Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
File: eXfk4sKqJsENBx-hBFwTHm0WD3A.mft (raw, json)
Hash identifier: X2MMOs465VNhK5pZFGsesVhfCt5UN90gaUYde16xY7Y=
Subject key identifier: F2:05:61:CB:B9:9E:EF:CB:5D:70:E5:23:16:F3:DF:7C:AE:07:43:84
Authority key identifier: 79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
Certificate issuer: /CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Certificate serial: 019CB881EEECBBDB3DEBC0A3D8CF5D8737E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
Manifest number: 0105
Signing time: Wed 04 Mar 2026 11:00:48 +0000
Manifest this update: Wed 04 Mar 2026 11:00:48 +0000
Manifest next update: Thu 05 Mar 2026 11:00:48 +0000
Files and hashes: 1: Fw8PMiL8XbMvdKq8X17Je2tMF2E.roa (hash: NpJsXlY3046ddjEeyCOq10eq8sScmSmiV1XiKlKV9B0=)
2: eXfk4sKqJsENBx-hBFwTHm0WD3A.crl (hash: jIoh5letvo8yYZQFX5jRdH4LvEgSsw5n5kUS/WDksNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:81:ee:ec:bb:db:3d:eb:c0:a3:d8:cf:5d:87:37:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Validity
Not Before: Mar 4 11:00:48 2026 GMT
Not After : Mar 5 11:00:48 2026 GMT
Subject: CN=f20561cbb99eefcb5d70e52316f3df7cae074384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:09:db:db:c5:13:b8:a0:79:dc:62:a0:2f:7c:
79:ba:94:e0:48:f9:3c:e3:e0:89:3c:86:ef:28:db:
75:8c:cf:f3:7d:de:41:a0:83:6c:1a:3d:ae:23:9a:
2a:03:85:0e:0d:e3:1a:83:94:bf:fd:29:dd:90:c6:
73:70:91:20:fa:15:9b:35:bb:c6:0b:94:8c:e8:7b:
19:9a:f0:cf:e3:ba:61:30:0c:df:8a:58:9e:65:43:
09:83:27:49:8f:6f:f1:c1:2c:b4:15:73:28:01:59:
64:03:1c:a1:04:49:36:76:ab:4f:cf:c2:65:2a:1d:
8d:6c:55:0d:3a:ed:b5:16:4d:e1:2c:d4:f0:17:a6:
0a:2e:42:fe:e6:0e:d8:0a:13:41:51:16:97:5d:20:
39:8d:d4:ae:bc:c7:40:74:8f:cf:fc:cb:19:8f:4d:
ba:b8:98:64:80:cd:c2:59:ff:12:ac:c9:76:46:4f:
ac:4e:59:ae:e2:7b:a6:38:74:3a:e1:04:1c:27:f0:
20:a2:67:86:d9:e2:de:48:67:01:e5:a6:8f:49:69:
99:c6:3e:25:1e:72:48:a7:72:97:6a:87:16:aa:db:
a6:93:07:d0:df:fe:e5:0a:0e:b5:79:72:5e:02:d1:
4b:e0:f3:ac:be:c2:b8:e3:6e:35:14:d9:d6:77:4c:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:05:61:CB:B9:9E:EF:CB:5D:70:E5:23:16:F3:DF:7C:AE:07:43:84
X509v3 Authority Key Identifier:
keyid:79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f4:7f:0d:29:18:c4:07:0f:d8:ea:9d:3a:a0:6d:5c:b5:5e:
e2:1e:3c:47:79:ca:85:c5:37:90:39:20:3c:0d:5e:bb:eb:ad:
a2:12:a0:c8:cd:a5:71:df:59:64:62:38:aa:1f:29:fd:ed:75:
ec:cc:3e:5f:45:c0:43:dd:6d:70:29:2b:da:9c:73:42:3c:94:
f7:7f:f2:2a:04:d5:f1:95:7f:d1:a5:95:d6:66:38:da:3a:0e:
17:36:ab:e1:95:9f:c0:bf:fa:41:f3:c5:10:68:80:69:3c:40:
0e:22:51:3a:9b:26:21:6a:93:7c:dd:6c:4a:b3:a8:8a:70:a3:
14:b2:12:e2:89:5a:76:df:61:09:50:2d:8c:da:e7:8f:2d:1e:
5d:ea:33:ae:f0:24:d3:45:a6:83:64:29:7b:3e:e0:53:4f:ec:
65:e3:1b:79:12:dd:c1:ba:9c:3c:5a:00:91:4c:46:9f:cd:ce:
1f:26:00:72:cf:d4:28:e8:fa:a5:21:20:6f:6e:22:3d:cf:35:
c6:40:12:59:82:e2:77:59:07:de:66:17:de:f9:78:27:9f:23:
09:70:90:6b:88:ec:94:d0:c9:ea:c3:df:5e:8a:04:3c:59:0f:
a5:7b:bc:be:c2:87:29:4d:1c:90:27:86:be:f8:8c:26:1a:76:
6c:71:27:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy4ge7su9s968Cj2M9dhzfhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzdlNGUyYzJhYTI2YzEwZDA3MWZhMTA0NWMxMzFlNmQx
NjBmNzAwHhcNMjYwMzA0MTEwMDQ4WhcNMjYwMzA1MTEwMDQ4WjAzMTEwLwYDVQQD
EyhmMjA1NjFjYmI5OWVlZmNiNWQ3MGU1MjMxNmYzZGY3Y2FlMDc0Mzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwnb28UTuKB53GKgL3x5upTgSPk8
4+CJPIbvKNt1jM/zfd5BoINsGj2uI5oqA4UODeMag5S//SndkMZzcJEg+hWbNbvG
C5SM6HsZmvDP47phMAzfilieZUMJgydJj2/xwSy0FXMoAVlkAxyhBEk2dqtPz8Jl
Kh2NbFUNOu21Fk3hLNTwF6YKLkL+5g7YChNBURaXXSA5jdSuvMdAdI/P/MsZj026
uJhkgM3CWf8SrMl2Rk+sTlmu4numOHQ64QQcJ/AgomeG2eLeSGcB5aaPSWmZxj4l
HnJIp3KXaocWqtumkwfQ3/7lCg61eXJeAtFL4POsvsK44241FNnWd0znkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIFYcu5nu/LXXDlIxbz33yuB0OEMB8GA1UdIwQY
MBaAFHl35OLCqibBDQcfoQRcEx5tFg9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NzE3ZDktODY3MS00YzYwLThmZDkt
MjIxNmMzOTU3NTk4LzEvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS82NzE3ZDktODY3MS00YzYwLThmZDktMjIxNmMzOTU3NTk4
LzEvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPR/DSkY
xAcP2OqdOqBtXLVe4h48R3nKhcU3kDkgPA1eu+utohKgyM2lcd9ZZGI4qh8p/e11
7Mw+X0XAQ91tcCkr2pxzQjyU93/yKgTV8ZV/0aWV1mY42joOFzar4ZWfwL/6QfPF
EGiAaTxADiJROpsmIWqTfN1sSrOoinCjFLIS4oladt9hCVAtjNrnjy0eXeozrvAk
00Wmg2Qpez7gU0/sZeMbeRLdwbqcPFoAkUxGn83OHyYAcs/UKOj6pSEgb24iPc81
xkASWYLid1kH3mYX3vl4J58jCXCQa4jslNDJ6sPfXooEPFkPpXu8vsKHKU0ckCeG
vviMJhp2bHEnjw==
-----END CERTIFICATE-----
Generated at Wed Mar 4 17:49:29 2026 by rpki-client