Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
File: 738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json)
Hash identifier: T3w1isGWofb6s+ZW3mtjCkirFd4RrSmAFIbyiBsO+K4=
Subject key identifier: D9:85:3A:6E:74:1B:62:D1:37:03:CD:D8:73:FB:D4:F0:9B:0F:18:BF
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 019DA077266C4E261D83AF3C2953F505CFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
Manifest number: 18C9
Signing time: Sat 18 Apr 2026 12:00:56 +0000
Manifest this update: Sat 18 Apr 2026 12:00:56 +0000
Manifest next update: Sun 19 Apr 2026 12:00:56 +0000
Files and hashes: 1: 1hsgVZkjGiwPGwbT4Yu5mw_gR1E.roa (hash: sbJm7A7LKoBguraWEh+cEaoDEunVqRtivursvoz8Rkw=)
2: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: s5oN32QNABIV132BE5eEuSdlokvxTexlV1dg2/td0Js=)
3: uTawXit8aKEj4eVxiOZXv6mDUXQ.roa (hash: XkBO6tOwqDjqwxQC1w04z4HLKY8F+H0OZu2mmN1+iAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a0:77:26:6c:4e:26:1d:83:af:3c:29:53:f5:05:cf:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Apr 18 12:00:56 2026 GMT
Not After : Apr 19 12:00:56 2026 GMT
Subject: CN=d9853a6e741b62d13703cdd873fbd4f09b0f18bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:28:28:f6:a7:4f:19:d6:6d:3c:18:76:d8:6a:
f0:75:4f:66:f8:f2:04:0a:5a:96:31:41:3f:20:d7:
02:6a:90:db:90:9e:9c:21:36:24:38:5d:35:ae:39:
8b:5e:9e:2f:86:3d:3f:ff:af:93:79:3a:aa:3c:31:
8d:ca:6a:e1:7e:b4:e9:8d:2b:53:8a:2b:91:2f:ab:
94:76:ba:56:ab:1e:3b:0a:2c:f8:ca:75:7f:59:25:
8b:fc:c9:0e:8b:b7:58:ed:c0:77:cf:34:d2:97:48:
04:a1:51:56:b7:d8:5d:b5:78:53:8f:0a:e0:85:01:
3d:1d:b4:85:4b:f4:41:db:f1:6b:25:69:84:1d:77:
c9:f4:ba:f1:54:0c:fe:21:81:70:03:7d:f5:28:69:
68:34:2d:47:f4:5b:39:86:30:35:22:09:bc:13:b7:
42:53:a7:b6:81:d6:44:c2:a3:aa:a3:ba:ec:c5:5b:
f8:49:30:26:ca:ec:21:a7:ac:95:67:6b:af:59:e4:
18:10:42:e2:78:eb:6b:eb:dc:12:78:72:b2:01:67:
6d:0b:ce:1d:9b:8f:57:56:5b:7a:af:93:82:fa:25:
04:5f:06:4d:d2:6a:1b:e6:bc:7c:4d:22:7d:c9:c7:
de:cd:e9:cf:4d:96:f0:20:e8:28:95:d4:0a:fb:c3:
d6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:85:3A:6E:74:1B:62:D1:37:03:CD:D8:73:FB:D4:F0:9B:0F:18:BF
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:93:ca:44:4c:8c:9d:36:39:00:8c:81:ce:d3:a4:3f:c9:11:
79:de:98:f5:4a:2c:d1:d8:ca:79:d0:97:a7:0c:2c:a8:68:06:
41:b9:2f:9a:22:1f:ff:44:43:b0:6d:c1:8f:39:39:47:28:c7:
e8:9c:5d:fb:05:18:e7:d4:c6:17:e4:0f:a8:0a:57:79:c6:14:
e0:fc:c6:0a:35:48:a5:32:5a:56:06:2e:ce:92:9b:bd:87:a7:
70:d9:91:38:c3:85:24:97:c8:d6:ea:7c:4a:25:e3:a4:4c:cc:
a0:c4:dc:f3:03:88:dc:9a:90:0e:10:27:73:6f:55:f7:2b:a3:
62:b6:23:a3:0a:18:69:48:a4:d0:f8:2f:d2:c0:94:db:0c:fc:
dd:45:66:02:d8:c1:ca:0f:fd:cd:66:09:4b:f0:71:36:38:23:
cc:34:8d:23:e1:91:58:1e:18:3b:a5:59:de:54:aa:ba:07:32:
e0:5f:df:a9:5e:1c:7f:68:8f:a4:ca:c4:cd:a5:8c:2c:fc:cb:
e3:56:5a:50:eb:11:2a:c4:db:ce:f7:74:36:5b:4d:61:87:cd:
1b:74:a7:7d:de:ec:a3:c1:8d:bb:a2:cb:f2:77:b3:1a:a4:2b:
d1:bc:2a:2d:b7:27:21:95:72:3c:1c:1f:f7:5d:57:83:0c:ce:
54:54:45:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 18:24:23 2026 by rpki-client