Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
File: 738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json)
Hash identifier: SOVy84KHW+XgvHW0IJRbigYhSlhpvC9OI8q71q2nUYQ=
Subject key identifier: 66:DD:40:25:74:7A:17:32:90:BA:7A:A3:7C:9E:BD:9A:94:9B:2C:92
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 01A13F7029421D5855A11E9163F3BB358470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
Manifest number: 1AA9
Signing time: Thu 15 Oct 2026 12:01:17 +0000
Manifest this update: Thu 15 Oct 2026 12:01:17 +0000
Manifest next update: Fri 16 Oct 2026 12:01:17 +0000
Files and hashes: 1: 1hsgVZkjGiwPGwbT4Yu5mw_gR1E.roa (hash: sbJm7A7LKoBguraWEh+cEaoDEunVqRtivursvoz8Rkw=)
2: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: DcV0mkDNdz3HqlRg68PFCHyYC4yojBg643mE6c2uC3g=)
3: uTawXit8aKEj4eVxiOZXv6mDUXQ.roa (hash: XkBO6tOwqDjqwxQC1w04z4HLKY8F+H0OZu2mmN1+iAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:29:42:1d:58:55:a1:1e:91:63:f3:bb:35:84:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Oct 15 12:01:17 2026 GMT
Not After : Oct 16 12:01:17 2026 GMT
Subject: CN=66dd4025747a173290ba7aa37c9ebd9a949b2c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:78:b9:87:81:82:5a:3f:22:fa:4d:e2:f8:
cb:15:af:df:63:ae:90:01:6f:60:bb:df:7c:38:24:
04:53:de:e7:ea:53:bc:c2:c2:4e:ba:59:b4:70:49:
26:d0:00:44:1f:1f:4b:8f:99:f1:79:2a:a0:51:50:
8a:c1:5c:bb:1c:7e:34:f6:b9:5a:fd:4a:3a:29:9e:
54:fa:03:dd:29:21:10:3e:1f:53:94:ce:3b:1f:64:
59:d4:ba:3c:68:79:a2:7d:4f:88:54:b1:6a:cb:df:
41:97:8d:e9:7b:47:6d:9d:60:f6:8e:80:b7:2f:5f:
02:30:af:4f:78:5b:9e:c5:01:61:67:0a:03:74:d3:
77:72:c7:4a:c5:eb:b1:d5:63:e8:5a:af:c7:66:07:
9d:cb:db:c7:3d:d0:4c:9f:7f:12:9b:91:22:60:a0:
e8:ea:92:8d:2d:43:d6:09:35:4e:42:34:92:87:4a:
fd:4c:3f:6b:9a:f0:0a:19:eb:f0:be:7b:fb:40:68:
0d:37:f8:aa:75:74:28:45:6b:96:b4:df:b8:34:f7:
b8:6d:3a:e2:d3:10:1d:b8:35:c4:d7:9d:e9:41:5b:
1e:60:be:5f:aa:a4:24:c6:38:a5:88:e6:0c:d5:0e:
c8:c9:36:da:cd:23:d5:ea:0a:f4:11:be:0f:5d:02:
09:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DD:40:25:74:7A:17:32:90:BA:7A:A3:7C:9E:BD:9A:94:9B:2C:92
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e3:c3:d6:b7:79:46:07:e1:73:a7:09:02:27:3f:6f:ca:4b:
12:14:a3:55:b7:9c:83:7e:d2:e5:c5:9f:2b:81:fb:9d:a3:bf:
72:65:28:a3:7d:41:83:d4:a2:25:ad:be:5e:bf:c4:c3:17:3c:
15:dc:10:17:e8:08:88:df:91:38:60:c0:1c:46:0b:00:07:ca:
43:38:4a:ad:16:bd:65:f9:cd:e2:95:47:4b:a5:27:bb:4b:c7:
3a:0e:c1:6e:57:19:30:1a:b3:9e:d6:84:21:e0:c1:d1:7c:16:
6a:e7:f2:ba:e3:f5:4a:9a:5c:7e:8e:64:89:8c:f5:93:ac:48:
c2:14:bc:f9:c4:af:a6:5d:58:bf:43:e9:43:92:8c:77:af:da:
22:d7:75:71:00:14:01:f8:90:63:f3:0d:9f:92:4d:5c:95:12:
6e:44:35:14:c1:ec:6b:d9:e4:b6:68:7f:d9:c1:8c:02:60:ee:
03:fd:e1:e2:99:55:45:7c:f4:99:29:9e:92:ad:e2:d5:0b:9d:
e0:20:b4:0a:dc:56:0f:4b:ba:f6:1b:85:fd:b8:5b:df:3d:2c:
2a:ed:0e:f0:ac:f2:35:db:d5:1a:ee:c4:25:3f:1b:73:e6:9c:
08:b2:69:d9:a6:f4:63:6e:c1:50:7d:9d:0f:dc:2f:89:9f:10:
b5:b8:ea:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:06:42 2026 by rpki-client