Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
File: 758eOCZUELPCqSLTFpxPKZUUGi0.mft (raw, json)
Hash identifier: etL9ArpfotvpHpEBFwptHezJRPHTHs2WZbWus2BEfTc=
Subject key identifier: 44:C6:6B:24:58:B2:09:02:16:8A:10:0B:A3:08:C9:B8:AC:7C:39:C1
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 019D9886B59C23E94D22D4AC65C2AE0E3A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
Manifest number: 18C7
Signing time: Thu 16 Apr 2026 23:00:58 +0000
Manifest this update: Thu 16 Apr 2026 23:00:58 +0000
Manifest next update: Fri 17 Apr 2026 23:00:58 +0000
Files and hashes: 1: 758eOCZUELPCqSLTFpxPKZUUGi0.crl (hash: YGjBvHSctrTFcTPOryRHJaPAuezaw+1ATJ/Rmrafa1E=)
2: 7afSaJeXTCollCHN92-j5ruro3g.roa (hash: U7fDJhL6Fntfyj/dBu5uc4DpkdkXOo48kYJYYcKfr3A=)
3: YbvuxNmEM9puc_pD09f_17c_b3Q.roa (hash: 0UC1RMCMv7LFWJ7ffAC3hAFesoaiWMs9jBqK2lLJPHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:b5:9c:23:e9:4d:22:d4:ac:65:c2:ae:0e:3a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: Apr 16 23:00:58 2026 GMT
Not After : Apr 17 23:00:58 2026 GMT
Subject: CN=44c66b2458b20902168a100ba308c9b8ac7c39c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:0e:8b:83:b3:49:90:c6:b4:cb:c4:45:0d:
ca:2e:d6:d5:c3:90:3f:58:e7:e6:3c:19:b6:26:73:
09:f7:9a:a7:40:c2:16:e1:d3:56:50:e9:93:f3:ee:
61:af:7b:b0:e5:c1:d8:2b:d7:80:86:db:e2:c1:61:
e5:30:41:32:68:b6:93:fb:c2:fa:45:9e:2e:d9:ea:
1b:a5:d2:9b:58:49:8c:4a:f5:64:52:0a:9e:91:47:
30:ab:08:2d:fb:71:ef:69:b1:e7:8b:17:45:63:96:
0e:f8:89:69:e4:93:97:d7:4e:56:b2:27:2a:e6:11:
df:52:88:c2:83:96:13:73:07:9c:6f:2d:42:d9:16:
6b:60:36:68:df:39:d0:e6:07:a2:b0:22:ec:e1:84:
69:ee:2b:ea:90:2f:12:9c:13:36:15:8b:57:09:9c:
4f:0e:52:5f:5d:4e:2d:5a:ed:b2:66:41:aa:8b:26:
c2:1f:79:67:c1:37:68:3c:0f:1a:69:c2:83:89:68:
33:20:1c:dc:87:62:06:04:08:d5:05:bb:5e:96:b5:
43:08:2f:a6:d5:dd:25:15:cf:8c:c5:1f:47:2f:db:
bf:1d:ae:2f:ec:ad:d7:f4:67:ee:1e:fa:4c:0a:01:
13:74:0d:eb:c0:16:3b:57:79:a1:c9:3c:1a:05:cf:
e1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C6:6B:24:58:B2:09:02:16:8A:10:0B:A3:08:C9:B8:AC:7C:39:C1
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ec:95:b3:aa:6e:9e:b8:2a:91:3b:5a:56:6b:45:f9:27:49:
67:ab:c6:82:2a:45:51:08:19:1e:31:51:ed:5a:e6:8d:36:9c:
d9:8f:c5:66:32:15:6c:bf:c7:25:c7:49:ec:e6:73:9d:f0:36:
a7:c1:4e:e6:3e:b0:0a:48:69:28:91:84:e4:5e:bc:4f:15:9f:
ee:08:77:d6:ea:df:ed:c2:a7:12:a0:e9:bf:a7:d7:eb:83:91:
2a:43:ab:ed:e3:62:cc:68:4d:9a:f8:d3:88:2b:fe:a9:a9:61:
6d:a9:7f:69:e5:d6:73:f6:65:a3:ce:ae:01:35:58:19:04:b6:
d0:bd:07:bd:30:ff:10:4b:af:1d:5e:da:53:06:93:14:c0:9b:
5b:cc:8b:b6:2d:9c:eb:9b:26:d3:38:b6:ca:e0:e6:85:ae:11:
bb:0e:fe:d8:12:da:f6:6f:4b:97:16:5a:60:45:c6:42:be:29:
21:3b:8d:48:c5:8e:ff:cd:f7:84:b6:61:f6:e5:ed:41:42:3a:
48:05:b4:fe:b5:12:00:e7:cc:bb:b4:fe:6e:ba:6c:d7:96:c4:
a9:74:c3:3e:b1:1e:ae:57:0e:dc:b4:4b:72:55:88:b0:4b:81:
16:fa:e0:9c:b3:b1:e6:ce:a7:1c:0e:65:8f:7d:b2:21:cd:77:
7f:64:0d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:47 2026 by rpki-client