Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
File: 75pS4318rMafjv78dTO8CxjLXmc.mft (raw, json)
Hash identifier: o/PxmCLlp89wwlYJHSFaWTNPyOVbjdv4Z9PHlmpHxzs=
Subject key identifier: 8A:25:CB:F7:F3:B2:76:EF:12:D0:C8:12:32:C2:9C:38:39:A5:9A:90
Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
Certificate issuer: /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Certificate serial: 019FA0DF817986A37FC900B4387B70ACAF62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
Manifest number: 0B90
Signing time: Mon 27 Jul 2026 00:00:29 +0000
Manifest this update: Mon 27 Jul 2026 00:00:29 +0000
Manifest next update: Tue 28 Jul 2026 00:00:29 +0000
Files and hashes: 1: 75pS4318rMafjv78dTO8CxjLXmc.crl (hash: h6ZQ3eiGF8pv7KXCVhh3Qq4tol6xmVpXk+LX2NkUghQ=)
2: DGYXYWLKOeu5jzMoeESZW6Y77nY.roa (hash: NEwVDGeOxuD3CwmTZN1xHgpekj6E23kVoku+iTke+5k=)
3: h1r4ZumAOZuwV9fE7OfAlVgJv4A.roa (hash: boWg3/ilHJUif1jBV2hi//oKfIFrSzEio17woe1bvV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:81:79:86:a3:7f:c9:00:b4:38:7b:70:ac:af:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Validity
Not Before: Jul 27 00:00:29 2026 GMT
Not After : Jul 28 00:00:29 2026 GMT
Subject: CN=8a25cbf7f3b276ef12d0c81232c29c3839a59a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f2:a7:dd:c4:df:69:96:e9:04:41:02:db:7f:
14:f4:51:8d:ec:04:68:0b:d3:5f:a4:4e:14:f1:6b:
0e:60:b1:58:76:7f:c5:b1:34:61:94:0a:e3:d4:12:
72:f9:7a:6d:19:8e:b4:88:a0:cc:87:06:2f:76:46:
c0:74:52:87:cd:76:36:bf:af:11:db:eb:2e:c9:9d:
d3:8e:bd:76:cc:2c:54:03:d9:18:aa:2b:e5:5a:81:
5f:33:a7:ee:5f:65:7a:77:99:dc:f2:5f:9b:73:8c:
69:83:e3:5f:c8:23:5d:5d:fb:ce:f1:fe:e7:96:bc:
df:1c:92:77:d8:53:63:64:16:b1:70:ea:0a:35:07:
e9:22:bb:8f:6e:6e:6d:07:79:f5:95:96:ea:32:cf:
31:56:31:70:db:ca:62:97:3c:ee:46:80:31:30:b1:
fa:c4:ef:72:ac:c9:80:f1:a0:04:3a:9b:e5:e6:3e:
1d:8f:80:3c:90:c1:36:da:31:ad:ee:ae:c2:ad:a0:
13:c1:60:a0:23:63:c1:5b:4b:a9:55:0e:6b:1a:b8:
d8:e1:2b:33:a0:35:a4:1c:12:bc:b5:85:c1:15:c1:
10:0b:71:f3:9c:49:70:09:88:06:18:5a:f8:23:83:
5b:a1:c3:88:ce:47:aa:8b:c3:83:03:a9:fc:1f:26:
3f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:25:CB:F7:F3:B2:76:EF:12:D0:C8:12:32:C2:9C:38:39:A5:9A:90
X509v3 Authority Key Identifier:
keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:65:9a:52:d7:a3:62:d8:00:0c:9e:c0:36:8b:60:fc:b8:d2:
25:94:2d:6f:38:90:00:1a:d1:07:97:a2:3b:1c:f4:a0:45:1b:
20:63:79:b4:12:fa:a2:0f:cc:3b:1c:a7:4e:e0:dd:f5:9a:31:
dc:e0:f0:4b:0b:8a:05:54:bf:7b:af:7b:0c:94:e4:1e:c9:5d:
8f:22:3d:82:3d:fa:fc:9b:3c:60:7d:ea:ca:74:2f:17:9f:a5:
4f:bf:97:ba:04:bf:39:a7:94:ed:c5:79:db:64:3f:7c:27:7e:
b7:5d:92:d0:7d:59:88:bc:72:71:44:2c:01:4d:de:97:23:b0:
80:39:ff:55:a9:0d:2f:0c:92:90:4a:89:1a:e6:30:43:dc:03:
cc:e6:bb:c6:2a:78:21:00:d0:10:81:f9:3f:8b:ad:ee:68:ad:
ca:06:9a:bc:29:e4:06:49:d8:24:14:e9:1b:2d:8e:f5:a7:56:
73:fa:1e:6f:ad:5b:5f:65:e8:8f:0b:0d:a3:88:49:71:81:34:
c0:f7:8f:7f:fd:79:13:0a:49:fe:85:95:16:6c:e0:e0:32:e7:
c6:b3:58:af:7c:a5:42:57:e8:23:ce:20:70:c7:72:b8:60:bc:
69:56:37:14:6a:80:d1:a9:d4:3a:82:1d:a4:c1:17:21:3f:15:
ff:fc:60:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:22:39 2026 by rpki-client