Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
File: 758eOCZUELPCqSLTFpxPKZUUGi0.mft (raw, json)
Hash identifier: Lbv5/G94XJGaKB95Qg2w3/lZK4LJbTb/9BPacH3ApsI=
Subject key identifier: 08:07:3C:94:8B:F7:BF:21:45:5D:91:B7:5B:5D:2A:55:E6:56:59:0E
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 01A001DD3C0ECBC02596905475FD816EBCBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
Manifest number: 1A07
Signing time: Fri 14 Aug 2026 20:01:10 +0000
Manifest this update: Fri 14 Aug 2026 20:01:10 +0000
Manifest next update: Sat 15 Aug 2026 20:01:10 +0000
Files and hashes: 1: 758eOCZUELPCqSLTFpxPKZUUGi0.crl (hash: 3zHChRmT8Fsi9I35sQyxjeIR7JltodDoRuZu+JWIHXU=)
2: YbvuxNmEM9puc_pD09f_17c_b3Q.roa (hash: 0UC1RMCMv7LFWJ7ffAC3hAFesoaiWMs9jBqK2lLJPHk=)
3: wlbCQCbrUI3SxwZA5HNQA0HGepg.roa (hash: zmsKMPohzvqVP0YR0GOcciBU4GmXvtoj3886J28B8bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:3c:0e:cb:c0:25:96:90:54:75:fd:81:6e:bc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: Aug 14 20:01:10 2026 GMT
Not After : Aug 15 20:01:10 2026 GMT
Subject: CN=08073c948bf7bf21455d91b75b5d2a55e656590e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:65:b4:e0:c8:76:09:f9:35:65:17:fc:af:
e2:0e:2c:c8:46:fb:b0:7c:2f:6f:8d:db:57:b3:ca:
29:bc:43:34:16:5d:49:77:98:1b:12:5d:b1:9b:44:
87:14:8c:94:16:78:31:02:ed:55:70:95:9c:55:9e:
d2:47:73:60:dc:61:2a:4c:89:4f:82:16:f9:cb:44:
2f:8c:5c:21:20:ec:a1:c1:5b:98:a4:2d:39:fe:0e:
ff:92:da:3f:4f:43:f5:94:6e:04:cb:7e:7e:36:ab:
d4:cb:14:cb:96:bf:52:71:af:8d:92:5a:6f:d6:af:
2f:d3:01:bb:8f:e7:ff:fe:c1:4b:d5:bb:2e:5d:43:
0f:3f:a7:10:ad:29:bb:64:8c:3d:3a:9a:44:7d:98:
3b:e7:d2:95:bc:12:6d:61:49:82:d9:df:22:ba:17:
e1:3f:82:87:2a:3c:83:fe:fb:11:eb:24:ba:bc:51:
2b:ae:c8:be:56:2b:02:69:89:57:84:68:1c:3c:74:
b4:16:9b:a0:d8:16:e7:6d:8e:cb:e5:a9:1e:15:8a:
09:04:38:4a:07:42:2e:ba:5e:50:96:47:df:3f:23:
1b:a3:fd:e3:f4:f0:c4:30:12:9b:d0:8e:61:6b:41:
f6:9c:e2:8c:00:19:27:5e:6a:4d:b7:5c:78:cd:c0:
17:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:07:3C:94:8B:F7:BF:21:45:5D:91:B7:5B:5D:2A:55:E6:56:59:0E
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fc:0c:62:1f:53:4e:ec:33:f5:59:e9:10:cb:4e:43:23:1d:
6f:ae:39:4f:8b:80:ff:0f:cf:6f:eb:39:b8:59:67:c4:37:aa:
2e:fe:d9:ad:e4:d3:10:a4:b6:14:52:e2:62:67:4b:66:c2:d1:
b7:1b:e2:d2:a4:05:3a:3c:40:4a:3a:4b:0b:4a:87:e1:22:65:
a5:1c:9a:b8:64:45:d6:7a:25:2c:5a:e1:19:d3:f3:af:c4:af:
af:46:68:40:a3:69:d2:64:d3:1d:05:ce:e4:52:44:77:4f:78:
a6:fb:2b:36:8b:3d:5a:22:9d:5f:a9:87:db:b4:b9:a0:43:1e:
0d:86:51:7c:a0:9b:8a:53:17:dd:49:4a:5c:c8:70:f0:f3:4a:
e9:35:4a:a8:a0:59:66:09:09:1c:43:72:0f:a1:3c:8c:5d:99:
38:22:9e:3f:ac:8a:59:92:27:82:22:c0:59:4c:d2:4e:a1:81:
df:36:a6:71:64:3f:1e:e6:bd:c0:74:bd:99:59:e0:4f:94:29:
ea:92:84:45:68:ad:bf:a3:d2:5c:a3:2a:65:da:08:aa:a1:69:
19:a2:e4:7b:d4:1b:b1:28:81:40:18:7f:87:50:20:ff:0c:a6:
28:6a:2e:e6:c8:33:e7:be:53:9e:ff:f4:0b:69:99:dc:2a:96:
73:9b:59:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:23:13 2026 by rpki-client