Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
File: 738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json)
Hash identifier: Xd+os75+VkT+x0mH08g/KYubASSYIv25NqybYQ8cc0I=
Subject key identifier: 67:C3:58:A0:B4:12:83:31:5E:9B:04:EA:18:DD:EE:14:33:AD:AD:7F
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 01A0CD7E7C7AAE73BF2E11E4ADE310B44C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 09:00:13 +0000
Manifest this update: Wed 23 Sep 2026 09:00:13 +0000
Manifest next update: Thu 24 Sep 2026 09:00:13 +0000
Files and hashes: 1: 1hsgVZkjGiwPGwbT4Yu5mw_gR1E.roa (hash: sbJm7A7LKoBguraWEh+cEaoDEunVqRtivursvoz8Rkw=)
2: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: QN5rPd6NFB8DCwm4kVyTt+avwsf/cATg8mkVQqikgNg=)
3: uTawXit8aKEj4eVxiOZXv6mDUXQ.roa (hash: XkBO6tOwqDjqwxQC1w04z4HLKY8F+H0OZu2mmN1+iAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:7c:7a:ae:73:bf:2e:11:e4:ad:e3:10:b4:4c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Sep 23 09:00:13 2026 GMT
Not After : Sep 24 09:00:13 2026 GMT
Subject: CN=67c358a0b41283315e9b04ea18ddee1433adad7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:cf:c3:57:a1:f2:d8:07:82:30:83:d7:ed:
59:a2:a5:98:f2:17:2c:3c:2e:7c:84:af:15:d7:73:
0c:60:8c:ec:a2:ed:e3:2b:cf:ce:9e:65:3a:5f:41:
ee:2a:47:46:ef:23:e7:fe:89:fb:99:cf:3d:00:67:
4b:b8:40:0a:cb:cb:80:4d:d5:59:61:1d:e1:19:88:
98:5b:0f:0b:a4:fe:b0:a7:26:67:fa:d8:ed:f5:9a:
14:c1:e5:e7:8c:f3:44:c9:ec:21:81:6a:8d:2f:d9:
75:07:9f:4a:17:e2:d3:6e:62:0e:a3:44:f1:88:d5:
be:ce:97:a4:d1:43:d8:5b:02:42:4d:87:e8:7e:f0:
fb:b7:c7:76:8d:d4:3d:5b:c7:8a:00:e2:5a:69:b8:
c6:a3:10:57:11:95:ca:03:cb:d8:0b:23:06:80:e8:
ec:90:f2:0f:e3:63:15:e5:67:9a:dc:ac:3e:89:0d:
aa:c9:ae:f0:a2:28:ad:a2:6a:ff:29:f3:29:bc:3e:
f5:53:13:0e:13:c4:95:64:75:f5:50:8f:c2:4f:e2:
ad:c7:e1:e8:7c:f7:ec:7b:9e:08:8e:58:56:35:6c:
e8:be:2b:83:8c:db:ad:c3:83:ad:f4:18:1a:7b:f4:
2e:cb:f2:d2:0e:6f:04:73:0d:99:dd:94:84:47:61:
91:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C3:58:A0:B4:12:83:31:5E:9B:04:EA:18:DD:EE:14:33:AD:AD:7F
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f6:78:ed:a5:e6:7f:28:17:8e:bb:a1:92:3a:2c:76:f6:99:
19:f6:2b:52:eb:19:4e:81:8b:63:a7:9a:c2:d9:56:9d:c7:78:
c1:26:36:e6:79:e5:bf:ed:fe:04:db:eb:ec:fd:0b:18:6c:23:
6b:e8:2c:ea:be:e5:61:cc:3c:1b:3c:7c:21:62:05:ce:14:6d:
19:a8:7a:cc:43:dc:4e:40:bf:d4:f2:7f:ee:5f:a7:56:a5:7d:
8f:65:64:3a:33:d4:0e:cb:77:38:f3:e3:cd:22:1c:61:1f:d8:
86:eb:67:2a:03:6b:ff:d3:51:42:84:34:ce:bb:c2:32:16:13:
cf:35:25:7c:30:5b:8e:a1:60:6a:04:de:b9:76:c3:56:5d:ec:
65:18:16:ee:10:47:12:99:eb:34:bf:8c:10:c2:15:b5:5d:b8:
f5:dc:c9:20:c2:78:28:53:6f:12:41:e6:fc:98:f8:4a:28:34:
3f:88:53:76:b2:e8:9b:85:e8:f7:3d:f9:94:b2:01:47:a6:b7:
2d:68:fc:de:5d:e9:a6:29:23:57:81:6e:1b:9d:7a:e4:a3:78:
f2:f6:d4:ae:e1:c7:d6:18:b5:b5:78:63:5b:4c:6f:12:42:9a:
dd:fd:e6:85:ff:d0:9b:d5:65:da:4c:7d:0c:fb:8f:33:8f:b5:
82:39:3c:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNfnx6rnO/LhHkreMQtEwPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmN2YzMWJkNmQ5ODVlNDUyOTljMzFkMDUyY2E0YThlYmVm
NTU3OGIwHhcNMjYwOTIzMDkwMDEzWhcNMjYwOTI0MDkwMDEzWjAzMTEwLwYDVQQD
Eyg2N2MzNThhMGI0MTI4MzMxNWU5YjA0ZWExOGRkZWUxNDMzYWRhZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv83Pw1eh8tgHgjCD1+1ZoqWY8hcs
PC58hK8V13MMYIzsou3jK8/OnmU6X0HuKkdG7yPn/on7mc89AGdLuEAKy8uATdVZ
YR3hGYiYWw8LpP6wpyZn+tjt9ZoUweXnjPNEyewhgWqNL9l1B59KF+LTbmIOo0Tx
iNW+zpek0UPYWwJCTYfofvD7t8d2jdQ9W8eKAOJaabjGoxBXEZXKA8vYCyMGgOjs
kPIP42MV5Wea3Kw+iQ2qya7woiitomr/KfMpvD71UxMOE8SVZHX1UI/CT+Ktx+Ho
fPfse54IjlhWNWzoviuDjNutw4Ot9Bgae/Quy/LSDm8Ecw2Z3ZSER2GRzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfDWKC0EoMxXpsE6hjd7hQzra1/MB8GA1UdIwQY
MBaAFO9/Mb1tmF5FKZwx0FLKSo6+9VeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQt
YTc2M2RmM2FlZTZkLzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQtYTc2M2RmM2FlZTZk
LzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/Z47aXm
fygXjruhkjosdvaZGfYrUusZToGLY6eawtlWncd4wSY25nnlv+3+BNvr7P0LGGwj
a+gs6r7lYcw8Gzx8IWIFzhRtGah6zEPcTkC/1PJ/7l+nVqV9j2VkOjPUDst3OPPj
zSIcYR/YhutnKgNr/9NRQoQ0zrvCMhYTzzUlfDBbjqFgagTeuXbDVl3sZRgW7hBH
EpnrNL+MEMIVtV249dzJIMJ4KFNvEkHm/Jj4Sig0P4hTdrLom4Xo9z35lLIBR6a3
LWj83l3ppikjV4FuG5165KN48vbUruHH1hi1tXhjW0xvEkKa3f3mhf/Qm9Vl2kx9
DPuPM4+1gjk8dA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 17:36:54 2026 by rpki-client