Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
File: 738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json)
Hash identifier: peqk3IgPOh9U2gqYeKso+JfG5O6gFJ2jLlWPsOKpQXA=
Subject key identifier: 7C:F0:DF:63:99:39:CC:2A:65:27:64:33:2F:BC:04:AC:19:35:83:73
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 019CB8B8C93D2B4C268F946507AEE61EE25A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
Manifest number: 1851
Signing time: Wed 04 Mar 2026 12:00:43 +0000
Manifest this update: Wed 04 Mar 2026 12:00:43 +0000
Manifest next update: Thu 05 Mar 2026 12:00:43 +0000
Files and hashes: 1: 1hsgVZkjGiwPGwbT4Yu5mw_gR1E.roa (hash: sbJm7A7LKoBguraWEh+cEaoDEunVqRtivursvoz8Rkw=)
2: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: 6XBZt2L227z7xbkLgSupHYlCY6TStBFGgzGTAg9yMws=)
3: uTawXit8aKEj4eVxiOZXv6mDUXQ.roa (hash: XkBO6tOwqDjqwxQC1w04z4HLKY8F+H0OZu2mmN1+iAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:b8:c9:3d:2b:4c:26:8f:94:65:07:ae:e6:1e:e2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Mar 4 12:00:43 2026 GMT
Not After : Mar 5 12:00:43 2026 GMT
Subject: CN=7cf0df639939cc2a652764332fbc04ac19358373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:a4:3a:3b:2e:31:39:ab:a6:ce:18:9b:73:
33:b2:50:f3:c0:47:87:e4:fe:77:eb:75:b5:79:66:
aa:22:b8:e9:00:9d:50:38:26:d8:bc:0e:63:56:c4:
14:6b:37:19:e5:a2:9f:03:e0:e8:67:89:76:21:b1:
b2:e4:31:f8:d0:5b:50:5c:76:f6:9c:74:7d:b4:45:
f9:46:d1:aa:99:1c:cd:74:a3:5c:c9:9d:8a:ad:1a:
89:b7:0d:38:d6:b1:71:f5:c9:ca:a2:57:3c:0e:8b:
fe:24:9d:ad:3d:0a:0f:cc:90:25:0e:55:26:aa:0a:
44:87:c4:93:85:9b:14:17:30:8b:23:ac:cc:5a:49:
c5:ea:1a:6b:36:53:73:e3:20:43:2f:25:b2:fc:8e:
50:cd:47:4a:22:80:92:9f:8b:61:77:1b:e0:57:75:
8f:66:6d:21:81:e3:51:6f:ee:47:01:2d:2a:78:62:
c6:d1:6d:11:1c:1e:fb:3a:7a:06:c3:bb:f2:5f:aa:
87:ea:60:4d:55:c1:39:d2:85:74:c1:c6:3e:fe:c2:
68:f1:fa:43:82:0a:57:42:56:8f:df:33:aa:41:a9:
6e:92:2c:56:34:2a:21:83:30:7c:c7:38:22:ff:be:
41:69:23:bf:7c:32:a1:3c:49:0f:fd:da:9a:b9:67:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F0:DF:63:99:39:CC:2A:65:27:64:33:2F:BC:04:AC:19:35:83:73
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:36:11:9b:d5:6e:41:cf:2c:43:bf:ba:48:aa:c6:73:52:66:
29:c4:76:db:a6:06:b6:ed:11:a8:f9:ea:5e:eb:aa:d7:d4:f3:
92:fc:e2:1a:e5:28:79:11:e8:2c:e0:c5:9f:0f:23:b1:1e:72:
8d:cc:fc:15:88:4c:8d:71:d8:46:b1:11:05:1f:77:91:dc:0e:
1e:ab:b9:50:81:70:43:e2:30:fb:df:90:f2:75:38:33:31:07:
4d:63:a5:b6:b1:f5:dc:e8:b6:d8:2c:7a:0d:b4:90:ab:e3:a0:
7b:ad:1a:02:5f:11:2e:47:70:85:a6:02:74:40:61:03:e2:5a:
4f:0d:b3:97:5b:5c:dd:13:8e:9e:94:60:0f:06:8a:0c:44:14:
41:8e:86:14:6b:6c:ba:65:dc:78:00:42:84:ce:40:62:42:84:
4b:e4:1c:8f:ef:2c:55:3a:09:e7:14:88:f6:e2:40:05:4c:0e:
97:de:e8:65:43:83:0b:99:d6:b3:69:25:de:45:b0:d3:dc:d2:
f5:68:90:bc:b0:f2:43:71:36:61:5c:3d:dc:1f:2e:3a:96:5e:
39:4f:ca:45:86:c9:e9:82:6e:06:7a:00:60:b6:91:6f:c5:1c:
9d:59:40:d3:08:19:94:5e:08:cc:7c:41:1f:95:40:db:ff:21:
92:c3:40:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:06:36 2026 by rpki-client