Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
File: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft (raw, json)
Hash identifier: 1UoqRIPNp9hAyfRLUYkEJcAEszKya1JRqs9WlKxNAgE=
Subject key identifier: 2B:00:22:E1:D0:B0:5E:5A:E8:47:BE:0A:01:2E:4C:11:9F:C0:20:10
Authority key identifier: 11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
Certificate issuer: /CN=1171641f157cb57b532626359e71582742c2dccb
Certificate serial: 019D38D342DE8A211644DAD2F03EF22DD811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
Manifest number: 1761
Signing time: Sun 29 Mar 2026 09:01:02 +0000
Manifest this update: Sun 29 Mar 2026 09:01:02 +0000
Manifest next update: Mon 30 Mar 2026 09:01:02 +0000
Files and hashes: 1: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl (hash: igNoun+vDynSlNOJls76CRqPizuZIbQ8pqJ88vJWBng=)
2: g3yb9GvnR-4yvkFxTiRQRjASrNM.roa (hash: IRUvAUHV7ruHaa7xmQq2ksFvesViZHulW4HJ9YDCukA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:42:de:8a:21:16:44:da:d2:f0:3e:f2:2d:d8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1171641f157cb57b532626359e71582742c2dccb
Validity
Not Before: Mar 29 09:01:02 2026 GMT
Not After : Mar 30 09:01:02 2026 GMT
Subject: CN=2b0022e1d0b05e5ae847be0a012e4c119fc02010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:ff:99:c6:4f:dc:95:67:5f:06:e9:63:f5:
29:cb:13:1c:89:e3:89:b0:db:08:67:ee:57:f7:eb:
a4:03:0e:69:0a:ef:1e:70:ac:bb:aa:7c:d8:aa:5e:
fb:84:12:ee:b1:0d:e7:91:87:45:b0:2d:db:83:b2:
23:a5:89:e0:72:e0:f5:c0:f5:84:2c:e6:4d:e9:4d:
95:2e:ad:c8:9e:fe:76:32:36:29:b1:a8:24:d4:13:
ac:61:98:39:10:ea:a8:14:84:cf:47:af:6d:73:26:
18:39:a0:b2:5d:76:4a:b4:df:ba:78:82:df:9a:1f:
63:72:48:22:95:2d:2e:8c:12:a7:9c:ab:3c:71:12:
21:4e:22:2d:43:d8:8a:3b:13:52:8b:1e:af:95:bd:
69:b9:d8:d8:92:6e:53:24:4c:b2:16:0f:94:b4:70:
cc:b5:e9:86:a4:38:22:7f:74:1f:c7:5c:13:0b:60:
4a:ea:f0:e7:3b:87:d4:91:13:f3:55:d4:c6:f3:14:
30:01:c4:18:61:8d:81:20:dc:6c:a7:ef:03:3b:22:
13:24:bd:fb:13:cd:92:29:0e:53:c3:b6:0c:a4:cc:
55:c0:8f:ba:05:88:7a:43:c2:fb:36:5f:60:67:a4:
28:5b:aa:2d:ae:a8:b0:43:f9:f1:3a:be:06:d4:3c:
c7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:00:22:E1:D0:B0:5E:5A:E8:47:BE:0A:01:2E:4C:11:9F:C0:20:10
X509v3 Authority Key Identifier:
keyid:11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1d:7f:0c:42:81:1c:0d:f7:f7:f9:9f:61:c0:0a:f9:cd:38:
74:8c:0d:db:d3:2b:1f:76:bf:aa:28:60:ce:e4:db:cb:76:63:
c1:ad:b8:2c:db:12:cb:e5:32:88:f9:1d:c9:18:b4:a9:09:77:
7d:3c:03:a7:73:26:8e:db:b8:18:7e:8b:33:31:67:e8:2e:1c:
26:c4:e4:d8:93:83:6a:a3:0f:75:a7:22:33:5e:f0:4a:5f:37:
66:b1:ba:9b:e5:4c:f8:e5:55:55:26:47:db:fc:d0:d4:99:5a:
c1:1b:8f:88:5f:57:34:6d:98:73:f3:08:8d:97:46:30:3b:ae:
17:84:e3:a0:2e:e5:df:8c:80:31:9d:3b:d0:0d:2f:cb:4c:94:
51:a2:b4:85:ed:16:54:a7:68:93:b4:80:8b:b7:90:6b:c0:c8:
83:36:2c:88:52:09:76:f0:c7:7a:68:a3:aa:b7:1d:92:fe:8d:
62:b5:87:4f:c3:e6:10:78:2c:db:51:f7:28:b8:77:c9:10:3a:
ed:8b:eb:79:23:a3:c2:06:20:cb:35:99:06:18:75:55:b8:63:
37:20:7c:c4:a5:52:ac:e7:22:8a:0c:5a:12:c9:4b:a0:54:1b:
a8:62:13:86:79:54:b9:6f:ef:68:a1:7b:71:fc:5d:c9:be:ae:
5c:46:34:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0400LeiiEWRNrS8D7yLdgRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNzE2NDFmMTU3Y2I1N2I1MzI2MjYzNTllNzE1ODI3NDJj
MmRjY2IwHhcNMjYwMzI5MDkwMTAyWhcNMjYwMzMwMDkwMTAyWjAzMTEwLwYDVQQD
EygyYjAwMjJlMWQwYjA1ZTVhZTg0N2JlMGEwMTJlNGMxMTlmYzAyMDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKz/mcZP3JVnXwbpY/UpyxMcieOJ
sNsIZ+5X9+ukAw5pCu8ecKy7qnzYql77hBLusQ3nkYdFsC3bg7IjpYngcuD1wPWE
LOZN6U2VLq3Inv52MjYpsagk1BOsYZg5EOqoFITPR69tcyYYOaCyXXZKtN+6eILf
mh9jckgilS0ujBKnnKs8cRIhTiItQ9iKOxNSix6vlb1pudjYkm5TJEyyFg+UtHDM
temGpDgif3Qfx1wTC2BK6vDnO4fUkRPzVdTG8xQwAcQYYY2BINxsp+8DOyITJL37
E82SKQ5Tw7YMpMxVwI+6BYh6Q8L7Nl9gZ6QoW6otrqiwQ/nxOr4G1DzHXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsAIuHQsF5a6Ee+CgEuTBGfwCAQMB8GA1UdIwQY
MBaAFBFxZB8VfLV7UyYmNZ5xWCdCwtzLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZmE3MTEtMDZiMC00MWUzLTljNzIt
M2NiOWUxMDJhZmUwLzEvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8zZmE3MTEtMDZiMC00MWUzLTljNzItM2NiOWUxMDJhZmUw
LzEvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqx1/DEKB
HA339/mfYcAK+c04dIwN29MrH3a/qihgzuTby3Zjwa24LNsSy+UyiPkdyRi0qQl3
fTwDp3Mmjtu4GH6LMzFn6C4cJsTk2JODaqMPdaciM17wSl83ZrG6m+VM+OVVVSZH
2/zQ1JlawRuPiF9XNG2Yc/MIjZdGMDuuF4TjoC7l34yAMZ070A0vy0yUUaK0he0W
VKdok7SAi7eQa8DIgzYsiFIJdvDHemijqrcdkv6NYrWHT8PmEHgs21H3KLh3yRA6
7YvreSOjwgYgyzWZBhh1VbhjNyB8xKVSrOciigxaEslLoFQbqGIThnlUuW/vaKF7
cfxdyb6uXEY0GA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:43 2026 by rpki-client