Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
File: 758eOCZUELPCqSLTFpxPKZUUGi0.mft (raw, json)
Hash identifier: wWbjNnb8E5cdsfeKhumDWn+0LoaDSKBO6r4+3wen7tE=
Subject key identifier: 47:BB:6C:A7:1A:C6:E4:6A:72:BC:6C:06:92:79:4C:28:25:CA:66:71
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 019D265FA8E60A91EB8914518B68112DA2A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 19:01:36 +0000
Manifest this update: Wed 25 Mar 2026 19:01:36 +0000
Manifest next update: Thu 26 Mar 2026 19:01:36 +0000
Files and hashes: 1: 758eOCZUELPCqSLTFpxPKZUUGi0.crl (hash: IVlJJZVJXwJc2SGXZuMukXYqB9akP2IKOdkzD14EWLI=)
2: 7afSaJeXTCollCHN92-j5ruro3g.roa (hash: U7fDJhL6Fntfyj/dBu5uc4DpkdkXOo48kYJYYcKfr3A=)
3: c7SmcG0jQGOmeSqLLR4tVTGoYm4.roa (hash: O+x91RGxwKM6vifoTp5GEC0/Tzkm1Fv8zuwXUgnHXl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:a8:e6:0a:91:eb:89:14:51:8b:68:11:2d:a2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: Mar 25 19:01:36 2026 GMT
Not After : Mar 26 19:01:36 2026 GMT
Subject: CN=47bb6ca71ac6e46a72bc6c0692794c2825ca6671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e2:77:9b:2e:5a:1c:05:1e:a7:87:fe:cb:89:
00:26:c1:8c:fe:ed:f0:fd:9d:b0:a9:38:95:1a:5a:
de:50:29:db:6f:33:08:c9:df:17:0b:ce:d7:68:71:
a5:ab:a9:ed:2e:d4:7f:f3:85:4c:de:bf:fd:32:c6:
86:db:9d:1d:90:e0:16:91:40:47:17:4b:f4:f9:9c:
7b:52:c5:cf:a1:dc:f5:b9:34:a3:6c:1a:6b:c7:c4:
2a:04:4f:76:c2:e5:8a:50:39:87:0e:1e:38:67:3c:
66:5b:c9:55:24:40:07:4b:d3:cf:f8:86:3d:bc:78:
e6:c6:54:29:09:bb:15:1e:17:61:68:35:b6:63:a9:
9c:d4:a9:1a:9c:3f:44:04:c4:0a:f9:b0:06:43:49:
61:a8:4a:47:53:1d:e6:44:cb:6d:8a:c5:aa:4f:44:
06:3e:0a:41:c2:53:51:43:17:7b:14:e3:71:1c:3f:
44:f1:9d:fe:d2:f1:3a:bd:7a:6a:81:d4:bc:70:fe:
cc:93:9c:8a:d5:4b:a9:0b:88:43:af:45:96:78:4b:
34:be:b7:ff:ec:74:12:5c:84:c3:53:24:51:51:60:
a4:36:e9:0d:c6:a2:dc:30:03:09:a5:7f:9a:e7:a7:
fa:45:65:db:ea:00:a8:51:3b:b5:9b:ba:4e:55:77:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BB:6C:A7:1A:C6:E4:6A:72:BC:6C:06:92:79:4C:28:25:CA:66:71
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:57:4d:4b:6b:5d:a7:0a:42:95:c4:29:a6:aa:3d:e9:33:90:
9a:6c:f7:78:a6:63:65:46:b2:bf:66:cb:74:75:1e:5e:8c:f8:
39:a5:f0:25:ca:f1:13:3c:7e:67:99:8a:2f:2d:ba:9b:6c:9c:
4f:c3:54:04:d7:19:c5:40:ce:01:ce:f5:d4:20:ab:71:32:d8:
b2:f4:7d:bd:00:ce:83:e4:b2:ee:ce:94:25:1d:83:d9:0c:55:
bb:68:b4:fd:34:03:83:85:7e:96:58:40:90:cd:40:57:9b:fa:
fc:cd:c1:d8:09:97:77:e9:49:7f:e2:31:7d:41:b4:da:34:1c:
5a:06:0b:70:67:6e:20:33:de:cd:d9:ee:e2:dd:7d:1a:59:1f:
22:8b:30:33:2a:0a:83:68:3d:ed:3f:98:37:18:04:45:23:22:
a7:96:96:2b:40:1e:f3:0a:86:04:03:e2:a8:c8:b7:e5:44:75:
7b:85:f1:ba:07:26:7c:60:be:1a:a0:48:95:59:e6:71:db:6e:
8f:cd:fb:8f:36:61:a7:8b:7c:15:69:27:19:d2:2e:52:db:91:
f7:31:bf:e9:24:b0:bd:33:ac:81:e1:55:a8:f5:30:e4:d4:fc:
77:a0:aa:14:2e:3e:73:6a:ae:7c:6a:a7:0b:cf:1b:19:28:80:
5e:82:a1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:12 2026 by rpki-client