Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
File: eXfk4sKqJsENBx-hBFwTHm0WD3A.mft (raw, json)
Hash identifier: I1IcNC6h+LqW2PXyrVpI/8d1FNTPTA+uqI5DeuxZIt0=
Subject key identifier: 32:D1:C6:9A:B1:5B:13:AB:88:4A:94:E8:5D:92:05:23:00:CD:21:04
Authority key identifier: 79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
Certificate issuer: /CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Certificate serial: 019F70CF3C761CB4A90790DC75EC538D6E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
Manifest number: 026E
Signing time: Fri 17 Jul 2026 16:00:57 +0000
Manifest this update: Fri 17 Jul 2026 16:00:57 +0000
Manifest next update: Sat 18 Jul 2026 16:00:57 +0000
Files and hashes: 1: Fw8PMiL8XbMvdKq8X17Je2tMF2E.roa (hash: NpJsXlY3046ddjEeyCOq10eq8sScmSmiV1XiKlKV9B0=)
2: eXfk4sKqJsENBx-hBFwTHm0WD3A.crl (hash: lKwRqq5XIpyXpFxB8undZ57NIu5Rs8Fpt4p7IYJstQA=)
3: gX53hGvI2Ikan8CxxCyuf_vZ79I.roa (hash: 4mcjc+KxmF9esYxAnrxtXO1FlJlFgCD8tZbz9RIGOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:cf:3c:76:1c:b4:a9:07:90:dc:75:ec:53:8d:6e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Validity
Not Before: Jul 17 16:00:57 2026 GMT
Not After : Jul 18 16:00:57 2026 GMT
Subject: CN=32d1c69ab15b13ab884a94e85d92052300cd2104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:69:bb:ab:06:ef:2c:76:5a:0e:97:41:62:6d:
a4:00:3f:2f:ce:69:15:cd:cb:90:26:9c:95:f3:07:
75:fb:82:47:13:7b:ca:84:eb:17:98:4e:cc:87:76:
f8:58:79:24:8b:98:1c:eb:6c:38:1b:dd:99:be:54:
72:06:5d:7b:9f:91:a0:bb:31:f6:45:01:89:9c:7b:
04:a4:48:91:0e:7e:22:23:fc:80:de:84:e7:de:d5:
a2:67:51:3b:6c:b0:d1:ae:6b:54:36:9f:99:ff:cd:
1d:5d:47:4b:a8:68:20:a8:75:d3:0c:53:dd:b3:79:
55:0f:f9:46:c5:50:02:76:07:4a:91:81:2b:a0:f6:
33:7f:06:22:3d:9b:75:56:c1:85:fa:b4:29:e8:a7:
b1:8b:e3:ca:e1:eb:7d:82:09:22:55:9f:82:95:80:
1b:2c:82:98:bf:da:22:8b:4a:8d:90:b3:64:02:5e:
e0:be:be:43:14:a2:54:61:dc:aa:7f:6b:16:3b:4b:
18:81:9e:8f:32:7d:6a:80:c6:58:2b:84:fc:62:92:
77:b2:38:48:90:e7:85:ad:a5:b6:17:64:ca:d2:98:
61:97:c2:5b:c1:2e:52:19:8e:3d:4b:e0:7f:97:87:
67:fd:0b:3f:42:50:8a:eb:00:95:08:da:3a:36:93:
28:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D1:C6:9A:B1:5B:13:AB:88:4A:94:E8:5D:92:05:23:00:CD:21:04
X509v3 Authority Key Identifier:
keyid:79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7e:e4:85:73:be:f6:a2:c6:0e:c0:1c:99:c1:cf:01:66:ed:
a5:e2:d2:c9:aa:74:dd:ff:c2:16:e0:44:a9:12:2f:e4:09:f2:
59:58:df:6f:1f:59:6d:30:f7:21:2f:a5:3b:c0:fb:b6:be:fd:
92:9e:4e:ab:f5:0c:1a:3c:8a:4c:80:c9:d7:a1:95:5d:23:5c:
7d:c2:2f:a5:1e:aa:c4:1e:11:1f:6b:a5:5d:97:58:6e:bb:88:
39:d6:cd:87:31:51:fe:23:4a:04:f5:1c:70:1d:01:62:2d:e5:
7c:5f:43:04:dc:12:db:9e:72:65:79:b6:a8:0e:2e:fc:fa:46:
9f:63:f5:b2:24:af:75:36:9b:3c:39:27:3b:c2:36:13:5f:04:
ce:8f:04:91:cb:d9:e7:d6:b9:5f:28:89:19:9c:fc:69:0e:df:
c6:f1:05:63:87:91:65:13:fc:61:a1:25:4d:31:72:51:75:22:
41:91:49:17:84:a9:89:d9:a5:e6:5e:12:19:40:8b:93:79:2b:
59:52:5c:e4:76:d2:9c:a7:47:4d:2d:13:62:9e:62:4d:9e:60:
6d:9a:63:e8:f6:a6:50:56:2a:0f:31:93:7f:29:23:ed:46:9a:
12:50:64:32:4d:59:c2:37:8b:38:ac:63:a1:da:b9:1c:eb:36:
ca:34:6e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:50:42 2026 by rpki-client