Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
File: 758eOCZUELPCqSLTFpxPKZUUGi0.mft (raw, json)
Hash identifier: K4syPCh858Vg4aMWvL//oQIlyxQXzVTJhmQ8qXsxudI=
Subject key identifier: B1:03:57:A8:49:D4:EA:D6:B3:61:02:85:8F:CB:54:B0:9F:D6:86:33
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 019E3117AB7041F6F4B5D1C26C26123CE41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
Manifest number: 1916
Signing time: Sat 16 May 2026 14:01:35 +0000
Manifest this update: Sat 16 May 2026 14:01:35 +0000
Manifest next update: Sun 17 May 2026 14:01:35 +0000
Files and hashes: 1: 758eOCZUELPCqSLTFpxPKZUUGi0.crl (hash: /oa9/LfMBybbqVqL4X3cmToyHl+f1fytJpXkMIPFvQk=)
2: 7afSaJeXTCollCHN92-j5ruro3g.roa (hash: U7fDJhL6Fntfyj/dBu5uc4DpkdkXOo48kYJYYcKfr3A=)
3: YbvuxNmEM9puc_pD09f_17c_b3Q.roa (hash: 0UC1RMCMv7LFWJ7ffAC3hAFesoaiWMs9jBqK2lLJPHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:ab:70:41:f6:f4:b5:d1:c2:6c:26:12:3c:e4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: May 16 14:01:35 2026 GMT
Not After : May 17 14:01:35 2026 GMT
Subject: CN=b10357a849d4ead6b36102858fcb54b09fd68633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:2d:0b:62:92:50:8f:0f:f3:e3:03:9c:27:
55:ef:99:dc:20:47:ad:8d:98:c4:d0:f0:e3:0f:12:
18:d0:34:f6:ad:fb:1b:07:a8:a6:9f:5c:bf:2b:56:
03:48:24:b1:6e:eb:ff:9f:da:68:a3:a0:f6:83:9e:
4c:ad:84:91:e5:d5:d2:98:27:fc:9a:1b:33:bd:46:
0e:6e:ec:06:4c:dc:96:bf:81:75:b9:61:46:da:b2:
9d:8c:6f:eb:64:de:5c:30:8e:48:de:e1:ba:6f:c9:
26:e3:fb:4f:d8:6b:47:04:6c:62:18:13:3d:47:43:
f7:65:48:7b:60:b2:44:6d:3f:61:3b:76:3b:37:68:
a1:bd:90:c3:18:ab:18:f5:4f:a4:90:3f:7e:49:0a:
88:69:56:8a:71:87:b8:d7:02:75:5b:7b:26:74:02:
f3:67:d9:8e:ff:75:95:e0:87:a2:9d:f4:2a:3a:7e:
4c:9b:b9:3e:5f:df:9d:af:eb:f4:10:df:3b:60:e5:
55:af:67:a1:af:84:9b:85:2e:c0:ad:41:f6:7c:6d:
ba:e1:ad:89:89:58:92:89:8a:8e:82:9d:8b:2c:96:
63:5d:60:1d:49:48:f1:1b:11:95:40:16:61:c1:ce:
9b:f5:2d:9f:a6:a0:8f:f0:ea:1c:8e:d8:89:e8:61:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:03:57:A8:49:D4:EA:D6:B3:61:02:85:8F:CB:54:B0:9F:D6:86:33
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f6:42:22:95:a2:b9:04:f8:65:6a:d8:a5:54:b8:0d:ca:5c:
1b:ea:da:09:31:60:8a:23:55:09:74:d6:f6:04:2b:e5:08:8e:
e7:db:66:8e:83:65:20:c0:9a:fa:00:16:1c:fb:89:41:98:2b:
b5:4f:eb:5f:b3:ac:bd:15:b6:07:24:82:9e:66:09:58:ae:7b:
ac:4d:86:74:17:38:96:c5:02:eb:b2:d6:3b:4b:d3:b2:e9:83:
28:49:e5:c4:32:64:44:63:1c:35:1a:70:68:e4:3a:e3:23:4c:
06:a5:45:fe:a2:19:7a:31:78:84:2d:6a:ff:b2:b5:f2:8b:2f:
a5:28:e4:8a:12:2e:91:0b:11:d5:0a:2a:29:57:96:ad:b1:ae:
48:11:6f:5d:69:89:fa:cc:47:c0:d6:fd:3a:43:29:3b:ee:91:
0f:72:d8:9b:91:39:9b:00:40:ef:f9:d4:ac:4b:a3:16:d3:a4:
f9:ef:13:3b:01:fa:6f:bf:09:66:db:6b:ba:77:50:9a:46:63:
70:16:1e:ee:e9:f9:8d:f9:86:d1:c8:b5:18:6d:c5:ea:c7:fe:
db:63:d2:62:11:66:dc:40:75:80:93:bb:86:3e:02:7d:e4:3e:
34:0f:c7:be:83:11:72:03:76:cd:90:94:e6:d6:6d:c4:4b:be:
8f:90:33:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:39 2026 by rpki-client