Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
File: 738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json)
Hash identifier: E8lyOnEq9Uf168/clj5EzkkSTGqQ8w/PdSItlr4wlXk=
Subject key identifier: 23:08:E7:E6:7C:DB:D7:54:F6:CB:DD:BE:96:2D:EC:8C:71:27:D6:4C
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 019E8835506CA3C80A5B04B64533171090C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
Manifest number: 1941
Signing time: Tue 02 Jun 2026 12:00:55 +0000
Manifest this update: Tue 02 Jun 2026 12:00:55 +0000
Manifest next update: Wed 03 Jun 2026 12:00:55 +0000
Files and hashes: 1: 1hsgVZkjGiwPGwbT4Yu5mw_gR1E.roa (hash: sbJm7A7LKoBguraWEh+cEaoDEunVqRtivursvoz8Rkw=)
2: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: PqjqIykFsvXosnMV5LOwsgZQJoQKGw/JvvMjMMGOkf0=)
3: uTawXit8aKEj4eVxiOZXv6mDUXQ.roa (hash: XkBO6tOwqDjqwxQC1w04z4HLKY8F+H0OZu2mmN1+iAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:35:50:6c:a3:c8:0a:5b:04:b6:45:33:17:10:90:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Jun 2 12:00:55 2026 GMT
Not After : Jun 3 12:00:55 2026 GMT
Subject: CN=2308e7e67cdbd754f6cbddbe962dec8c7127d64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ac:ff:ae:2f:70:f5:52:7b:a8:42:9f:79:af:
2f:e2:f5:08:65:84:31:d4:4a:9f:36:7e:91:7f:24:
c8:d0:88:80:21:99:a7:ee:02:9f:5f:71:4d:6b:03:
03:00:f9:e2:c6:29:08:af:ae:cf:e2:4f:2e:fb:5b:
07:d7:bc:0a:fb:e1:4a:94:4f:b3:06:f5:1e:5b:d3:
b6:c2:74:a0:10:c7:48:81:2d:50:f1:5e:61:31:af:
3d:6e:99:0b:3d:0a:69:82:9a:81:0f:09:99:0c:6a:
48:1c:fa:8c:c5:b8:78:80:7b:c3:df:07:4e:59:73:
26:bd:f2:51:d7:af:b4:0a:0d:83:6d:ad:a1:50:5f:
4d:84:85:11:60:41:17:7b:00:e1:4e:08:39:e3:f6:
ca:40:f3:5a:9b:a5:b7:15:3b:30:b5:aa:10:d2:08:
e3:6c:60:94:31:73:51:d4:ce:3b:e2:b3:90:13:1d:
14:47:6a:42:13:eb:c5:b2:7f:61:73:48:11:63:52:
f0:31:ed:a8:ce:e9:c4:e1:95:43:5f:38:44:4a:2c:
c6:5c:55:82:38:ad:71:c5:6d:fb:e4:a3:b3:7e:15:
0c:b0:af:d7:01:e8:47:2f:70:a6:d0:79:27:1b:dd:
e4:8f:18:32:cc:ac:a0:72:98:42:a6:ee:f7:5a:e6:
43:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:08:E7:E6:7C:DB:D7:54:F6:CB:DD:BE:96:2D:EC:8C:71:27:D6:4C
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c7:cb:71:85:6a:82:99:0e:05:76:71:f6:4d:33:d4:53:72:
a7:aa:97:01:d9:71:04:c0:cd:66:93:15:b3:97:47:d8:75:0d:
3e:67:d4:70:b6:78:7d:6f:ee:67:e9:56:27:8a:59:01:cb:37:
1e:4b:23:83:bb:d5:88:85:5c:65:99:37:a1:bb:34:b2:ce:45:
4c:c9:b7:5c:85:8b:b2:39:0f:0b:6a:dc:98:50:a2:e2:7c:5a:
2b:a4:f1:d3:11:61:5e:b9:ac:27:2c:55:05:3d:33:d1:50:ed:
87:1d:b4:aa:07:5a:61:20:ce:88:b1:e6:67:23:b2:45:51:a3:
5d:7a:4d:ad:06:b4:1f:3e:b5:96:cf:1e:8f:28:8e:10:89:b9:
38:83:13:b1:8f:4e:b4:65:0d:be:68:f4:eb:b8:49:b1:39:2d:
f6:b8:1a:b2:c2:a0:53:6c:9b:a2:e7:45:e4:83:cc:a0:6d:4f:
46:46:62:81:7c:d8:d1:09:b3:ea:df:c7:e2:ef:8d:36:5c:5d:
5a:46:ac:1a:a7:ff:d2:08:a8:d3:82:76:cf:36:a2:98:7c:48:
64:9d:cd:cf:0a:2e:bd:d6:d6:21:90:03:db:96:1f:45:4d:61:
00:bd:58:53:66:9f:4d:63:24:e4:43:b4:51:d8:ad:d4:c7:97:
30:f2:ff:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6INVBso8gKWwS2RTMXEJDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmN2YzMWJkNmQ5ODVlNDUyOTljMzFkMDUyY2E0YThlYmVm
NTU3OGIwHhcNMjYwNjAyMTIwMDU1WhcNMjYwNjAzMTIwMDU1WjAzMTEwLwYDVQQD
EygyMzA4ZTdlNjdjZGJkNzU0ZjZjYmRkYmU5NjJkZWM4YzcxMjdkNjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Kz/ri9w9VJ7qEKfea8v4vUIZYQx
1EqfNn6RfyTI0IiAIZmn7gKfX3FNawMDAPnixikIr67P4k8u+1sH17wK++FKlE+z
BvUeW9O2wnSgEMdIgS1Q8V5hMa89bpkLPQppgpqBDwmZDGpIHPqMxbh4gHvD3wdO
WXMmvfJR16+0Cg2Dba2hUF9NhIURYEEXewDhTgg54/bKQPNam6W3FTswtaoQ0gjj
bGCUMXNR1M474rOQEx0UR2pCE+vFsn9hc0gRY1LwMe2ozunE4ZVDXzhESizGXFWC
OK1xxW375KOzfhUMsK/XAehHL3Cm0HknG93kjxgyzKygcphCpu73WuZD3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMI5+Z829dU9svdvpYt7IxxJ9ZMMB8GA1UdIwQY
MBaAFO9/Mb1tmF5FKZwx0FLKSo6+9VeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQt
YTc2M2RmM2FlZTZkLzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQtYTc2M2RmM2FlZTZk
LzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcfLcYVq
gpkOBXZx9k0z1FNyp6qXAdlxBMDNZpMVs5dH2HUNPmfUcLZ4fW/uZ+lWJ4pZAcs3
Hksjg7vViIVcZZk3obs0ss5FTMm3XIWLsjkPC2rcmFCi4nxaK6Tx0xFhXrmsJyxV
BT0z0VDthx20qgdaYSDOiLHmZyOyRVGjXXpNrQa0Hz61ls8ejyiOEIm5OIMTsY9O
tGUNvmj067hJsTkt9rgassKgU2yboudF5IPMoG1PRkZigXzY0Qmz6t/H4u+NNlxd
WkasGqf/0gio04J2zzaimHxIZJ3NzwouvdbWIZAD25YfRU1hAL1YU2afTWMk5EO0
Udit1MeXMPL/YQ==
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:05:46 2026 by rpki-client