Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
File: 758eOCZUELPCqSLTFpxPKZUUGi0.mft (raw, json)
Hash identifier: UrizpS3zCVx/8nqbAkiF6U4zmEWjfjOS32+6jyujo1Q=
Subject key identifier: 4B:BD:F8:FD:63:C4:B8:9C:DC:20:BA:A1:61:43:62:63:FB:52:17:67
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 019FA90738E6CEFE9830891C29850C0FE776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 14:00:50 +0000
Manifest this update: Tue 28 Jul 2026 14:00:50 +0000
Manifest next update: Wed 29 Jul 2026 14:00:50 +0000
Files and hashes: 1: 758eOCZUELPCqSLTFpxPKZUUGi0.crl (hash: Uso1xGm7EZZiajXnXgFunDaC6P5jkYd2k9SMp5PQoZs=)
2: YbvuxNmEM9puc_pD09f_17c_b3Q.roa (hash: 0UC1RMCMv7LFWJ7ffAC3hAFesoaiWMs9jBqK2lLJPHk=)
3: wlbCQCbrUI3SxwZA5HNQA0HGepg.roa (hash: zmsKMPohzvqVP0YR0GOcciBU4GmXvtoj3886J28B8bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:38:e6:ce:fe:98:30:89:1c:29:85:0c:0f:e7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: Jul 28 14:00:50 2026 GMT
Not After : Jul 29 14:00:50 2026 GMT
Subject: CN=4bbdf8fd63c4b89cdc20baa161436263fb521767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:db:43:c5:ea:4f:61:d6:a0:9d:97:51:be:
c0:ea:38:7f:2d:8a:c7:c3:3f:c8:34:d4:f2:8e:ae:
2a:17:da:c9:21:73:c0:df:49:42:cb:01:86:b2:ee:
5b:b6:d0:30:41:69:e7:10:31:8f:10:e8:58:8b:e7:
94:25:76:8d:98:c3:a5:04:6f:fb:d8:74:4c:57:16:
56:6a:0e:b0:98:ff:8b:90:61:a8:3f:e0:4e:78:4a:
d2:9a:20:27:56:09:b5:5e:9f:24:3e:91:24:de:b6:
7a:f3:05:d6:1c:24:5c:64:fc:4a:7e:1b:99:f6:d1:
39:28:dc:02:53:56:e0:23:fc:2b:70:f5:ac:39:45:
e5:f2:73:a5:4b:bd:6e:c8:a8:f0:36:21:f2:a6:28:
fa:a3:0c:4e:32:14:cf:91:ac:a5:21:c7:49:aa:36:
5d:98:f6:6b:7e:0c:52:0b:a3:61:c8:7e:3c:87:74:
42:ce:d2:bf:92:42:4f:12:68:90:b6:fa:f2:60:fb:
67:a2:1a:2a:e3:1f:8f:69:8e:dc:1e:23:4e:58:1f:
3a:d9:36:71:f3:37:d2:29:c4:1f:20:2c:22:44:a1:
f3:eb:2b:be:b1:89:06:66:f2:46:b9:96:c6:94:95:
2a:36:46:63:c3:25:a0:fb:5f:24:d3:07:69:9a:5c:
a9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BD:F8:FD:63:C4:B8:9C:DC:20:BA:A1:61:43:62:63:FB:52:17:67
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c6:b0:cd:20:af:45:42:7a:b5:ba:dd:61:2b:41:cf:86:f9:
7e:2b:47:ee:34:d8:53:c4:69:9b:8a:a7:3a:9e:7a:dd:fa:a9:
08:6a:71:6f:3f:0e:b1:0c:ad:3a:79:08:08:9a:90:e3:61:22:
34:7b:13:3c:51:e3:4e:88:1f:72:e3:5a:33:c0:c2:c8:fc:dc:
55:8a:9a:9d:6a:9c:1c:1b:f2:3f:a7:2b:f9:de:d4:ae:5c:4f:
79:57:21:ae:60:08:2c:86:63:68:ea:f6:d7:1e:85:0a:13:18:
da:4c:90:0c:b5:89:7c:ba:68:b5:42:05:69:52:d7:45:e1:0a:
13:b3:a8:89:d0:3d:59:1e:0f:e3:b7:04:67:04:b8:88:ee:ed:
9b:f7:a4:a8:27:12:82:fe:0e:38:0b:a3:9a:20:14:71:c3:b3:
48:a2:b1:40:34:e0:48:b6:33:0c:91:08:dc:bd:ea:f6:fc:45:
fb:ca:b8:f6:e5:65:a8:4c:02:f1:03:91:da:0b:2b:35:7a:7e:
66:f8:7a:5b:fd:1d:e8:eb:44:ce:7a:8e:b3:89:b7:9f:61:86:
b8:40:cc:21:4e:0a:c2:78:cd:26:08:6f:8f:4d:bf:d9:cc:78:
4c:87:df:3e:80:34:01:0f:bd:7d:29:27:b4:8c:0b:fd:d8:8b:
13:c9:cc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:42 2026 by rpki-client