Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
File: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft (raw, json)
Hash identifier: 3acMcYkka5PqLo2jjN9ckALhO5R3yR7TTppS4tf+dAY=
Subject key identifier: C8:95:7C:21:70:2C:37:50:7C:3D:FF:48:CF:1B:87:4C:86:6E:E4:37
Authority key identifier: 11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
Certificate issuer: /CN=1171641f157cb57b532626359e71582742c2dccb
Certificate serial: 01A147606BF9DD21BE7F11493318B6C0A827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
Manifest number: 197B
Signing time: Sat 17 Oct 2026 01:01:03 +0000
Manifest this update: Sat 17 Oct 2026 01:01:03 +0000
Manifest next update: Sun 18 Oct 2026 01:01:03 +0000
Files and hashes: 1: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl (hash: 6B+XtGB6rvkuZtsQjcBSsTYV31Sceoq+D0AWsT57F/c=)
2: UCHav0USJ72KUeyDtmvlSLVCeYg.roa (hash: 3WWUbdLjAuU1XIlzj/xZGgFJ0D0xpP27qM0k9KOyY+U=)
3: g3yb9GvnR-4yvkFxTiRQRjASrNM.roa (hash: IRUvAUHV7ruHaa7xmQq2ksFvesViZHulW4HJ9YDCukA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:60:6b:f9:dd:21:be:7f:11:49:33:18:b6:c0:a8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1171641f157cb57b532626359e71582742c2dccb
Validity
Not Before: Oct 17 01:01:03 2026 GMT
Not After : Oct 18 01:01:03 2026 GMT
Subject: CN=c8957c21702c37507c3dff48cf1b874c866ee437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:09:16:55:94:48:93:69:47:26:34:90:d8:a7:
bd:2e:c8:14:51:15:c5:3c:ab:1a:7f:b2:11:2e:21:
66:a0:53:b2:1e:d0:bc:4c:43:24:73:ec:ef:17:74:
4e:c8:8d:c1:bd:89:12:6f:c7:a6:5d:eb:62:36:1b:
42:f1:f9:f0:6d:21:a4:73:fd:ec:ae:99:45:c1:3a:
e6:89:cd:d8:02:0d:9b:1a:80:34:69:1b:4d:70:df:
72:d5:f7:e9:67:fc:58:23:14:49:e7:b1:33:3c:89:
eb:9a:16:e1:0f:1c:4e:76:26:ba:54:3f:ce:d7:34:
63:61:82:f6:0a:2c:12:c2:0b:cc:0b:24:46:ad:25:
71:e2:07:66:e6:2c:51:4c:f4:e8:e6:2a:a5:3b:4d:
e2:71:b0:b7:45:3f:d7:52:fa:cb:74:6a:88:b1:be:
96:eb:54:48:42:a0:24:e4:9e:6a:3e:d6:a2:98:72:
33:40:a4:0b:7e:1e:80:4d:20:22:46:87:64:26:e1:
3b:44:c1:6b:72:2b:52:3b:f4:a9:a6:94:39:9b:c5:
b0:0d:4b:09:37:30:fa:b6:bc:16:0a:39:7f:49:5a:
93:57:83:19:32:ac:80:b1:16:58:58:52:68:ff:4a:
c3:00:b1:e2:cd:ed:f4:3f:a6:62:9a:d6:f9:fb:d8:
7b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:95:7C:21:70:2C:37:50:7C:3D:FF:48:CF:1B:87:4C:86:6E:E4:37
X509v3 Authority Key Identifier:
keyid:11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:60:81:99:4b:98:2e:73:86:33:27:50:09:9b:97:bf:55:9b:
c6:b0:66:c3:f6:11:a2:17:84:c7:3a:40:29:41:35:8a:ef:be:
39:fe:58:e4:c0:1f:f5:c7:bf:6a:92:22:9a:15:23:e2:5b:60:
21:8c:05:62:50:4f:95:46:c2:8b:6f:e0:5a:7d:7f:0c:2b:5f:
47:40:3a:47:25:40:b8:e7:2c:25:00:1c:b3:e5:db:5c:17:8c:
40:ce:fc:fe:c3:fb:5f:7d:95:b2:11:42:5f:06:c5:b8:2f:91:
5c:f3:e9:72:51:ca:51:fd:d6:60:4d:da:39:b9:07:3f:75:fd:
fd:c2:94:71:92:d6:6e:63:4f:ab:94:e7:77:92:21:63:bf:e5:
92:07:d9:ec:bf:16:fb:a8:ae:e3:b5:05:5c:4b:80:3f:8c:b4:
f0:6e:00:c7:c8:d4:9f:d0:03:b0:28:ce:92:85:ec:7e:84:e7:
cb:c9:ad:74:8b:56:a4:ba:fd:d7:49:cb:de:38:1a:f8:d5:43:
36:9c:22:ca:46:ea:cc:fc:9f:f1:b4:65:95:80:10:73:a9:74:
cd:9b:2f:ac:4f:4b:34:6e:d8:a8:94:41:42:74:2b:4f:57:af:
01:47:64:ae:8a:99:3e:72:4d:16:bc:51:69:94:82:e0:3e:84:
ff:99:4a:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFHYGv53SG+fxFJMxi2wKgnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNzE2NDFmMTU3Y2I1N2I1MzI2MjYzNTllNzE1ODI3NDJj
MmRjY2IwHhcNMjYxMDE3MDEwMTAzWhcNMjYxMDE4MDEwMTAzWjAzMTEwLwYDVQQD
EyhjODk1N2MyMTcwMmMzNzUwN2MzZGZmNDhjZjFiODc0Yzg2NmVlNDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AkWVZRIk2lHJjSQ2Ke9LsgUURXF
PKsaf7IRLiFmoFOyHtC8TEMkc+zvF3ROyI3BvYkSb8emXetiNhtC8fnwbSGkc/3s
rplFwTrmic3YAg2bGoA0aRtNcN9y1ffpZ/xYIxRJ57EzPInrmhbhDxxOdia6VD/O
1zRjYYL2CiwSwgvMCyRGrSVx4gdm5ixRTPTo5iqlO03icbC3RT/XUvrLdGqIsb6W
61RIQqAk5J5qPtaimHIzQKQLfh6ATSAiRodkJuE7RMFrcitSO/SpppQ5m8WwDUsJ
NzD6trwWCjl/SVqTV4MZMqyAsRZYWFJo/0rDALHize30P6Zimtb5+9h7nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiVfCFwLDdQfD3/SM8bh0yGbuQ3MB8GA1UdIwQY
MBaAFBFxZB8VfLV7UyYmNZ5xWCdCwtzLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZmE3MTEtMDZiMC00MWUzLTljNzIt
M2NiOWUxMDJhZmUwLzEvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8zZmE3MTEtMDZiMC00MWUzLTljNzItM2NiOWUxMDJhZmUw
LzEvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmCBmUuY
LnOGMydQCZuXv1WbxrBmw/YRoheExzpAKUE1iu++Of5Y5MAf9ce/apIimhUj4ltg
IYwFYlBPlUbCi2/gWn1/DCtfR0A6RyVAuOcsJQAcs+XbXBeMQM78/sP7X32VshFC
XwbFuC+RXPPpclHKUf3WYE3aObkHP3X9/cKUcZLWbmNPq5Tnd5IhY7/lkgfZ7L8W
+6iu47UFXEuAP4y08G4Ax8jUn9ADsCjOkoXsfoTny8mtdItWpLr910nL3jga+NVD
NpwiykbqzPyf8bRllYAQc6l0zZsvrE9LNG7YqJRBQnQrT1evAUdkroqZPnJNFrxR
aZSC4D6E/5lKgw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 12:05:55 2026 by rpki-client