Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
File: 75pS4318rMafjv78dTO8CxjLXmc.mft (raw, json)
Hash identifier: g7ZEo0fGUQN+IqTYDhUQQ6JLeDZUpeI8t2Pgd1ILq4E=
Subject key identifier: FB:E8:15:27:E7:51:E5:DC:8A:A3:E3:39:B4:79:23:83:D9:20:17:0C
Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
Certificate issuer: /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Certificate serial: 01A08A8D8FAED5DC5FB1D0E7535F2F5961B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
Manifest number: 0C09
Signing time: Thu 10 Sep 2026 09:02:08 +0000
Manifest this update: Thu 10 Sep 2026 09:02:08 +0000
Manifest next update: Fri 11 Sep 2026 09:02:08 +0000
Files and hashes: 1: 75pS4318rMafjv78dTO8CxjLXmc.crl (hash: aU49bitDd9vZMMOAG3xVJfLbNeQq/0HA1rZMwVmdWHM=)
2: DGYXYWLKOeu5jzMoeESZW6Y77nY.roa (hash: NEwVDGeOxuD3CwmTZN1xHgpekj6E23kVoku+iTke+5k=)
3: h1r4ZumAOZuwV9fE7OfAlVgJv4A.roa (hash: boWg3/ilHJUif1jBV2hi//oKfIFrSzEio17woe1bvV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:8f:ae:d5:dc:5f:b1:d0:e7:53:5f:2f:59:61:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Validity
Not Before: Sep 10 09:02:08 2026 GMT
Not After : Sep 11 09:02:08 2026 GMT
Subject: CN=fbe81527e751e5dc8aa3e339b4792383d920170c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:c4:ae:94:7c:3d:a9:e9:8f:56:e1:86:25:
a1:9a:d0:d7:04:bd:ca:fb:f1:c3:86:32:90:00:64:
fa:a9:5c:da:98:a8:c7:2a:d1:2e:6a:d3:5a:49:4c:
a7:cc:dc:1f:7f:04:ac:ee:5b:f3:4c:8c:34:84:a0:
dd:8b:46:f3:21:44:47:6b:a8:f7:a3:ed:c1:86:0c:
f1:ec:d6:a0:31:12:2f:c6:bb:c1:7b:25:d1:02:e6:
16:92:26:8f:1d:53:0d:4b:fe:bc:e3:50:d4:cd:5e:
7c:f8:20:b3:57:12:f1:29:ae:62:ee:a5:45:68:bd:
77:31:70:80:7a:9d:fc:3f:4e:f7:74:c7:6c:46:c7:
f8:58:f6:10:d8:cd:49:8e:e5:ce:8c:c2:a2:b1:09:
c4:66:81:05:ca:f5:2b:fd:6a:b7:f0:78:e0:23:38:
f5:a1:aa:de:d5:cd:7d:59:cf:38:da:73:96:e2:71:
49:9d:40:11:2e:4b:91:21:03:91:03:a8:98:12:a0:
e1:f4:77:a3:3b:12:57:45:c3:56:3d:40:8f:b7:a7:
b6:30:7e:31:9c:b8:ca:f6:0b:8e:59:2e:c5:36:b1:
51:2e:a5:d5:f2:68:90:c8:14:4a:4b:b5:3a:b4:0c:
0d:33:ba:dd:98:ec:bc:1d:ff:82:9c:3f:6a:9b:20:
81:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E8:15:27:E7:51:E5:DC:8A:A3:E3:39:B4:79:23:83:D9:20:17:0C
X509v3 Authority Key Identifier:
keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f3:a8:9c:30:6b:f8:93:b1:db:02:ed:8c:aa:bd:bf:f6:3b:
54:e5:46:c4:2c:e7:9a:31:11:e9:c5:bc:76:f9:e7:0f:ed:b1:
6c:29:ae:d2:b9:63:20:ff:cd:69:db:06:49:47:a6:d8:2f:f9:
8c:65:a2:69:91:00:89:fe:9b:ef:a0:42:c2:91:16:00:61:16:
ef:27:31:d6:e2:4e:b5:bb:4d:c8:82:1a:bd:88:4b:dd:3e:26:
eb:89:e7:71:47:70:dd:bc:9c:e0:96:9e:2a:b7:cb:99:8d:f5:
f3:1b:36:98:64:15:a3:bf:e4:51:20:17:2f:27:2a:1c:22:0a:
2f:20:77:ce:55:88:fa:61:79:e8:20:58:96:4c:14:f4:7c:bb:
72:4c:46:8a:3a:5f:2a:80:bb:5a:b9:b9:2c:14:15:28:aa:a4:
76:85:ab:f8:e1:07:52:f1:d6:23:66:93:75:91:50:5e:ac:04:
67:4e:0e:6e:89:ee:ce:a4:b0:7d:76:de:6e:4d:3d:f8:76:58:
3f:f8:f4:14:fc:d6:03:4f:ee:ee:a1:d5:2f:df:74:4b:c4:2d:
a7:39:09:ae:32:a7:01:e4:b5:b6:8e:32:08:7d:a7:11:f9:32:
e9:12:56:07:17:8b:65:bd:a6:b9:1e:64:d5:84:0b:25:a5:f4:
e2:21:4e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:35:02 2026 by rpki-client