Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
File: 758eOCZUELPCqSLTFpxPKZUUGi0.mft (raw, json)
Hash identifier: R3KZGiqNZqeetV+dheyALdzVMyVIwFwgPAfoTSeKMOo=
Subject key identifier: 2A:86:69:53:5B:6C:27:C9:6C:96:84:9E:63:B3:46:8F:7C:60:35:B9
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 019D39AF332C99B3E65A8082514542CE9C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 13:01:16 +0000
Manifest this update: Sun 29 Mar 2026 13:01:16 +0000
Manifest next update: Mon 30 Mar 2026 13:01:16 +0000
Files and hashes: 1: 758eOCZUELPCqSLTFpxPKZUUGi0.crl (hash: 0hX/jNHj9DyZpAPYPH9P4aPIScW1eXmRTMYyg+PXAyk=)
2: 7afSaJeXTCollCHN92-j5ruro3g.roa (hash: U7fDJhL6Fntfyj/dBu5uc4DpkdkXOo48kYJYYcKfr3A=)
3: c7SmcG0jQGOmeSqLLR4tVTGoYm4.roa (hash: O+x91RGxwKM6vifoTp5GEC0/Tzkm1Fv8zuwXUgnHXl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:33:2c:99:b3:e6:5a:80:82:51:45:42:ce:9c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: Mar 29 13:01:16 2026 GMT
Not After : Mar 30 13:01:16 2026 GMT
Subject: CN=2a8669535b6c27c96c96849e63b3468f7c6035b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:28:1f:59:6f:73:80:a7:16:ef:ec:b1:89:a5:
13:b8:a0:1c:f6:6b:c3:46:c4:60:07:b5:c1:d3:f5:
9f:94:26:4f:db:50:3c:9d:b3:f7:b9:50:0e:4d:c2:
c3:03:97:40:77:27:65:5d:e4:84:ff:9b:21:e2:05:
4d:8b:0d:fe:de:49:33:a3:95:16:65:76:19:6b:a4:
d1:b1:57:14:28:25:da:4d:18:53:25:fb:86:46:9b:
65:9b:0b:e8:a2:ed:79:28:5e:d3:05:1c:a9:98:c9:
ad:d5:3b:a3:5f:10:5f:aa:89:69:ae:88:1a:41:2b:
b1:35:f9:27:60:46:8d:6f:30:eb:ed:70:de:26:88:
d3:c0:41:07:5b:60:48:5a:3c:cc:b0:ba:3d:c1:b1:
f6:03:21:38:3b:24:b6:c2:99:ff:c1:22:77:dd:25:
e7:e1:93:6b:61:b7:c8:6c:d0:06:af:43:d8:69:03:
91:32:b2:78:4c:31:95:c2:53:c4:0d:45:d4:3b:8f:
55:dd:a4:85:af:11:51:2c:f5:a3:d0:04:7d:ac:a1:
06:f0:10:4f:1f:6c:01:54:1a:e0:ab:42:6a:df:8e:
0f:f1:09:5d:d7:6d:70:f1:5e:a2:7e:3c:ed:1c:87:
16:0a:06:39:7b:f3:29:26:4a:4d:a1:a3:db:83:8d:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:86:69:53:5B:6C:27:C9:6C:96:84:9E:63:B3:46:8F:7C:60:35:B9
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:85:ba:7c:cb:cf:43:43:3d:c2:d3:0e:2f:63:eb:a0:4f:d1:
1e:9d:e3:a7:85:16:2c:6a:47:68:e8:27:65:f8:e0:30:23:1f:
bf:f9:7d:c8:13:2a:37:68:7e:a0:13:05:ac:f7:55:42:fc:0d:
10:d5:94:bf:14:61:ea:1d:69:d2:24:3f:44:ee:fc:e7:d1:07:
94:e7:6a:15:a2:0e:c9:c5:28:0b:08:be:79:27:13:90:95:6d:
91:d5:3c:fa:f5:de:1f:ac:ba:52:59:0f:35:5e:50:47:5c:ca:
50:1d:ae:0a:d2:cb:f8:6b:d3:bc:4d:5f:9d:cc:f0:96:fc:6f:
47:ba:c6:0f:3d:22:9b:1c:b5:cf:9f:f0:ab:32:b0:d7:24:f1:
8a:43:56:24:ec:74:22:99:2b:2a:8f:25:94:ef:c5:ff:98:b6:
6f:aa:b1:bd:e8:ff:85:ef:fc:af:9f:d5:eb:ef:7c:41:ac:48:
a4:86:b8:57:8e:e1:34:cc:5a:bb:03:6f:24:56:52:8b:3d:4c:
90:0c:98:be:53:c6:e6:41:a0:23:9a:3f:e5:62:e9:24:2f:98:
9e:c6:de:4d:15:d8:49:fb:fd:a3:f0:ef:63:1e:8c:d1:f4:74:
95:4c:74:32:26:00:ba:f3:ae:16:97:95:2f:b1:5c:94:7b:69:
4f:ed:c0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:41 2026 by rpki-client