Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
File: eXfk4sKqJsENBx-hBFwTHm0WD3A.mft (raw, json)
Hash identifier: XEgfji7dqq9ipw/zVuJwTPzbwmLUPBcNPGsHioXwTDo=
Subject key identifier: 03:D6:68:48:F8:53:A0:A8:07:F6:9E:AA:99:75:13:B8:0B:BE:16:D4
Authority key identifier: 79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
Certificate issuer: /CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Certificate serial: 019E7D7A7F5E34C49C86AAC78AA8AF156191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
Manifest number: 01F0
Signing time: Sun 31 May 2026 10:00:40 +0000
Manifest this update: Sun 31 May 2026 10:00:40 +0000
Manifest next update: Mon 01 Jun 2026 10:00:40 +0000
Files and hashes: 1: Fw8PMiL8XbMvdKq8X17Je2tMF2E.roa (hash: NpJsXlY3046ddjEeyCOq10eq8sScmSmiV1XiKlKV9B0=)
2: eXfk4sKqJsENBx-hBFwTHm0WD3A.crl (hash: lLGRfP2O19Fu1KE1gTLJcFvEf5lcvDxqmyYyCUG/1jo=)
3: gX53hGvI2Ikan8CxxCyuf_vZ79I.roa (hash: 4mcjc+KxmF9esYxAnrxtXO1FlJlFgCD8tZbz9RIGOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7d:7a:7f:5e:34:c4:9c:86:aa:c7:8a:a8:af:15:61:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Validity
Not Before: May 31 10:00:40 2026 GMT
Not After : Jun 1 10:00:40 2026 GMT
Subject: CN=03d66848f853a0a807f69eaa997513b80bbe16d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3e:a7:b2:00:38:b4:29:9a:01:b9:cb:34:95:
d7:ae:bb:c2:13:c5:9e:bd:35:75:a6:3c:e5:04:b8:
de:a8:08:59:07:e5:62:96:86:8a:ba:0a:5c:30:d6:
98:aa:7f:d0:e8:ab:ca:f5:af:dc:bd:0b:61:09:43:
12:4f:51:26:c8:d8:0c:f1:e5:1c:64:64:3b:26:4f:
38:ba:09:40:54:37:98:05:d0:6a:74:d6:8c:86:19:
25:f3:d2:db:b0:5f:08:8b:e9:f0:1f:5c:66:b0:45:
1b:22:af:af:5d:8f:85:36:d3:a7:00:d2:75:b4:7e:
64:e2:b6:23:5f:02:6f:c2:c6:4e:9d:79:bf:d3:0f:
f8:9c:47:c3:35:3c:f5:5e:55:59:a9:e2:22:0c:6b:
34:5b:9a:dc:bf:94:6a:f1:32:9c:98:34:0f:c5:8a:
cf:9a:10:3c:e5:78:41:6c:01:87:85:99:a3:14:0a:
08:56:9c:19:68:7b:4e:29:da:64:59:7b:6c:d3:e4:
81:9e:f8:ca:23:61:d5:52:2d:ee:14:36:3b:cd:a2:
b5:38:04:51:5d:b3:8c:23:f5:eb:c1:cf:ef:e4:63:
8c:5f:90:c7:0e:c3:8a:46:14:64:a0:1d:96:0c:b5:
79:f0:30:7b:85:4b:e2:cf:39:ea:5a:ea:0f:35:0b:
0d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D6:68:48:F8:53:A0:A8:07:F6:9E:AA:99:75:13:B8:0B:BE:16:D4
X509v3 Authority Key Identifier:
keyid:79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:14:26:50:dd:af:ac:19:f8:6c:5f:2e:30:ec:29:d2:27:1b:
fc:51:3e:81:66:8e:77:4a:a7:bd:c4:67:60:f4:33:89:54:c2:
9d:04:a5:35:b3:dc:f6:a6:af:f7:cd:71:59:48:1c:c0:d5:e4:
53:af:4d:77:39:00:ef:69:6b:f3:e5:06:22:ea:48:81:4e:83:
5c:b9:07:ae:1c:4c:57:7c:2c:37:43:64:b1:d3:8d:fc:6c:eb:
9a:6b:59:36:d7:48:d7:1b:a2:50:e0:f8:ea:e8:22:eb:58:aa:
66:b9:90:a3:59:a5:4a:0e:5f:a2:a0:37:64:fe:bd:c7:7c:c8:
36:22:26:8c:b9:da:be:29:3a:2b:6c:a8:e7:58:93:3d:57:78:
37:35:c4:c1:fb:14:36:40:c4:db:f9:38:6b:f8:22:72:ce:40:
08:02:1d:35:a6:1d:ab:bf:d2:c7:cd:63:5a:6c:98:84:ed:9e:
ed:ec:fd:20:a0:75:93:d0:1d:4c:01:e1:48:a7:35:8e:c8:0b:
df:50:4a:c1:1c:63:86:af:c6:a2:33:05:6a:d3:5c:91:8d:26:
5d:2a:31:74:5d:79:8c:ae:ab:68:16:53:90:2d:f0:42:3d:d7:
a7:b9:6c:fb:d1:78:25:69:18:2e:be:37:67:ee:5d:8a:b8:26:
5c:88:e2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 14:23:52 2026 by rpki-client