679a82608
Certificate serial: 019CAC7E06F3F744A10B83AFFBB57445081E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
Manifest number: 0734
Signing time: Mon 02 Mar 2026 03:01:06 +0000
Manifest this update: Mon 02 Mar 2026 03:01:06 +0000
Manifest next update: Tue 03 Mar 2026 03:01:06 +0000
Files and hashes: 1: 73VRezFhoEd2JBMwFhQhdnmoJgg.crl (hash: gh7z32mluNUePn6UB8lLmkwMfpeJsO4jx10FYXMQXpk=)
2: 9b1WVB4SRbPnLJ7MMROFIOe7IyI.roa (hash: o6KKd6GFzp4x33O4H64EWtykpwPkOuUVM1rFQ860o14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:06:f3:f7:44:a1:0b:83:af:fb:b5:74:45:08:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef75517b3161a047762413301614217679a82608
Validity
Not Before: Mar 2 03:01:06 2026 GMT
Not After : Mar 3 03:01:06 2026 GMT
Subject: CN=7181eca558dbae9104b77d9334365cfcff4ddf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:3f:3b:a0:90:eb:73:a8:dc:92:b5:1d:1c:
1c:ff:4c:9a:76:6f:9f:1e:1b:ab:07:28:64:e8:28:
46:9a:79:65:8b:dd:33:98:b6:7c:83:25:e8:fd:62:
16:b8:b8:3d:e6:00:ef:2d:26:d4:e1:1f:20:8a:6c:
73:18:e0:8f:b0:e6:71:79:83:ab:9c:59:e1:5e:97:
1b:8f:19:b1:4c:4c:67:a7:88:46:ca:d3:39:52:40:
3d:b4:e8:c6:b8:b5:50:ed:cc:5f:24:58:59:f7:f5:
27:8b:d5:dc:d0:51:f1:04:18:d9:4f:cf:b0:92:e8:
4f:de:b6:83:b9:c8:11:8c:de:42:ad:04:0f:6a:fa:
6b:e4:d3:62:39:9b:f8:78:fb:0a:22:d1:b4:8b:41:
c4:c0:95:34:bd:ae:76:5e:47:d6:95:9f:6c:d8:ec:
0f:7d:e9:46:d0:74:f9:46:9f:6e:b4:1c:05:4f:3d:
20:a8:af:a9:4b:2d:a8:72:3c:59:fb:fd:17:64:28:
e5:3c:ae:1a:29:14:d1:f8:c9:ae:c1:98:0a:50:da:
49:68:6d:8f:12:6f:6a:f1:93:48:5c:a0:dc:e2:87:
5b:35:8f:f6:f5:8f:dd:cf:f7:83:1e:ab:25:48:26:
b9:08:94:8c:72:03:ef:34:54:7d:c1:06:ce:d5:73:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:81:EC:A5:58:DB:AE:91:04:B7:7D:93:34:36:5C:FC:FF:4D:DF:4D
X509v3 Authority Key Identifier:
keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:47:29:1e:b3:7b:3f:7e:fa:64:7c:1b:d4:f1:42:ba:61:64:
47:e7:0f:e6:51:ea:8e:9f:0d:f1:e5:4b:c8:38:01:b8:94:d4:
09:6b:47:3d:8e:9b:ed:12:0e:22:e6:63:a8:ce:a9:33:de:cd:
98:6c:a9:30:08:01:bd:98:10:2f:48:38:34:48:98:6b:18:09:
87:33:1f:66:64:2f:45:e5:71:aa:13:2c:85:62:4d:1d:c9:80:
a5:34:29:fa:1d:83:f0:4f:f3:2d:39:0f:97:28:87:6d:dc:c7:
29:08:d7:60:b7:56:fd:9c:ff:c8:02:be:e6:34:24:d7:83:de:
df:ff:e2:1f:11:f0:45:d7:81:fe:45:d2:65:31:7f:7f:2e:e0:
d8:8d:c6:da:62:a8:db:2b:21:4e:ab:be:17:9d:e0:5a:c3:2e:
31:6d:68:f9:31:b4:bb:25:08:cc:29:e5:29:57:bd:62:37:8d:
19:a8:9a:c6:4e:15:4f:16:66:ff:c6:0e:33:89:96:5c:45:84:
3b:5b:d1:5c:00:73:4e:2b:ae:19:ed:8e:ab:d3:dd:e6:d7:95:
52:bb:d6:4a:b0:6f:28:5f:28:6b:40:28:b3:18:15:0e:62:eb:
65:f1:b7:4c:6c:7d:13:5b:f8:85:ff:fb:e7:f2:da:79:07:a5:
dd:cc:d7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:15:43 2026 by rpki-client