
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
File: eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft (raw, json)
Hash identifier: xFW4GWvbdQyJtk93xVJRVfUE/J2fmzQffPsl2HDi8fY=
Subject key identifier: 39:25:FD:D0:8A:70:6C:53:9E:D8:50:5A:8C:BD:7B:EC:05:8B:28:5C
Authority key identifier: 7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
Certificate issuer: /CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Certificate serial: 019E8CED7F216EDB66A7E61679FC7D3E1B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
Manifest number: 0236
Signing time: Wed 03 Jun 2026 10:00:35 +0000
Manifest this update: Wed 03 Jun 2026 10:00:35 +0000
Manifest next update: Thu 04 Jun 2026 10:00:35 +0000
Files and hashes: 1: 3gMylm_7kdY05Np-Gs1Ujn2TpUw.roa (hash: W5KGrcdaIcr77/oIsEbLhshZMJrc2jrTw0N4xA3kS0o=)
2: SHM9R3kXlAO8-e-rYuN_jsGmG6M.roa (hash: X06rQu41FDn+MhiPC2VMwGHMTFpmXVd6mlDBUP0P6FE=)
3: eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl (hash: 75YA2Dds+yh8b8j8PbfmQX+a4PcyfVnEi9xJua6SB78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:ed:7f:21:6e:db:66:a7:e6:16:79:fc:7d:3e:1b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Validity
Not Before: Jun 3 10:00:35 2026 GMT
Not After : Jun 4 10:00:35 2026 GMT
Subject: CN=3925fdd08a706c539ed8505a8cbd7bec058b285c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:16:b9:e1:e4:e8:9f:f2:bf:13:94:12:64:44:
90:22:bc:3a:35:37:cc:4e:67:1c:8c:6e:c6:ef:00:
b5:f5:05:24:a9:66:00:28:fc:67:59:07:46:97:7a:
ea:37:23:59:23:75:33:fc:4e:f1:89:69:d6:7f:d2:
47:ad:c5:37:36:e2:76:99:97:96:2e:cc:f5:6b:24:
0a:69:36:e6:b8:b5:87:bb:77:57:6b:da:0a:54:bf:
d4:14:45:4f:02:ec:f7:06:53:00:a1:48:01:3a:05:
92:ae:7b:ee:98:3d:22:81:a8:90:7e:18:56:7a:7c:
4d:51:92:8b:b1:60:98:71:37:52:2d:88:9a:7d:cf:
18:a7:96:0f:72:87:b0:b3:ca:24:cb:fb:b7:2d:10:
c2:00:04:e5:53:bf:82:b6:f4:31:c8:b7:15:fb:d5:
3b:b0:08:c8:f2:f9:50:17:c2:1e:04:f4:e8:e8:77:
fc:41:88:84:ea:bc:73:8c:9e:10:56:22:78:b6:12:
fc:a1:ed:22:24:be:0f:78:08:5a:c8:88:a6:df:58:
df:c5:e3:da:1d:7c:4a:eb:df:02:fe:1c:a6:c4:9c:
44:ae:11:5f:5c:5f:db:c8:08:00:08:c5:69:3e:7d:
6f:c0:6e:a9:3e:66:3f:a4:15:cf:8e:1d:0e:99:20:
ac:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:25:FD:D0:8A:70:6C:53:9E:D8:50:5A:8C:BD:7B:EC:05:8B:28:5C
X509v3 Authority Key Identifier:
keyid:7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:c4:80:f7:7f:46:22:1f:60:02:79:32:4f:02:7a:f8:db:1d:
d3:c9:2a:e8:08:f5:0c:62:8b:50:af:92:00:40:26:2c:28:bb:
31:8b:df:6c:74:ab:ac:7c:c1:80:6f:f9:56:7a:59:64:5d:ee:
c8:77:a5:b0:f8:89:03:e1:2f:fa:d1:b0:0f:de:37:ec:94:8e:
bb:56:dd:4e:1f:06:57:a0:0a:4f:09:21:a5:b4:0c:c9:ed:d4:
3e:65:6c:d1:fe:1f:2f:79:ba:01:02:78:ed:3e:47:55:46:a0:
f9:c9:bf:50:e4:ed:ea:ca:91:ef:9c:b4:f9:87:86:9d:4c:45:
9e:53:d3:64:7e:b2:c1:3a:d6:2a:d5:cf:53:b7:6c:17:5a:7c:
11:8c:df:11:53:f5:6e:1b:80:d0:42:b5:93:dc:eb:fc:d3:1a:
b8:bc:df:40:2f:50:59:8d:b2:13:3c:4d:84:32:19:a2:91:dc:
84:30:1e:4c:a6:99:1f:ad:8f:c3:fe:21:f4:39:ec:cd:57:fe:
7a:36:1d:84:c9:15:88:c3:3c:fe:e9:8a:07:e1:51:d4:28:5a:
59:b8:97:e1:5c:5c:68:28:4e:7c:5d:67:6e:de:b6:33:f0:69:
71:6d:d6:cb:8d:6f:f0:7f:92:58:6b:22:df:7e:b6:47:3d:e3:
7f:39:5b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:58:08 2026 by rpki-client