Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
File: 718cQVLEpGBV9yy-hmqI1QDfmD8.mft (raw, json)
Hash identifier: hbznmA9D4KvdYGR46uCmZha95ZnohsnDgKtQBKAIklk=
Subject key identifier: 25:8E:4C:73:BC:7A:08:41:E4:C9:CA:8E:01:BF:CF:D0:94:9B:FC:3A
Authority key identifier: EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
Certificate issuer: /CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Certificate serial: 019FA9ABEACB85F25103CCB22D8D8617A0A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
Manifest number: 13CC
Signing time: Tue 28 Jul 2026 17:00:43 +0000
Manifest this update: Tue 28 Jul 2026 17:00:43 +0000
Manifest next update: Wed 29 Jul 2026 17:00:43 +0000
Files and hashes: 1: 718cQVLEpGBV9yy-hmqI1QDfmD8.crl (hash: z4Eat71lqgkzvE/UO8yWHf0BoNk9NEi4YrWa+wJFU8I=)
2: eqWOG9zATDE6vua6nCdpCj8d9tU.roa (hash: c/ceJ8EEg4SDQlrPP9l4Ag70f5QrPY73Z9EWNEH2NF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:ea:cb:85:f2:51:03:cc:b2:2d:8d:86:17:a0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Validity
Not Before: Jul 28 17:00:43 2026 GMT
Not After : Jul 29 17:00:43 2026 GMT
Subject: CN=258e4c73bc7a0841e4c9ca8e01bfcfd0949bfc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c9:f7:a6:84:39:83:0c:a0:6b:41:2f:4d:9a:
30:5b:d2:59:c8:02:2f:26:14:7a:73:12:3f:dd:50:
29:87:5e:a3:9e:c4:ae:c8:84:aa:cf:08:71:3c:30:
f4:3f:90:5c:0c:12:57:e9:20:4d:64:ec:10:d5:c5:
cd:69:fe:eb:67:da:1d:68:55:dd:1e:61:da:65:49:
52:96:88:be:d1:c9:99:c4:44:79:01:41:a0:ed:6a:
b8:d6:79:08:75:97:2b:d8:91:24:21:fe:aa:b9:54:
fa:e3:b4:df:68:f0:2f:e5:9e:b0:8e:b7:ea:88:e3:
80:07:c7:5a:02:d3:c2:b8:0d:12:77:f1:1a:3d:26:
13:f5:23:65:42:c8:54:df:f8:03:73:c2:00:bb:fb:
0d:2c:19:35:a0:28:23:1b:7e:ad:3d:86:18:ba:f5:
62:11:dc:bb:fd:84:b8:47:9f:56:a8:e5:51:27:94:
fe:f6:a0:fd:dd:f7:52:cd:54:58:38:08:f4:91:f4:
5c:78:2d:5c:29:1c:62:83:46:07:70:41:fb:4d:16:
5c:bc:89:cc:67:6f:1c:9a:2b:8c:85:54:60:d0:c4:
bd:32:73:fc:13:0e:ce:6d:85:3c:70:ab:9a:0f:f0:
74:0a:71:ac:9c:ed:39:67:68:69:3d:25:64:9f:92:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8E:4C:73:BC:7A:08:41:E4:C9:CA:8E:01:BF:CF:D0:94:9B:FC:3A
X509v3 Authority Key Identifier:
keyid:EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b8:45:a3:dc:73:a5:a3:ab:ac:42:83:9b:21:fa:e8:28:b2:
06:95:a5:e2:d8:49:3d:1c:b3:9a:02:46:05:0b:af:8f:b9:f9:
e2:11:0c:6f:36:cb:44:88:e4:a2:df:d4:bd:58:99:35:18:27:
66:14:0a:5b:21:db:08:53:9c:e6:86:c3:7b:59:c7:79:a1:5d:
3c:c8:b0:b8:ab:54:ca:fd:e2:3d:49:e3:25:8e:11:7c:d6:18:
aa:5d:59:7b:7f:0b:40:ba:7b:64:43:2b:cc:0b:42:26:d0:6d:
7b:4f:22:94:22:46:77:40:33:59:f0:24:ca:55:3a:0d:04:d8:
a3:92:08:85:62:12:07:80:2b:83:37:8f:37:b2:e2:c7:72:8f:
67:4b:41:14:07:e9:fa:00:86:4f:3b:97:9f:01:f7:68:04:84:
9b:3b:f5:7a:de:b2:a0:ae:d9:24:51:01:2d:d0:3a:be:f1:0f:
9a:25:c9:d4:bc:b5:f8:20:62:c8:51:69:63:46:66:e9:49:f2:
f4:d7:6a:11:63:86:98:75:2f:d4:c0:d7:a6:bf:e6:f0:47:22:
6f:20:0d:83:4f:4f:08:7f:d2:f0:52:2e:a0:81:4f:42:58:24:
cc:22:91:df:f2:c7:8a:32:1d:cc:74:4e:5e:ff:bb:4b:26:8a:
a3:48:25:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:46:03 2026 by rpki-client