Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
File: 738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json)
Hash identifier: LjXLfkMz14TgPIfgXnKuHySFHcstm+3CgVdlME0VDTY=
Subject key identifier: D6:29:8B:98:6B:13:29:77:25:FE:9C:19:CF:8F:49:46:D3:F5:B5:BC
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 019F71E1A9E54E5DFCC01861566B6DBE2E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
Manifest number: 19BA
Signing time: Fri 17 Jul 2026 21:00:42 +0000
Manifest this update: Fri 17 Jul 2026 21:00:42 +0000
Manifest next update: Sat 18 Jul 2026 21:00:42 +0000
Files and hashes: 1: 1hsgVZkjGiwPGwbT4Yu5mw_gR1E.roa (hash: sbJm7A7LKoBguraWEh+cEaoDEunVqRtivursvoz8Rkw=)
2: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: YuL8HE4SXA6BTnOwd7PZRr8W3rpbCD99/qF4N5Zp56s=)
3: uTawXit8aKEj4eVxiOZXv6mDUXQ.roa (hash: XkBO6tOwqDjqwxQC1w04z4HLKY8F+H0OZu2mmN1+iAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:e1:a9:e5:4e:5d:fc:c0:18:61:56:6b:6d:be:2e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Jul 17 21:00:42 2026 GMT
Not After : Jul 18 21:00:42 2026 GMT
Subject: CN=d6298b986b13297725fe9c19cf8f4946d3f5b5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4f:9d:fd:22:7b:b5:ad:47:b6:05:30:37:ad:
4a:1a:f7:ae:a9:3d:38:34:c8:78:3f:58:bc:bc:9a:
d3:d9:b3:07:6f:62:c6:22:b5:99:ca:90:7e:a4:70:
87:13:17:91:75:0d:86:2b:b9:af:10:6a:6d:8d:65:
76:71:13:db:18:c0:ea:89:00:f3:ff:c2:db:69:d5:
43:c7:4c:b2:a6:8b:34:d3:a4:0a:5b:10:23:ad:e1:
e1:f9:03:23:8f:8f:cf:90:5c:07:71:c7:7c:8c:68:
0a:0d:07:a8:79:19:1b:89:a9:e9:7b:ec:6c:61:9f:
50:b3:85:d8:e5:28:3c:51:44:f2:3f:ef:f1:50:92:
a3:4d:d9:4a:44:f0:8e:40:92:9b:74:14:de:62:49:
54:5a:a5:69:25:41:15:a5:23:f8:89:0f:a5:db:cd:
b5:cf:3d:3b:58:d6:50:b2:b1:27:07:91:34:c0:fd:
59:c5:8a:d2:28:41:63:69:b1:a9:e6:87:e0:ae:d9:
8a:80:4f:48:db:f9:d9:62:61:5c:9b:73:75:0f:43:
7e:fa:83:16:80:d5:e2:ac:e5:b4:f7:f1:20:71:b7:
bc:84:ba:97:dd:53:27:42:86:04:0b:8a:c8:5b:73:
d8:9f:3b:9f:e7:64:fe:1b:04:5f:90:b2:bc:e2:bb:
d4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:29:8B:98:6B:13:29:77:25:FE:9C:19:CF:8F:49:46:D3:F5:B5:BC
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9f:47:7e:6d:6b:ef:10:64:9a:72:54:92:dc:f8:4b:ea:bb:
de:6d:ea:f1:8b:f8:97:8e:74:a2:a4:b1:4c:63:da:b9:29:c5:
ba:07:22:ad:57:f0:a8:58:c8:20:7d:61:02:4a:35:65:b2:35:
ec:1b:16:ae:94:6f:c0:19:c6:09:da:9b:5f:6f:a5:53:30:64:
51:e8:c7:87:f1:d2:d1:84:6f:fe:5d:4c:d6:77:f9:38:1b:b1:
78:73:13:34:ea:c7:0a:b9:ed:f5:84:7b:90:15:59:36:88:96:
ff:87:b9:7f:a8:59:33:27:59:26:5f:4e:3d:b5:16:e4:33:62:
69:85:96:32:55:d0:0c:b7:45:82:75:82:0d:37:76:cb:6f:77:
bf:7f:23:3b:72:10:f2:e2:9d:fb:e4:71:2d:22:92:b2:ce:60:
b8:b3:17:cb:c3:86:d5:80:7f:fc:15:5b:5b:b7:3e:94:d5:90:
28:50:56:0f:d9:77:b9:3a:ef:68:1a:9a:0b:d3:7c:d6:8f:d0:
8a:0f:9b:a4:bd:cd:f9:e3:ba:cd:aa:66:f0:84:a5:1c:ef:20:
ec:bb:28:8c:71:61:3c:3d:b7:91:3e:75:33:99:3a:f8:c9:58:
79:57:0d:93:75:fe:38:e7:b8:ba:14:78:82:e4:bb:61:2b:38:
83:ec:56:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:56:41 2026 by rpki-client