Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
File: eXfk4sKqJsENBx-hBFwTHm0WD3A.mft (raw, json)
Hash identifier: ZHm2SdVBf90SFtURiX8CpdiW+8f9RNr8xCaaMLLqeBE=
Subject key identifier: 74:83:43:0E:CB:EE:2A:98:21:5F:57:E8:DC:8B:F8:B0:FD:C7:8C:84
Authority key identifier: 79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
Certificate issuer: /CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Certificate serial: 019CACEB8602858EE35F2427CE612135A60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
Manifest number: FF
Signing time: Mon 02 Mar 2026 05:00:42 +0000
Manifest this update: Mon 02 Mar 2026 05:00:42 +0000
Manifest next update: Tue 03 Mar 2026 05:00:42 +0000
Files and hashes: 1: Fw8PMiL8XbMvdKq8X17Je2tMF2E.roa (hash: NpJsXlY3046ddjEeyCOq10eq8sScmSmiV1XiKlKV9B0=)
2: eXfk4sKqJsENBx-hBFwTHm0WD3A.crl (hash: 3yBuhH4S5EwTJLGkAfWonOBJQpioJ9FKYWYmGWKqqU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:86:02:85:8e:e3:5f:24:27:ce:61:21:35:a6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Validity
Not Before: Mar 2 05:00:42 2026 GMT
Not After : Mar 3 05:00:42 2026 GMT
Subject: CN=7483430ecbee2a98215f57e8dc8bf8b0fdc78c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:0b:c6:0f:0a:26:07:0b:b2:29:7b:59:0b:
ec:5f:08:a5:a6:b9:14:fa:32:0d:bf:5b:69:89:f4:
20:b6:dc:df:84:80:34:6e:9d:ea:c3:42:6a:a3:09:
76:da:ad:fc:f1:2f:1c:61:f8:e5:cc:6d:14:6f:c4:
fd:a2:76:ca:c6:40:88:b0:be:fa:fd:21:5f:0c:07:
d8:ca:91:60:7a:04:c1:eb:08:e9:08:90:90:b8:35:
e5:24:7d:44:6e:af:7c:7f:53:8a:04:48:df:65:57:
67:a3:d2:35:ca:21:ad:49:ec:f6:4a:a9:4a:97:56:
a0:f1:8b:05:2b:a5:80:03:cb:4f:4d:a1:00:67:f2:
da:89:bb:b0:dc:a8:29:af:f9:69:42:df:d2:38:32:
6f:89:ba:1f:5f:8b:2e:da:53:d4:b3:86:8e:01:8f:
a9:95:b1:8b:8d:49:66:08:6c:3f:71:6c:d7:d5:f7:
56:26:f2:f9:09:65:88:9d:17:5c:70:10:4b:e0:f8:
77:c6:af:a6:69:99:94:d9:bc:20:f9:ed:28:68:5e:
12:0d:b5:84:ce:e6:4c:d6:fb:ce:9e:09:6b:08:93:
72:00:a3:d2:7a:8b:cf:10:91:bc:c1:d9:21:c1:6c:
d2:63:9f:cd:37:fb:56:06:2d:dd:cf:75:03:0e:13:
05:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:83:43:0E:CB:EE:2A:98:21:5F:57:E8:DC:8B:F8:B0:FD:C7:8C:84
X509v3 Authority Key Identifier:
keyid:79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:63:fe:4f:02:a5:15:d9:bf:8c:8e:cb:6f:0f:c5:ad:08:6d:
34:5a:f9:53:eb:38:3f:7c:a8:30:24:c6:0b:85:0d:d9:2d:c5:
f9:e1:35:4c:20:3d:8c:85:8a:5a:2e:e5:6e:92:d3:20:ad:58:
93:29:d3:9a:24:f7:ed:77:36:0f:aa:2c:e5:0d:15:f6:c3:ad:
7a:e1:22:f1:a9:2f:bc:7c:74:8e:4b:38:ad:85:ee:fc:fd:98:
ea:12:ca:78:b3:f4:38:7e:82:3f:42:22:3a:fb:1d:88:56:aa:
dc:4e:12:1b:8d:71:06:2f:3a:28:92:63:e2:74:a8:39:7d:64:
47:34:6a:48:97:28:f4:40:ab:6b:c9:95:3e:73:f2:13:b8:d8:
8e:db:18:29:d1:26:a5:f0:90:28:7a:4b:f9:8c:0f:46:ac:ac:
94:02:e2:37:83:cb:08:62:e3:20:73:32:18:e6:65:c5:51:6f:
05:eb:d0:58:e6:40:d3:1e:a0:17:fd:5c:de:da:01:e1:28:35:
47:9b:51:9c:e4:a7:44:7a:70:69:98:a1:a6:ea:a1:7f:6c:4c:
ec:64:b3:af:79:98:f8:a8:68:dc:82:79:89:86:aa:5a:55:94:
fe:81:d2:de:df:5f:b9:b7:f8:ec:1f:5a:60:56:c4:f8:86:53:
8a:2a:46:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:27 2026 by rpki-client