
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
File: 758eOCZUELPCqSLTFpxPKZUUGi0.mft (raw, json)
Hash identifier: f7jZjPlcySvkvqrSpSBPXFJ6ncH7L5gA70aioMSYkaI=
Subject key identifier: B7:0F:78:B9:B1:42:43:A1:65:83:93:29:79:84:06:F1:D1:21:5E:48
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 01A13CA5609707F245D2F0CF887403BC13C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
Manifest number: 1AAA
Signing time: Wed 14 Oct 2026 23:00:33 +0000
Manifest this update: Wed 14 Oct 2026 23:00:33 +0000
Manifest next update: Thu 15 Oct 2026 23:00:33 +0000
Files and hashes: 1: 758eOCZUELPCqSLTFpxPKZUUGi0.crl (hash: lBSXHkweuvuQAD4Cw86rLj/S0yU9YUxP4m0UTT23iRM=)
2: YbvuxNmEM9puc_pD09f_17c_b3Q.roa (hash: 0UC1RMCMv7LFWJ7ffAC3hAFesoaiWMs9jBqK2lLJPHk=)
3: wlbCQCbrUI3SxwZA5HNQA0HGepg.roa (hash: zmsKMPohzvqVP0YR0GOcciBU4GmXvtoj3886J28B8bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:60:97:07:f2:45:d2:f0:cf:88:74:03:bc:13:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: Oct 14 23:00:33 2026 GMT
Not After : Oct 15 23:00:33 2026 GMT
Subject: CN=b70f78b9b14243a165839329798406f1d1215e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:35:97:b0:79:18:49:6f:56:f5:f1:59:72:
c6:02:a3:66:71:5a:10:d1:2f:9a:dc:37:39:47:7f:
2a:40:77:15:2c:cd:8e:7f:5f:8d:78:98:54:5c:55:
0c:71:c8:d7:b0:a5:19:fd:9d:25:b5:f8:17:69:6c:
1e:72:c4:cb:c8:58:72:16:c2:83:7f:06:d9:b3:6b:
e9:9c:98:14:a9:9d:70:64:81:53:d4:4c:f1:a5:c4:
d5:7a:6a:6a:8c:5b:5a:73:e7:97:26:19:0e:9f:a2:
f5:2f:d4:34:11:72:3b:23:64:c7:2a:e5:06:a3:b9:
56:ac:4f:e9:a6:c0:24:d7:52:b3:01:58:a9:56:a5:
e4:98:16:fa:4e:f7:0a:1f:61:34:9b:28:cb:f0:05:
2d:02:92:5a:21:67:9c:44:b5:e5:81:0d:ec:c2:1e:
c3:83:a7:d9:b8:a9:85:4d:86:71:42:c3:42:12:97:
f6:43:75:e3:aa:53:d3:fe:f2:5e:25:7d:04:78:18:
eb:8f:7f:78:de:9f:87:62:25:3b:4d:28:6e:3f:8b:
1c:0d:1f:f4:ab:0f:e9:a7:84:1b:ce:8b:0d:ef:54:
0d:f9:84:4b:7e:cb:2f:7d:38:13:eb:70:5c:25:a5:
8f:b4:c6:11:e8:f9:65:82:35:0e:26:30:27:b1:ad:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0F:78:B9:B1:42:43:A1:65:83:93:29:79:84:06:F1:D1:21:5E:48
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:53:37:1b:dd:2b:79:b8:3e:01:88:84:8b:7c:f6:97:76:0e:
91:8b:50:5b:12:36:01:58:84:45:c4:a6:b3:1a:2d:63:3b:1c:
94:74:f8:92:32:7d:d5:d2:13:81:15:af:34:a0:fa:da:46:33:
7a:4e:f2:30:b6:65:02:8a:ff:f1:00:d0:fa:17:ab:62:e1:16:
f6:ab:43:96:4f:e5:40:f5:3a:59:b8:31:0f:2f:0a:f3:6a:c5:
a1:f5:ee:65:2d:2c:3b:19:53:64:e0:81:8a:77:db:00:b0:53:
a6:52:21:7b:64:c5:ed:38:45:84:87:d4:af:d2:ee:40:1e:26:
43:d1:57:bb:3b:01:f1:b1:58:97:a9:e2:fd:98:92:07:1c:e8:
f1:98:0e:38:90:41:0a:62:73:d9:4e:76:9a:49:e9:0b:a5:76:
cd:37:5e:c7:f7:13:c3:5c:61:3e:98:fa:d3:8a:7a:8c:43:26:
aa:9b:3e:ce:a8:fe:1a:de:2d:39:49:b3:ca:36:bf:85:31:5b:
ae:f7:3f:37:cd:88:65:e2:a3:11:a8:b6:38:48:3c:4c:44:27:
f3:a4:05:43:5b:f2:73:90:9a:8e:38:5c:59:05:23:e3:cd:cb:
1f:dd:b9:7e:c0:cf:42:16:00:78:34:5a:7e:f0:04:df:f8:b3:
18:02:44:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:14:30 2026 by rpki-client