Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
File: eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft (raw, json)
Hash identifier: XxyNBEefv/LV/+bhNWR+o2cGV9+mX8tslAsZmA3vOxk=
Subject key identifier: BB:E5:29:8A:54:DE:87:96:DC:3A:82:44:99:B1:75:BE:AA:D5:C2:C1
Authority key identifier: 7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
Certificate issuer: /CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Certificate serial: 019CB9947E0D92F48A6BD1E4B6799E611142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
Manifest number: 0144
Signing time: Wed 04 Mar 2026 16:00:42 +0000
Manifest this update: Wed 04 Mar 2026 16:00:42 +0000
Manifest next update: Thu 05 Mar 2026 16:00:42 +0000
Files and hashes: 1: 3gMylm_7kdY05Np-Gs1Ujn2TpUw.roa (hash: W5KGrcdaIcr77/oIsEbLhshZMJrc2jrTw0N4xA3kS0o=)
2: SHM9R3kXlAO8-e-rYuN_jsGmG6M.roa (hash: X06rQu41FDn+MhiPC2VMwGHMTFpmXVd6mlDBUP0P6FE=)
3: eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl (hash: M1kuyI+vVD04qsYhzZ7l/aMIRHWPVVHrNof4R3TjP1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:94:7e:0d:92:f4:8a:6b:d1:e4:b6:79:9e:61:11:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Validity
Not Before: Mar 4 16:00:42 2026 GMT
Not After : Mar 5 16:00:42 2026 GMT
Subject: CN=bbe5298a54de8796dc3a824499b175beaad5c2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6b:8f:90:38:ef:71:e3:38:6a:fa:c9:90:23:
97:2c:5d:4d:b3:a2:21:5e:25:cc:ed:f0:43:7b:8a:
af:b0:d2:01:a2:03:05:a9:77:e3:56:43:50:58:ce:
d5:ce:d9:3f:f2:ac:3e:e6:7f:58:25:c4:ea:a0:1c:
a8:61:1e:92:d4:57:fe:b9:00:95:dc:f1:2c:fc:37:
9d:1b:7b:49:a0:62:b6:5d:48:81:fd:48:31:5f:8c:
65:20:68:28:fa:61:d4:0c:08:08:e2:c4:2d:e3:d6:
a9:af:81:f6:bd:20:74:7a:97:0b:89:9a:37:d2:f3:
93:d6:81:15:3b:ec:a5:2c:9b:ba:f8:b4:e1:94:19:
c5:11:20:79:53:e9:85:c6:e3:18:92:5f:d2:e0:3f:
f9:de:da:66:22:02:2f:63:14:47:12:d7:5c:8f:fa:
ea:89:a1:ff:97:fd:42:76:03:38:b8:d4:82:8f:63:
70:66:a8:1a:75:f6:c2:de:86:67:c0:3c:93:e1:a2:
2b:ee:76:19:65:a8:27:f0:86:69:af:1c:34:16:f9:
44:f7:56:70:58:b6:dd:df:0c:a4:2a:1e:76:96:a0:
9e:21:df:3f:bf:ac:a5:10:b0:34:ec:c2:8f:d6:cd:
c2:54:13:d3:c9:62:75:6c:d1:a7:81:5e:05:28:43:
5f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E5:29:8A:54:DE:87:96:DC:3A:82:44:99:B1:75:BE:AA:D5:C2:C1
X509v3 Authority Key Identifier:
keyid:7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:68:24:09:30:ac:74:a8:88:3a:70:02:be:6c:ae:d6:d8:cb:
8b:c6:ea:2b:4a:f7:3d:56:96:b9:b4:f5:30:1c:7b:7d:36:d7:
c8:7d:9a:57:20:67:42:92:08:a1:81:ba:ff:c3:94:b2:53:7c:
06:1e:6b:13:bd:f3:75:58:68:6d:59:b3:91:d8:dc:e1:28:fa:
a1:89:a9:3b:51:ea:fd:89:38:11:cd:f8:da:92:be:43:c2:dc:
fb:98:07:87:76:2a:29:5c:b0:bf:34:31:1b:1a:6f:61:67:6c:
cb:75:78:d3:92:df:e3:50:58:f7:1f:02:df:70:eb:44:81:02:
b3:44:55:27:fa:12:4b:fb:40:30:a4:20:c3:85:c8:a6:36:74:
e8:6e:83:a4:56:d5:b8:1d:f8:4f:ad:ff:d7:6e:69:b3:2f:58:
d7:ab:39:d3:22:3b:ab:bd:0d:8e:07:46:4c:f3:5d:14:14:71:
23:4f:1b:54:64:6a:86:9e:1f:4e:51:2f:13:dd:7b:b1:61:76:
62:e2:05:05:03:b2:80:1a:81:27:77:2f:7e:bc:38:8d:9b:11:
37:a3:bc:4c:e6:b1:cd:83:5e:89:0a:01:0c:a8:ac:52:f2:c6:
2e:c5:35:0e:ac:81:bf:7e:79:d9:3d:90:d4:18:de:c5:1e:a3:
b2:79:30:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:51:10 2026 by rpki-client