Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
File: 73VRezFhoEd2JBMwFhQhdnmoJgg.mft (raw, json)
Hash identifier: WqnkFhKDfKYeSQjAhbp4iGp5QvnNUa+YkHNGtfRzWQQ=
Subject key identifier: A9:09:EF:75:18:6D:C9:3C:9B:D7:7A:23:5F:0B:F9:FB:AA:B3:6F:8B
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Certificate issuer: /CN=ef75517b3161a047762413301614217679a82608
Certificate serial: 019D26283E47DF0F59AA30F375EF3D7CC4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
Manifest number: 0773
Signing time: Wed 25 Mar 2026 18:01:04 +0000
Manifest this update: Wed 25 Mar 2026 18:01:04 +0000
Manifest next update: Thu 26 Mar 2026 18:01:04 +0000
Files and hashes: 1: 73VRezFhoEd2JBMwFhQhdnmoJgg.crl (hash: Lfh5EAM3gupjR0SvQHslXzQUtDhyx3Hi2d+Bs2db17k=)
2: 9b1WVB4SRbPnLJ7MMROFIOe7IyI.roa (hash: o6KKd6GFzp4x33O4H64EWtykpwPkOuUVM1rFQ860o14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:3e:47:df:0f:59:aa:30:f3:75:ef:3d:7c:c4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef75517b3161a047762413301614217679a82608
Validity
Not Before: Mar 25 18:01:04 2026 GMT
Not After : Mar 26 18:01:04 2026 GMT
Subject: CN=a909ef75186dc93c9bd77a235f0bf9fbaab36f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3f:97:48:56:42:8c:86:b1:c8:00:57:28:98:
a8:7b:f5:db:86:d2:1c:0d:61:3a:4e:3d:78:be:29:
15:40:4b:bb:13:6c:a6:25:f6:2b:d4:eb:82:6c:dd:
5c:ec:fe:54:a6:23:03:25:c0:99:22:6b:a8:4c:69:
0b:bf:58:75:b1:70:86:04:12:91:cd:af:9e:d7:aa:
86:37:fb:30:e1:7c:40:8f:e2:9c:75:32:20:e7:4c:
df:31:73:fe:31:96:87:81:cb:a3:2d:1d:0b:16:8b:
9d:72:89:52:73:de:cc:6e:e1:92:a6:8c:46:07:0e:
71:b9:9f:fb:05:6b:ec:10:11:9e:69:66:e3:1f:81:
22:60:05:65:2e:00:7b:37:1f:5c:de:cb:67:ee:45:
08:53:2d:14:a5:0f:aa:71:17:e9:7c:6a:93:7a:ec:
0c:fc:65:f9:b6:df:41:51:de:64:0d:87:fb:c1:bf:
1f:ed:64:4e:43:22:95:67:f2:d2:07:56:09:b1:b6:
0b:e3:86:34:53:55:3b:77:57:7e:a9:e6:ee:44:5f:
5c:52:73:08:84:9f:2a:98:78:3d:3e:73:4e:f8:8c:
9a:6b:0c:17:f2:99:2d:88:3d:05:25:43:d6:94:45:
e1:3b:5f:30:5a:7b:b4:11:07:74:b8:ba:26:cb:bb:
e8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:09:EF:75:18:6D:C9:3C:9B:D7:7A:23:5F:0B:F9:FB:AA:B3:6F:8B
X509v3 Authority Key Identifier:
keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2c:e2:da:c6:5b:02:ee:55:86:0e:bf:21:b1:d8:9e:76:ee:
8d:60:84:f9:d0:f0:ec:f1:6c:c3:26:9a:45:b5:c5:08:67:f3:
ce:06:2c:ac:1a:f2:4a:e2:44:49:2b:55:3b:c7:8a:6a:28:fb:
30:4d:d7:fc:a7:8f:64:52:46:ab:1d:f0:bd:2e:96:fd:20:0f:
fb:2a:16:1a:45:f8:12:fc:9e:2b:e6:ab:58:9a:74:f0:fe:86:
4b:bd:3b:7b:50:54:76:11:fb:e9:79:0c:6b:09:81:fd:0d:15:
1a:7c:ce:2f:5c:2b:37:1b:39:26:21:69:c6:7e:9e:63:8a:ce:
c9:1f:12:57:c8:84:3d:a6:8e:5e:bf:2d:ba:11:b0:b6:93:4c:
25:26:cd:e2:25:6a:45:fa:7b:79:70:1d:27:3c:20:83:7a:ce:
30:37:42:d7:2a:1a:37:a2:54:79:e1:02:b0:a4:bb:3c:7f:98:
41:ea:9e:f3:bc:3e:10:80:02:c1:4c:44:95:77:19:04:f0:0b:
b9:b8:09:b6:a8:83:b5:49:03:fd:a0:c5:03:2e:35:e2:48:f7:
7b:f8:65:38:2f:dd:7f:38:2e:28:0b:f9:a0:af:d6:f2:3c:3c:
f4:84:a3:77:cf:15:36:70:81:30:6d:71:f4:fb:2e:29:71:e8:
e6:6f:5f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:54 2026 by rpki-client