Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
File: 75pS4318rMafjv78dTO8CxjLXmc.mft (raw, json)
Hash identifier: QQAcVEUz5mZaqvaMkppjQeieaXRlA+wwicV47mIS6sA=
Subject key identifier: 55:BF:36:B5:0E:E8:E5:07:C4:CB:1E:AC:4F:70:47:0D:54:FB:B9:95
Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
Certificate issuer: /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Certificate serial: 019CE3DA5AB311661F9610D93F7184050059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
Manifest number: 0A25
Signing time: Thu 12 Mar 2026 21:01:03 +0000
Manifest this update: Thu 12 Mar 2026 21:01:03 +0000
Manifest next update: Fri 13 Mar 2026 21:01:03 +0000
Files and hashes: 1: 75pS4318rMafjv78dTO8CxjLXmc.crl (hash: 6PVCTVRql3l3itV5dhvV8rurnEHZ/WJoCT2y+1VMSmE=)
2: DGYXYWLKOeu5jzMoeESZW6Y77nY.roa (hash: NEwVDGeOxuD3CwmTZN1xHgpekj6E23kVoku+iTke+5k=)
3: h1r4ZumAOZuwV9fE7OfAlVgJv4A.roa (hash: boWg3/ilHJUif1jBV2hi//oKfIFrSzEio17woe1bvV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:5a:b3:11:66:1f:96:10:d9:3f:71:84:05:00:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Validity
Not Before: Mar 12 21:01:03 2026 GMT
Not After : Mar 13 21:01:03 2026 GMT
Subject: CN=55bf36b50ee8e507c4cb1eac4f70470d54fbb995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8f:43:7c:62:45:a1:4c:1f:6d:69:9f:94:79:
f7:cf:c9:7a:c4:b2:ee:ec:25:81:1d:3f:e3:21:0f:
69:d1:0d:a5:dd:62:1b:81:a8:17:35:f8:cc:92:d9:
b3:7f:60:a0:9d:3b:6c:a7:68:7b:a9:3d:58:ee:ed:
f8:d8:74:46:48:b1:1b:5b:bb:19:ed:b2:24:25:19:
e8:e8:07:70:25:ec:fe:82:7f:32:ec:31:e0:b0:de:
53:5a:8e:4b:4f:9f:aa:26:37:42:b1:9f:50:0e:b9:
9c:34:8a:13:15:19:6e:9b:0e:a2:3b:d0:d5:0a:42:
fb:7c:f0:7d:eb:e2:b9:31:e7:17:46:bd:79:c4:23:
a7:d7:48:41:47:e1:14:8b:33:ac:21:1d:b6:78:42:
10:4a:15:22:b3:3a:f0:b6:b8:e9:94:b6:9f:7f:bc:
c5:8a:f3:c1:0c:37:0b:30:7d:34:53:8c:e2:6a:75:
cb:17:6c:bc:23:18:81:22:d2:b7:29:73:7f:6b:d6:
89:15:a9:05:2a:aa:ba:f7:cb:b3:f3:ff:1f:2c:ad:
c2:b8:0f:3d:78:f3:12:e1:82:fc:a9:63:16:74:84:
c0:dc:af:c1:28:0c:0f:73:46:e9:66:ac:a4:78:6f:
91:48:28:e3:61:b7:fe:61:62:6a:28:f5:c2:da:54:
46:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BF:36:B5:0E:E8:E5:07:C4:CB:1E:AC:4F:70:47:0D:54:FB:B9:95
X509v3 Authority Key Identifier:
keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:81:8a:0f:f2:99:a2:b8:70:b3:e2:a7:b6:82:21:6b:58:90:
80:82:88:3a:15:2a:b9:3a:2f:8e:f4:f8:d5:c0:1d:40:9d:54:
b3:89:9a:81:e6:ef:dd:1a:a1:90:77:55:9a:b1:39:9b:14:0d:
e3:c2:35:73:4c:bf:1e:d8:53:81:97:99:54:01:18:cc:14:0d:
1e:45:27:0e:ba:08:a9:aa:d8:9d:7a:17:3e:09:f3:1e:e5:73:
b6:5a:8e:a8:3a:4a:4d:86:83:b5:ee:38:b5:2d:9d:08:a3:99:
8a:c1:91:27:15:2b:a3:58:04:6a:35:75:f8:55:3e:b8:8b:9a:
b5:c1:95:db:1b:d7:47:90:cd:97:73:0c:46:3d:74:7e:aa:ac:
14:0b:f0:44:21:a6:f9:49:81:17:a9:6e:56:04:54:b2:7f:a4:
b2:66:1f:c1:d0:7f:77:1b:b9:1c:25:cf:8f:9e:01:76:ca:1f:
a6:44:26:0e:0b:52:1d:72:19:86:57:0b:08:66:4c:37:97:6f:
76:ca:50:56:87:53:2a:1a:4d:00:f9:5e:d4:b5:24:1b:d7:73:
81:79:3a:b8:64:63:ff:80:11:30:f6:40:a8:cb:46:e2:43:be:
3e:65:f3:3e:59:b6:97:d5:ce:83:f9:27:78:8c:68:6c:07:39:
46:e0:92:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:27:19 2026 by rpki-client