Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
File: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft (raw, json)
Hash identifier: +VVyOgfKcwQbnLm85gdXGXkYjdHXlSaK26vxXAWiWvw=
Subject key identifier: 50:18:C6:E0:74:EA:62:9C:F5:49:45:9F:3D:AD:B8:59:5B:02:30:94
Authority key identifier: 11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
Certificate issuer: /CN=1171641f157cb57b532626359e71582742c2dccb
Certificate serial: 01A0016F5C06202E87A4CE01A8AB51F31C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
Manifest number: 18D2
Signing time: Fri 14 Aug 2026 18:01:10 +0000
Manifest this update: Fri 14 Aug 2026 18:01:10 +0000
Manifest next update: Sat 15 Aug 2026 18:01:10 +0000
Files and hashes: 1: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl (hash: gkaNdwl5ojMQ5hz2vvXjkwA+SULNM3T9R2MB8AFWWxQ=)
2: g3yb9GvnR-4yvkFxTiRQRjASrNM.roa (hash: IRUvAUHV7ruHaa7xmQq2ksFvesViZHulW4HJ9YDCukA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:5c:06:20:2e:87:a4:ce:01:a8:ab:51:f3:1c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1171641f157cb57b532626359e71582742c2dccb
Validity
Not Before: Aug 14 18:01:10 2026 GMT
Not After : Aug 15 18:01:10 2026 GMT
Subject: CN=5018c6e074ea629cf549459f3dadb8595b023094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:40:d4:f8:1d:8b:c9:45:f7:86:30:b8:c3:
2e:df:99:b4:7f:54:ee:45:a7:70:1a:76:b2:ec:3c:
f6:35:26:b8:9b:c0:2d:28:3b:15:fc:8b:c9:48:22:
43:59:81:13:37:f5:c0:b7:5e:5d:92:02:14:78:c7:
3a:59:65:80:91:b9:1f:38:44:92:cc:bb:8a:3f:f8:
4a:06:b9:01:a7:81:a0:e1:44:71:be:52:f8:8c:e6:
32:2f:ed:1e:12:5a:20:c6:52:a4:28:8a:f9:b7:f6:
68:9b:97:4f:cd:ca:1b:44:42:9e:64:8e:5f:48:1b:
4c:6f:c4:d4:05:a0:89:e8:6a:53:5a:1c:0c:99:24:
3e:b7:6e:83:9c:e0:7f:60:9e:15:86:d6:76:27:61:
9e:6f:4b:91:d5:e2:fe:da:3c:ea:bc:79:5c:74:68:
ca:b2:dc:1d:dc:0a:a5:9f:0f:00:ed:35:76:5f:cf:
06:b3:4d:d8:bf:94:de:fd:dc:e4:a3:eb:1c:6a:61:
1a:6f:95:dd:6a:ce:e9:80:37:8e:ec:45:0a:f2:7f:
84:87:8b:60:08:76:bc:db:95:36:8b:65:f7:d1:dc:
19:ba:01:17:54:96:80:be:b8:29:ea:c5:1f:4a:0e:
f1:40:0c:a7:3a:65:ae:f5:6b:49:c8:09:44:2c:8a:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:18:C6:E0:74:EA:62:9C:F5:49:45:9F:3D:AD:B8:59:5B:02:30:94
X509v3 Authority Key Identifier:
keyid:11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a5:7b:84:68:2d:75:1d:3b:37:0f:7f:05:4c:ac:79:81:f8:
0e:41:17:3b:d3:e3:ff:0a:c2:a3:d4:a1:1d:81:18:dc:f3:28:
6e:e2:71:c3:e0:a4:f3:48:2b:55:5f:ab:cf:f9:f5:f0:44:58:
15:20:fb:2d:74:ff:f5:10:97:be:de:db:7c:40:fc:10:49:3c:
4d:b9:97:4f:06:45:41:8d:1f:ec:2a:0b:80:6d:c3:2c:d5:5b:
c4:af:e4:08:68:f3:75:32:49:64:97:b8:af:8b:2d:cb:89:a2:
7f:e9:75:ad:5e:9f:59:41:a6:c1:03:89:5c:55:b6:35:6d:43:
68:4d:c5:e6:84:1f:fe:d5:3f:4e:85:d2:b8:53:ea:07:c2:e9:
7d:37:f7:2d:9b:7c:56:0a:62:1b:73:e4:73:73:c1:3b:cb:21:
1e:9e:6d:c0:63:f0:4f:fe:fe:19:3b:a8:47:ff:44:64:31:67:
1e:ec:e2:4f:95:88:a6:1e:dd:f3:cb:a5:c4:cf:81:e7:e0:87:
1e:01:57:b7:e3:14:bd:fd:66:cb:1b:81:29:22:36:cb:2a:9a:
24:c4:3d:b7:0e:11:25:3a:e4:6d:ff:2e:49:32:df:40:68:ff:
65:c7:18:63:bf:ed:a8:c5:7c:a5:af:0e:36:86:c1:6c:59:17:
dc:4f:98:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:22 2026 by rpki-client