Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
File: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json)
Hash identifier: fWHdTBouhJ1LOtFDy0hg8ENhBcxnHjDTAKAvJXXq86s=
Subject key identifier: F0:B2:17:20:AA:EC:AD:53:C3:33:28:13:1B:A5:3F:50:22:15:5A:C3
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Certificate issuer: /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial: 019FA1F1F3113743A62755544C772D31A0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
Manifest number: 194F
Signing time: Mon 27 Jul 2026 05:00:15 +0000
Manifest this update: Mon 27 Jul 2026 05:00:15 +0000
Manifest next update: Tue 28 Jul 2026 05:00:15 +0000
Files and hashes: 1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: xvpwRogLlmdBa42vJpe1mSszKDtZGq9r/lr4tBD8IVw=)
2: XTqrU8Fe3dyCsrhN-j7VCGJxXio.roa (hash: f4c8Huch2WTliXq5MFgPvjqV6741k9rGMrHBDUOfaY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f1:f3:11:37:43:a6:27:55:54:4c:77:2d:31:a0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Validity
Not Before: Jul 27 05:00:15 2026 GMT
Not After : Jul 28 05:00:15 2026 GMT
Subject: CN=f0b21720aaecad53c33328131ba53f5022155ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:c1:cc:77:66:43:68:8c:8f:34:70:93:d2:
99:c2:80:3d:68:f9:75:cc:f7:a3:d6:89:4a:d9:ad:
ff:ae:c2:8b:09:64:cc:75:de:ae:66:66:6a:43:01:
bf:fe:4f:6d:4b:f0:59:78:9e:3e:1f:b4:c8:e4:e7:
19:d0:bc:9d:9e:20:29:a3:85:d5:b8:97:c9:1a:e3:
41:12:7b:10:f1:5e:fe:50:b0:cf:63:6c:ce:b0:f9:
32:b6:b5:fe:0d:75:4c:b6:9a:91:4b:df:a8:7e:3d:
43:13:f3:c0:54:d8:d8:34:71:44:28:b8:ed:14:6e:
7d:67:78:e0:6a:77:fb:ce:06:95:ce:34:0b:0e:22:
d4:2b:bf:a8:00:68:6f:48:7b:43:3f:bc:0e:07:2b:
e4:97:0d:59:3c:d3:3c:e3:52:59:b2:18:91:23:08:
fe:e0:22:7f:50:a2:d2:14:3a:45:cd:34:4b:de:a9:
d7:f0:d6:15:d5:03:80:dc:c9:19:28:ee:31:bb:7d:
e9:29:58:22:c1:eb:0b:11:ca:3a:83:df:4f:a3:a6:
43:8e:7d:3f:66:f5:be:0c:b1:43:63:62:fd:12:e0:
b7:00:4e:be:d7:f1:34:c3:97:47:c8:cb:ed:4c:3b:
38:6d:32:a0:4a:cc:96:84:5f:3d:48:32:93:cf:3e:
44:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B2:17:20:AA:EC:AD:53:C3:33:28:13:1B:A5:3F:50:22:15:5A:C3
X509v3 Authority Key Identifier:
keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bc:97:4f:97:13:a9:4e:27:62:9e:bb:d7:c8:87:ac:2e:2c:
a9:a4:fe:96:f4:8d:b6:86:06:00:55:32:8c:a4:40:58:8b:e5:
af:a2:7d:67:86:cf:fd:96:8b:f9:25:3b:92:ad:3a:2d:4b:cb:
49:8f:ec:10:d4:a5:6a:12:d9:ce:7a:2a:9d:22:c9:fa:c4:1e:
c1:e5:c8:9d:dc:28:b2:fb:99:d5:01:6c:24:bc:fb:34:b4:b3:
70:70:c3:bc:93:80:42:e9:39:e7:9c:58:c8:86:4f:b2:00:28:
ad:54:ba:95:13:35:9e:b8:90:84:f2:65:49:08:64:80:df:c8:
10:ae:14:3a:85:f3:98:10:2f:b5:f1:4c:53:14:db:e1:3e:db:
8c:59:21:2e:8a:23:b0:f9:17:24:95:81:fe:69:21:2e:0c:9c:
d1:cc:5b:5c:bf:4b:1b:60:ab:d9:b8:b5:c2:86:c8:a5:17:4a:
7b:a3:08:dc:0a:35:1d:2d:f1:50:49:f4:a9:27:4e:91:47:92:
96:1a:ce:c7:7e:04:3c:b6:97:e4:ae:ba:83:9d:54:cc:c1:02:
05:b7:2f:2e:3d:c5:9c:4e:01:d9:c1:f2:f4:68:be:ab:fb:1a:
25:5b:cc:45:20:bd:d0:c7:eb:1b:10:15:63:ce:b9:ed:76:9d:
5d:79:9f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:01:32 2026 by rpki-client