Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
File: eXfk4sKqJsENBx-hBFwTHm0WD3A.mft (raw, json)
Hash identifier: otRqbfZ3BSLrv6AvwbYaZBv9IZwM12wZfGEA57wYOgg=
Subject key identifier: 94:5D:06:02:DF:90:99:C4:D6:22:53:B7:F3:4F:23:D2:BE:69:3A:A9
Authority key identifier: 79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
Certificate issuer: /CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Certificate serial: 01A05A7BE9B53A003ABC70A9D4AB47DC64D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
Manifest number: 02E7
Signing time: Tue 01 Sep 2026 01:01:05 +0000
Manifest this update: Tue 01 Sep 2026 01:01:05 +0000
Manifest next update: Wed 02 Sep 2026 01:01:05 +0000
Files and hashes: 1: Fw8PMiL8XbMvdKq8X17Je2tMF2E.roa (hash: NpJsXlY3046ddjEeyCOq10eq8sScmSmiV1XiKlKV9B0=)
2: eXfk4sKqJsENBx-hBFwTHm0WD3A.crl (hash: IvV9ggHEM8GMc/Zl/4sUlLfyr8oEf9SXspzh30qsdoE=)
3: gX53hGvI2Ikan8CxxCyuf_vZ79I.roa (hash: 4mcjc+KxmF9esYxAnrxtXO1FlJlFgCD8tZbz9RIGOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:7b:e9:b5:3a:00:3a:bc:70:a9:d4:ab:47:dc:64:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Validity
Not Before: Sep 1 01:01:05 2026 GMT
Not After : Sep 2 01:01:05 2026 GMT
Subject: CN=945d0602df9099c4d62253b7f34f23d2be693aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:41:06:35:ab:30:9c:a3:94:fe:ce:a3:1c:
f1:a4:1c:ad:12:80:02:99:9d:2b:0f:14:06:cd:90:
ec:a3:32:83:ad:3e:57:89:1d:dc:a7:a5:ec:fe:2f:
7b:61:37:a4:83:54:0a:91:eb:39:d8:60:f9:50:c3:
45:ca:40:b7:41:ef:c0:2c:99:d2:05:f4:b8:9c:26:
a0:f2:63:0f:9a:72:4a:45:89:35:37:72:66:cb:ee:
ed:f9:1e:99:aa:88:2e:58:8f:63:94:6a:91:fb:b6:
be:76:d5:e9:3a:bf:bb:a8:c7:a4:b8:fd:ab:bd:9b:
6b:f6:2a:c5:15:e6:69:ae:18:0c:73:f1:e3:32:f0:
16:80:79:d6:33:5c:46:73:dc:5b:84:de:31:0a:c9:
e0:47:b7:c6:ad:0b:da:cb:89:77:47:cc:88:88:91:
8c:fd:f4:43:53:e2:5e:1e:3d:93:d3:39:09:28:04:
40:88:1e:0c:87:cb:e0:91:2e:81:b1:1e:b8:2e:c0:
b5:70:3d:bd:0e:eb:51:d3:77:f9:e2:cb:10:2d:1c:
09:f4:ff:f2:e3:4f:c2:9f:fd:05:4a:5d:d8:17:52:
44:e9:e4:01:77:99:87:8b:a2:75:b9:a0:7e:24:d5:
1a:ea:20:ed:f9:3f:d6:a5:95:29:93:1c:4e:e8:39:
90:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5D:06:02:DF:90:99:C4:D6:22:53:B7:F3:4F:23:D2:BE:69:3A:A9
X509v3 Authority Key Identifier:
keyid:79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d0:a6:e9:ef:45:bf:21:c2:a1:0f:24:c7:3e:17:a9:cf:33:
f9:6e:08:79:dd:29:84:16:03:b2:1f:7f:87:43:ab:c4:c7:65:
b8:b3:e1:03:55:35:7a:b5:be:03:35:ed:71:a8:3e:b8:05:43:
b5:1e:3d:d6:11:fc:2f:de:46:9b:b8:bb:f7:e0:be:b2:d4:e5:
82:71:f3:6c:37:eb:0b:d9:cf:c1:f3:1f:96:fb:d4:0c:75:2d:
a0:26:18:8f:47:35:32:2c:af:a6:f8:d3:88:ae:61:ae:59:b1:
62:57:2e:11:5c:1f:33:a1:69:8e:dd:97:cb:02:fb:26:38:db:
da:41:fd:f7:0b:d3:cf:ab:86:83:53:5e:2a:34:09:eb:d6:71:
fa:ec:85:ad:cb:26:f3:94:e7:06:b9:b6:ff:68:13:cd:ea:ec:
4b:ad:40:9f:08:4a:7d:3e:9e:7b:2d:b4:52:a9:d3:c8:3e:08:
aa:82:a6:bb:ba:b4:ed:4b:4f:75:65:75:2a:1c:3c:22:6c:9b:
03:f6:4f:7a:92:8f:f2:ca:25:59:51:b8:4d:5a:7a:7d:96:be:
09:0f:59:8b:42:cf:8d:69:7b:50:09:a1:f0:62:b4:88:fc:37:
68:48:ed:0b:05:2f:94:18:ac:c7:bc:2c:f0:9e:11:fc:4a:3c:
95:06:54:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:21:32 2026 by rpki-client