Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
File: 75pS4318rMafjv78dTO8CxjLXmc.mft (raw, json)
Hash identifier: ogxz9et32Ae7yaSOGrSHfrTcUMhMjiu9Zpl/yfCQ4PA=
Subject key identifier: 7D:66:D2:AB:8F:3A:D5:D7:D9:AD:3C:F5:FA:FE:FB:E4:0A:32:0A:2F
Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
Certificate issuer: /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Certificate serial: 01A17BF2E9117E5472324609A94216A02728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
Manifest number: 0C86
Signing time: Tue 27 Oct 2026 06:01:19 +0000
Manifest this update: Tue 27 Oct 2026 06:01:19 +0000
Manifest next update: Wed 28 Oct 2026 06:01:19 +0000
Files and hashes: 1: 75pS4318rMafjv78dTO8CxjLXmc.crl (hash: ZgmAcEHHOyDeDLxasI3FVB97vlmL6PMcPtFZcOPmlSA=)
2: DGYXYWLKOeu5jzMoeESZW6Y77nY.roa (hash: NEwVDGeOxuD3CwmTZN1xHgpekj6E23kVoku+iTke+5k=)
3: h1r4ZumAOZuwV9fE7OfAlVgJv4A.roa (hash: boWg3/ilHJUif1jBV2hi//oKfIFrSzEio17woe1bvV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:e9:11:7e:54:72:32:46:09:a9:42:16:a0:27:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Validity
Not Before: Oct 27 06:01:19 2026 GMT
Not After : Oct 28 06:01:19 2026 GMT
Subject: CN=7d66d2ab8f3ad5d7d9ad3cf5fafefbe40a320a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:a0:8b:46:b1:12:52:09:c8:19:0b:a8:a0:
e3:b3:55:60:07:d1:05:3a:28:d2:57:31:74:45:af:
d8:97:5d:fb:1e:e0:03:8b:af:da:8e:ca:0b:d3:92:
6f:ab:af:79:8d:e8:cd:13:db:cc:09:dd:a5:8e:bb:
b8:98:c7:c3:84:8b:01:07:ff:72:70:dc:51:53:46:
4e:50:f3:c9:a3:3e:ab:30:2f:3a:3e:f1:03:61:d0:
69:2f:5b:2a:66:2e:ac:a9:0d:d9:59:4f:b1:cd:f9:
b0:5c:dc:06:c0:2c:49:ce:cd:50:a5:16:9a:22:76:
75:bc:21:b7:d2:f2:2a:42:c1:dc:25:8a:59:53:c6:
a5:38:85:a7:41:f1:25:af:b5:89:eb:6e:57:33:d6:
42:06:59:7e:b6:ef:0d:a7:d2:b4:b5:15:d7:d0:24:
bf:c6:b2:00:9b:25:99:38:f1:24:1b:1d:15:aa:24:
bb:9d:4c:3f:41:db:38:90:20:e8:9f:4d:74:a7:55:
46:d3:89:b7:d3:c1:22:fb:9e:87:81:64:b4:6d:61:
01:66:70:65:93:43:5b:ae:57:55:b3:fb:00:8a:84:
6b:e8:48:e4:54:cc:d6:84:a9:8e:29:0f:5f:b5:7e:
b1:de:08:48:4c:7c:74:13:57:82:92:38:55:ba:c6:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:66:D2:AB:8F:3A:D5:D7:D9:AD:3C:F5:FA:FE:FB:E4:0A:32:0A:2F
X509v3 Authority Key Identifier:
keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:38:8c:77:f0:fe:e8:fb:f3:a9:77:9f:6c:8f:4e:a7:02:70:
02:50:c8:d2:e5:eb:67:41:53:6f:1a:1d:e1:4d:06:28:ac:e5:
9e:18:ae:35:2d:eb:97:ec:ff:2a:13:5e:1b:59:1a:e4:ac:7f:
03:d6:bc:63:55:7a:79:f1:83:0b:db:7d:c0:d1:3b:d7:a5:03:
9d:70:c0:21:59:76:94:b7:d2:5f:e9:ea:e9:a3:4b:de:17:af:
76:21:b4:20:73:12:9a:a7:a0:38:1f:e7:ce:e6:86:e2:4d:74:
fb:ef:86:1c:aa:e8:21:c9:99:a4:8c:ad:0b:23:6a:7f:da:12:
6a:d8:bd:b8:6d:9f:8a:ff:6f:ee:cc:6a:0a:32:ad:da:d6:f3:
71:78:47:90:ab:58:6e:18:96:a3:27:70:8d:a9:41:94:4d:67:
7f:8c:5d:6c:35:e8:ca:2d:98:48:e0:4c:f5:d5:99:68:74:66:
8a:98:7f:cd:e7:fb:c8:76:5f:42:8e:96:fc:bf:15:23:da:dd:
01:53:d9:d0:18:a4:39:85:91:75:18:76:42:d9:65:d6:40:d9:
05:35:ad:4a:32:c5:a0:07:a9:c7:dd:71:00:ba:08:cc:2c:da:
fd:b4:36:a3:af:b6:b3:8d:8b:c5:86:0f:e6:a5:cd:3d:d8:9b:
ab:1e:be:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:12:15 2026 by rpki-client