Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
File: 75pS4318rMafjv78dTO8CxjLXmc.mft (raw, json)
Hash identifier: v3hW/cvu8Brof16UYkkVIbqy2Fpa+DaErILbrbhh/+Y=
Subject key identifier: 66:2B:D6:1C:D2:2A:51:B4:7F:F9:09:BE:7F:1B:B8:94:1E:A8:D4:AE
Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
Certificate issuer: /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Certificate serial: 019DCD8677A78C0B7EFA82D050C588AD33C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
Manifest number: 0A9E
Signing time: Mon 27 Apr 2026 06:00:34 +0000
Manifest this update: Mon 27 Apr 2026 06:00:34 +0000
Manifest next update: Tue 28 Apr 2026 06:00:34 +0000
Files and hashes: 1: 75pS4318rMafjv78dTO8CxjLXmc.crl (hash: aTJn/K19rRhykvXUf7lXKDe0fpPPgXjaq0ZBlCu5P10=)
2: DGYXYWLKOeu5jzMoeESZW6Y77nY.roa (hash: NEwVDGeOxuD3CwmTZN1xHgpekj6E23kVoku+iTke+5k=)
3: h1r4ZumAOZuwV9fE7OfAlVgJv4A.roa (hash: boWg3/ilHJUif1jBV2hi//oKfIFrSzEio17woe1bvV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:77:a7:8c:0b:7e:fa:82:d0:50:c5:88:ad:33:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Validity
Not Before: Apr 27 06:00:34 2026 GMT
Not After : Apr 28 06:00:34 2026 GMT
Subject: CN=662bd61cd22a51b47ff909be7f1bb8941ea8d4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:37:6b:28:09:48:e2:43:b8:89:56:fb:80:
6a:15:9f:06:c7:7f:59:34:77:9f:91:a5:d6:07:87:
25:77:bd:ad:3e:fd:55:03:b5:38:d6:fa:b3:4d:79:
b1:42:d5:03:62:b0:d8:ae:3b:e9:84:bd:fe:29:71:
3b:91:5c:1a:7e:53:99:b5:30:b3:2e:91:cd:b0:94:
ee:77:15:bb:51:64:5d:54:7f:4b:54:63:77:63:e2:
bc:6c:b2:a3:69:38:f3:ef:c6:88:24:c0:59:da:80:
bd:b3:38:51:46:c1:c9:ae:2a:87:14:05:d9:a6:d9:
5c:31:bd:cc:c8:a7:75:3d:48:1f:0a:5a:ae:78:06:
40:18:06:d0:0a:69:10:c2:a9:9f:e7:02:6d:90:38:
51:17:27:ec:3b:28:45:06:61:39:dd:09:1c:d4:b3:
6b:00:79:97:77:bf:21:80:18:82:b4:40:1d:59:9a:
e3:d6:e5:eb:8c:03:2b:b2:32:a8:c7:a8:04:bb:34:
70:c0:a4:fe:6a:78:f1:43:53:25:11:50:22:7d:e2:
4f:3d:54:07:7b:93:8b:e7:d6:63:a4:8b:06:53:c8:
68:8f:f7:05:d6:4a:21:e5:02:8e:4d:53:23:41:20:
fd:01:ab:ce:19:1d:b5:70:14:6e:29:2a:72:6f:b9:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2B:D6:1C:D2:2A:51:B4:7F:F9:09:BE:7F:1B:B8:94:1E:A8:D4:AE
X509v3 Authority Key Identifier:
keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:14:c3:3c:6b:38:14:d8:de:13:b2:b7:3c:c3:3f:0c:22:c0:
ab:d6:ad:e6:56:6d:96:52:a1:c2:2a:19:02:bf:a9:7a:1b:40:
43:26:82:2e:d7:2e:a4:ca:69:44:2d:22:1a:5a:88:c4:08:b7:
05:c2:1f:df:ef:3c:0e:5f:08:84:9d:b3:47:06:cc:5c:31:f5:
07:f5:7f:1c:c5:79:cb:e7:60:d6:a7:ba:1f:ca:40:ad:64:47:
7d:21:54:bd:cb:17:47:d3:05:5d:7a:65:47:3b:00:f7:34:90:
7b:7a:5f:c6:23:c9:21:2a:65:c7:46:75:d1:ec:b3:30:12:a7:
e6:60:a3:c2:5d:5d:d9:aa:95:da:67:71:18:b8:51:d7:c6:4f:
7d:ab:c6:29:50:d9:90:99:9f:9b:a4:af:b0:c8:27:c7:ee:4e:
1f:cb:00:39:c2:e5:de:76:a3:aa:56:19:02:77:c8:5e:58:99:
01:e8:0f:9e:91:c3:2d:cd:83:d7:c0:77:e4:c0:3b:4b:56:9b:
73:d3:66:f4:1a:e4:0c:0a:c1:3d:29:54:23:8a:d3:3a:b6:c4:
27:e3:d0:99:f8:a8:ca:be:78:fc:58:93:6f:0c:1a:12:bd:18:
55:e7:0f:fc:cf:58:06:07:aa:2c:30:39:63:16:e5:b8:bc:f1:
bb:21:81:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:06:04 2026 by rpki-client