Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
File: 758eOCZUELPCqSLTFpxPKZUUGi0.mft (raw, json)
Hash identifier: hwhx6PRD2piC8expJ/YGYOwt8S6YFadHeDMVNsmUUaY=
Subject key identifier: 53:D8:C8:41:21:31:0F:B7:D5:76:16:D4:DC:03:F3:03:7C:AE:1C:18
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 01A0D45DA7BDEF78CA5B34411311CB724E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
Manifest number: 1A74
Signing time: Thu 24 Sep 2026 17:01:42 +0000
Manifest this update: Thu 24 Sep 2026 17:01:42 +0000
Manifest next update: Fri 25 Sep 2026 17:01:42 +0000
Files and hashes: 1: 758eOCZUELPCqSLTFpxPKZUUGi0.crl (hash: TmJuaSlNtCyIZ+9Kfk6s0Jsc0oNRJH//VTXBC7sKBpI=)
2: YbvuxNmEM9puc_pD09f_17c_b3Q.roa (hash: 0UC1RMCMv7LFWJ7ffAC3hAFesoaiWMs9jBqK2lLJPHk=)
3: wlbCQCbrUI3SxwZA5HNQA0HGepg.roa (hash: zmsKMPohzvqVP0YR0GOcciBU4GmXvtoj3886J28B8bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:a7:bd:ef:78:ca:5b:34:41:13:11:cb:72:4e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: Sep 24 17:01:42 2026 GMT
Not After : Sep 25 17:01:42 2026 GMT
Subject: CN=53d8c84121310fb7d57616d4dc03f3037cae1c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cd:0b:07:4d:15:eb:45:a1:5a:1f:31:0c:40:
10:3b:b8:26:83:4d:ae:e7:36:3c:9f:37:14:5d:98:
a9:c1:b1:10:be:6e:df:d6:ff:14:dd:30:8a:e0:29:
1f:11:ea:e1:9a:11:fe:9c:82:7a:7a:ff:d9:29:f5:
89:d9:35:a6:7e:d2:71:97:5f:21:b6:e3:0f:0a:06:
00:4e:ef:c0:c6:4f:48:3b:5e:98:b9:49:2a:41:a3:
8f:2d:9a:88:d9:79:bd:6c:b3:05:bb:97:c5:f9:74:
5c:a6:87:54:3b:df:a8:04:72:4f:32:6b:42:47:1d:
52:85:1f:c6:a3:3b:48:92:41:10:d0:f0:bd:30:fa:
74:d8:6c:92:90:b6:6a:9e:fe:90:aa:30:e6:f3:91:
03:df:40:70:bd:e0:a5:dc:f4:fc:a4:8e:0a:13:8e:
a3:8e:b0:82:68:a5:27:4c:60:b7:9b:7a:2e:28:87:
a8:2b:9d:05:01:a4:c9:1c:55:56:5a:75:0c:f3:bb:
2e:74:5a:01:07:bd:a2:6c:14:de:64:89:a0:dd:0d:
f0:1c:5e:a3:b6:eb:ab:0b:33:9d:f1:5f:4e:23:d6:
79:ac:67:3d:fa:5a:88:47:46:eb:1e:78:20:90:2f:
fe:2f:c7:61:84:a1:df:73:47:ca:1a:11:a0:43:fb:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D8:C8:41:21:31:0F:B7:D5:76:16:D4:DC:03:F3:03:7C:AE:1C:18
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:88:71:30:ee:01:56:5d:fa:88:44:d7:d7:d1:e9:21:f8:b2:
44:c1:3e:ee:b6:08:3f:fc:5a:ca:2f:c3:5f:9a:ca:2a:5c:cc:
72:6b:5f:8e:79:80:72:ea:75:2b:09:de:76:44:7b:e6:81:c8:
b0:78:18:66:76:04:8c:d1:cc:ac:5f:fc:9d:ed:c5:95:74:47:
5f:db:34:f1:d6:60:b0:e3:b6:46:22:94:11:b8:40:f4:67:84:
4b:ee:f4:b4:11:74:6e:13:a4:6d:76:15:17:98:71:30:5d:9d:
2d:d9:23:e9:a2:00:7d:e2:08:e1:ce:18:a7:ea:bd:9a:43:32:
44:90:ba:31:0b:a0:8d:62:c1:6e:40:4c:fc:b6:27:69:e5:e2:
aa:cb:b2:5c:b6:a6:dc:6a:b6:b7:2b:65:e1:e1:78:83:06:67:
48:19:43:4f:2d:bf:73:b0:9a:88:48:b4:d7:a8:23:0b:5c:af:
87:90:65:ba:ca:6a:9d:a8:47:d9:a9:35:47:8f:8c:39:63:53:
04:18:20:6d:b2:cc:d4:29:71:63:a4:48:66:dc:03:c8:a7:8d:
00:f5:b1:32:00:f6:e7:1a:ed:a3:79:b9:2a:69:9d:b6:95:07:
6c:e0:6f:fd:95:62:c6:de:23:fa:2b:37:d8:af:d4:f0:b7:66:
10:91:21:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:07:35 2026 by rpki-client