Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
File: 758eOCZUELPCqSLTFpxPKZUUGi0.mft (raw, json)
Hash identifier: h1eTK2FaerbrFc/Nzylb08YPnvogwJbHWtaXjJJ6c1c=
Subject key identifier: 55:15:C5:F9:D2:1E:2E:E5:C3:EA:7E:2F:15:6A:DE:E9:BF:F3:3E:1A
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 019F91DAEFC77F1D69B89A1F449E71B9A1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 02:01:12 +0000
Manifest this update: Fri 24 Jul 2026 02:01:12 +0000
Manifest next update: Sat 25 Jul 2026 02:01:12 +0000
Files and hashes: 1: 758eOCZUELPCqSLTFpxPKZUUGi0.crl (hash: 6jdkApUeigGgxgOTlkCbVoHM5UTa5lazTD3Q8cGyxgQ=)
2: YbvuxNmEM9puc_pD09f_17c_b3Q.roa (hash: 0UC1RMCMv7LFWJ7ffAC3hAFesoaiWMs9jBqK2lLJPHk=)
3: wlbCQCbrUI3SxwZA5HNQA0HGepg.roa (hash: zmsKMPohzvqVP0YR0GOcciBU4GmXvtoj3886J28B8bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:ef:c7:7f:1d:69:b8:9a:1f:44:9e:71:b9:a1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: Jul 24 02:01:12 2026 GMT
Not After : Jul 25 02:01:12 2026 GMT
Subject: CN=5515c5f9d21e2ee5c3ea7e2f156adee9bff33e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:24:e1:54:a4:ff:67:f9:b1:94:36:e6:4d:
bc:52:bb:23:0a:9e:07:08:c7:9a:2d:85:4d:3d:22:
7f:f0:87:98:98:3f:b2:58:e0:a5:6c:b4:f8:89:e3:
81:80:88:7d:47:43:82:22:ac:08:39:0a:6d:70:95:
8c:79:d7:ad:f9:90:c7:4d:65:12:7c:d3:52:86:19:
2d:63:64:0f:d9:36:88:a4:66:01:98:35:27:fc:38:
d5:0c:4a:1d:e7:91:aa:18:80:d4:04:e6:c2:a8:67:
82:eb:89:44:f5:25:0c:fa:01:8c:c2:58:c0:0e:63:
c5:e0:60:59:2c:01:9a:90:e2:0e:07:be:20:46:9b:
29:30:48:f2:1f:69:cd:3f:b8:81:81:99:05:fe:ca:
39:af:ad:82:69:74:6c:ed:79:00:1f:bd:17:f4:2a:
e4:a2:64:c0:2a:0e:53:b6:97:61:c1:4e:d0:ce:55:
6d:1d:3d:ec:72:31:55:2e:d6:43:1f:fe:d8:51:52:
7a:62:71:07:09:fc:09:ce:6a:a3:92:87:52:13:72:
08:f2:ab:bf:cb:53:f0:7f:19:34:b0:53:a7:8e:26:
63:df:84:6e:90:c0:96:e3:a9:3c:54:85:46:22:da:
11:c9:e8:7a:27:27:5c:e8:21:1b:82:d8:33:05:a3:
18:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:15:C5:F9:D2:1E:2E:E5:C3:EA:7E:2F:15:6A:DE:E9:BF:F3:3E:1A
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:e3:a9:5c:03:27:7b:2d:f7:a6:26:6b:a3:59:ab:59:83:a5:
ea:44:1b:ad:c4:b9:66:99:4a:d1:e1:17:e4:cf:ec:d0:ec:28:
e6:87:55:7c:c5:f5:8a:48:aa:24:a2:17:99:75:fd:b4:10:13:
f3:bd:7e:0c:a0:3e:5c:4c:9d:33:41:99:af:f5:89:a0:03:27:
5c:4a:5c:08:3c:e8:72:22:c1:99:fb:71:cc:fc:8c:86:fc:5c:
77:30:83:2d:c2:63:53:a9:23:b0:43:9a:45:19:d5:d8:d6:7e:
3b:08:7f:72:6e:5f:31:dc:c5:af:b3:94:72:ce:4b:4b:f6:c6:
fb:41:61:e4:7a:69:e5:e7:66:9e:de:f4:35:6e:ff:0d:2e:03:
4f:ea:76:07:2e:3f:67:f3:0b:0f:30:b1:dd:a3:a3:9f:51:b9:
ec:07:6b:ac:77:70:50:1a:1c:88:65:d6:1c:2b:f2:1e:bc:0d:
e4:83:23:94:b1:fe:8a:a4:44:34:82:97:82:b7:d2:d1:ec:fe:
b4:04:fd:29:d5:b4:08:c9:d3:40:97:5e:27:aa:3b:3f:2d:de:
03:2c:c1:f0:f6:ff:47:ba:1b:85:ba:61:b1:fb:e4:ea:19:27:
a1:e0:9e:be:84:b1:5e:1d:00:3e:7e:94:b8:1f:10:c6:16:4c:
ae:dd:c2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:10 2026 by rpki-client