Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
File: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft (raw, json)
Hash identifier: GapFTM6A3vEmrM3qJleMiWe8xJ8A3rLXkzTshnYkj1g=
Subject key identifier: 87:36:08:00:23:50:51:51:FF:48:6C:F5:C8:2A:EE:06:40:B6:35:69
Authority key identifier: 11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
Certificate issuer: /CN=1171641f157cb57b532626359e71582742c2dccb
Certificate serial: 019E31F35F96DC81DA14C35F045683E93775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
Manifest number: 17E2
Signing time: Sat 16 May 2026 18:01:33 +0000
Manifest this update: Sat 16 May 2026 18:01:33 +0000
Manifest next update: Sun 17 May 2026 18:01:33 +0000
Files and hashes: 1: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl (hash: TGfy8jPGF2Kj0r1KEP+WkkzFyvyhCBq3lRrImTt7XyE=)
2: g3yb9GvnR-4yvkFxTiRQRjASrNM.roa (hash: IRUvAUHV7ruHaa7xmQq2ksFvesViZHulW4HJ9YDCukA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f3:5f:96:dc:81:da:14:c3:5f:04:56:83:e9:37:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1171641f157cb57b532626359e71582742c2dccb
Validity
Not Before: May 16 18:01:33 2026 GMT
Not After : May 17 18:01:33 2026 GMT
Subject: CN=8736080023505151ff486cf5c82aee0640b63569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:d0:1c:60:c4:2e:eb:bd:d0:cd:da:c8:da:
37:a8:b3:b2:5f:05:83:94:a7:fc:eb:a6:58:e5:d6:
cd:ba:49:06:54:73:51:14:f7:0f:03:66:bf:6d:d7:
dc:ef:e6:e7:2f:cc:f6:c2:5f:d4:28:f3:a2:00:e2:
be:bd:70:82:8f:6f:c7:f3:ee:b4:73:66:d7:bd:d8:
7c:75:e9:a5:c2:37:8d:e5:a4:29:b7:ce:35:d9:d9:
36:26:63:7a:51:7a:16:fa:56:66:49:50:65:e5:c7:
2e:41:15:3b:fb:bc:dc:06:a3:2f:c2:09:ad:9b:38:
dd:30:1b:6e:cf:61:67:c2:cf:a1:37:2c:ea:55:dd:
e7:e1:14:18:a8:b8:de:5f:35:10:87:6b:ce:3b:49:
dd:3d:36:be:1f:38:65:9c:0c:2a:b8:c3:74:12:88:
de:00:b0:84:a7:8a:7a:f4:9f:36:16:7f:f4:2a:72:
48:90:9b:0e:40:c9:6a:49:5a:30:cc:ec:a3:6d:ee:
0f:9b:f6:63:f9:1c:96:17:39:0c:61:4e:ee:d0:3d:
e6:2a:f5:5c:21:c4:3c:60:d5:d5:2a:51:01:2c:9c:
cd:38:d1:a1:91:57:b4:fe:e7:f5:00:90:b4:f0:db:
c1:95:69:30:fe:d9:fa:dd:90:00:80:5c:91:cd:4f:
28:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:36:08:00:23:50:51:51:FF:48:6C:F5:C8:2A:EE:06:40:B6:35:69
X509v3 Authority Key Identifier:
keyid:11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7e:a2:81:5b:63:8a:94:dd:93:96:d8:b2:d2:ed:29:e9:c2:
d7:de:aa:b7:7e:af:f8:0b:5f:20:80:69:bb:2f:ce:c0:c6:8a:
42:f5:d2:a7:bf:2a:db:ef:08:db:5a:c9:95:3a:74:53:94:e0:
16:f7:19:12:19:7b:1d:ee:90:ea:92:4e:8f:ef:f6:7f:74:88:
de:d4:a6:13:1a:8c:84:64:7b:3c:44:0e:9c:f7:9d:3e:5c:b6:
04:b7:e4:d9:00:72:de:e0:46:91:8e:28:ff:44:93:a9:41:82:
16:5a:1e:c7:2a:a6:1a:8d:4c:f6:b5:64:90:e0:3a:d2:0f:c6:
1e:aa:c7:a8:b6:c8:ab:85:e1:18:87:59:cf:cc:72:19:05:66:
57:9b:38:aa:b0:f1:c9:93:94:4b:a4:cc:7e:d5:78:fd:4a:6d:
0e:1f:60:c8:0d:d4:72:98:3c:f8:b0:d3:5f:e2:a5:d6:4d:78:
a4:65:9d:59:86:92:01:63:aa:2b:47:62:f8:4b:1a:b1:f6:0f:
ba:5e:90:86:de:28:7c:b8:80:63:c4:f5:5e:f1:65:5a:a8:00:
e4:00:03:85:0e:99:a3:53:b3:8c:51:3a:4e:ba:9e:07:05:7a:
bb:d0:e4:f1:94:63:9b:cc:37:c9:01:73:b2:cb:13:fe:81:b6:
da:5a:09:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:20:32 2026 by rpki-client