Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
File: 75pS4318rMafjv78dTO8CxjLXmc.mft (raw, json)
Hash identifier: M+pbO3/g8B+pMUHBRIcLMzZ7PKM/XmaTYFZbH+ycLqE=
Subject key identifier: D5:A2:4E:C8:E2:20:AA:BD:D9:11:0E:75:2D:0B:44:93:70:25:71:17
Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
Certificate issuer: /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Certificate serial: 019E1CB54865D3E89D4F5F0CF75A06531A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
Manifest number: 0AC7
Signing time: Tue 12 May 2026 15:01:42 +0000
Manifest this update: Tue 12 May 2026 15:01:42 +0000
Manifest next update: Wed 13 May 2026 15:01:42 +0000
Files and hashes: 1: 75pS4318rMafjv78dTO8CxjLXmc.crl (hash: qb/K3tQMToYXHhXH8VKD/2kc0Q+FMm8o7ehDk+BMNWw=)
2: DGYXYWLKOeu5jzMoeESZW6Y77nY.roa (hash: NEwVDGeOxuD3CwmTZN1xHgpekj6E23kVoku+iTke+5k=)
3: h1r4ZumAOZuwV9fE7OfAlVgJv4A.roa (hash: boWg3/ilHJUif1jBV2hi//oKfIFrSzEio17woe1bvV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:48:65:d3:e8:9d:4f:5f:0c:f7:5a:06:53:1a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Validity
Not Before: May 12 15:01:42 2026 GMT
Not After : May 13 15:01:42 2026 GMT
Subject: CN=d5a24ec8e220aabdd9110e752d0b449370257117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:ee:e1:0e:d3:12:67:2c:6a:a4:14:29:8e:
ae:3f:a4:8d:b8:05:f7:eb:ad:3d:72:f6:44:b7:10:
06:cb:52:5c:9e:0c:38:da:14:43:8a:71:51:b0:f6:
88:00:81:b3:c0:c2:c6:0d:6c:1d:b2:b5:02:c5:bb:
d1:6b:ee:1b:aa:1a:7f:7c:70:70:0b:b1:d4:ef:ae:
10:38:ac:d6:48:df:78:18:83:c4:0b:e4:a3:8c:e1:
25:eb:cb:ba:5e:59:0a:ce:ec:99:ec:6e:93:4d:a9:
9d:39:47:33:76:6c:80:61:7e:6d:97:73:48:19:78:
49:f7:f3:33:1c:6d:81:2b:dc:d4:c6:ec:96:d7:ac:
87:87:41:81:ca:1d:c1:cb:b2:08:82:55:ad:ca:f3:
70:ff:31:7b:64:0a:5a:f1:a9:3d:d4:56:b3:b9:3f:
62:97:60:e0:a0:52:8f:2d:9a:4c:86:05:39:bc:c2:
bc:f7:ef:98:2c:57:80:e7:6f:7f:05:19:5d:d9:3e:
71:60:33:6e:94:34:7d:ec:55:7f:d1:ae:4b:01:0f:
61:3a:7b:44:e2:ff:95:54:d4:d0:d1:1c:a6:09:c4:
af:02:6f:da:ef:68:db:b6:32:67:78:86:28:c8:51:
39:99:b1:d1:b4:b9:c2:fc:b8:d3:fc:df:8e:a7:fa:
02:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A2:4E:C8:E2:20:AA:BD:D9:11:0E:75:2D:0B:44:93:70:25:71:17
X509v3 Authority Key Identifier:
keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8b:88:6e:59:3c:eb:ba:cc:0a:12:28:0f:4f:3f:43:23:bd:
c4:39:56:48:0a:5e:92:c9:fd:e6:d1:c8:70:23:dc:88:14:2e:
d0:cb:df:0b:bb:90:65:f6:e9:99:b6:80:7b:38:29:20:95:1a:
bd:9c:d2:1a:23:44:ce:65:55:d3:48:c1:71:c9:89:d0:59:11:
d3:b5:7a:5c:71:9c:47:db:a9:b6:90:4c:18:54:69:9b:c7:cb:
3b:9d:86:5d:c9:21:80:11:70:12:f5:d6:9f:cc:11:07:09:ca:
7d:de:6b:da:c7:9a:b8:b1:eb:57:16:7d:2d:0b:0a:db:cf:a9:
cd:e1:b9:2b:df:0a:c5:8c:e9:8b:30:a9:76:06:21:1c:4f:c7:
74:1f:e7:a2:1c:98:30:53:e1:9b:90:d5:75:f2:2f:8a:0a:60:
e9:70:a6:27:8d:80:ed:0d:2d:c8:15:47:f1:cc:66:ba:fe:e5:
2a:34:f8:0d:7f:45:d6:23:c5:07:98:61:a5:3f:3e:9b:a7:f1:
ee:20:67:f6:c4:67:21:97:d4:31:8c:65:bc:a5:17:c3:07:2b:
b4:39:f2:15:10:f4:c5:77:d0:93:13:96:0f:69:05:78:2d:f1:
1a:b3:42:03:98:5d:52:fc:f7:a5:3d:d7:b9:9a:e9:ab:cf:92:
e3:7d:af:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:51 2026 by rpki-client