Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
File: eXfk4sKqJsENBx-hBFwTHm0WD3A.mft (raw, json)
Hash identifier: QFt5SRkAbB7fDYtAyTftD8RPGNShILgM9qM1inPt+xI=
Subject key identifier: F2:B0:B0:3B:2A:3B:25:3D:E1:A1:4D:85:1D:77:43:DF:5A:69:06:9F
Authority key identifier: 79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
Certificate issuer: /CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Certificate serial: 019D9E515E12ADEB92AD5AC5898E32C94423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
Manifest number: 017C
Signing time: Sat 18 Apr 2026 02:00:25 +0000
Manifest this update: Sat 18 Apr 2026 02:00:25 +0000
Manifest next update: Sun 19 Apr 2026 02:00:25 +0000
Files and hashes: 1: Fw8PMiL8XbMvdKq8X17Je2tMF2E.roa (hash: NpJsXlY3046ddjEeyCOq10eq8sScmSmiV1XiKlKV9B0=)
2: eXfk4sKqJsENBx-hBFwTHm0WD3A.crl (hash: tq3vqXPOg41dBKzF25RMhOJ6yTUmqg3LhjStFaFPdrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:51:5e:12:ad:eb:92:ad:5a:c5:89:8e:32:c9:44:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Validity
Not Before: Apr 18 02:00:25 2026 GMT
Not After : Apr 19 02:00:25 2026 GMT
Subject: CN=f2b0b03b2a3b253de1a14d851d7743df5a69069f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:ab:f2:4a:8e:d2:96:5b:73:5f:54:e4:02:
a6:5c:18:0f:43:e4:04:ed:b3:e2:fb:f8:40:77:7f:
32:94:a4:65:da:b6:8d:42:30:98:ae:55:3f:8f:b6:
a0:11:b1:c3:5c:8d:b8:50:63:13:80:44:95:ac:a7:
14:cb:fd:4a:09:3e:52:0a:28:1a:f7:13:03:a1:50:
ee:a1:7a:a0:79:48:b2:63:4e:c4:93:05:64:66:57:
de:44:2c:bc:98:43:f9:35:05:a8:db:2a:8f:d6:3d:
d6:86:23:ac:51:34:32:04:4c:41:6f:58:ae:27:d1:
49:08:70:43:36:10:99:a5:5e:02:79:57:5a:bf:70:
38:37:d9:cf:5d:27:26:4d:ed:c7:5f:f9:e5:df:24:
8b:9f:68:0d:4e:a2:7a:95:a6:92:3f:44:1a:aa:28:
01:de:22:01:1e:63:41:04:bc:52:a0:ac:d6:aa:ca:
72:f8:ad:9b:28:38:12:06:9e:d0:9a:41:b9:fe:7b:
03:42:ee:dc:5c:94:ef:89:c5:e0:ef:41:e1:a1:a6:
f7:93:58:b1:98:bf:61:63:d2:2e:85:ea:ce:1f:03:
1c:78:8d:96:cb:12:09:94:ec:0b:14:5c:12:a7:05:
3a:25:98:a6:13:2f:98:0b:d3:8c:8e:e2:cc:6e:77:
29:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B0:B0:3B:2A:3B:25:3D:E1:A1:4D:85:1D:77:43:DF:5A:69:06:9F
X509v3 Authority Key Identifier:
keyid:79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7c:6a:18:51:d7:99:9f:29:40:cc:96:c2:cc:77:db:f9:5e:
4e:59:1c:7a:cc:71:37:3d:06:80:35:04:bb:1a:cd:d4:03:64:
ac:4c:c1:d0:b5:e3:85:07:f0:49:6c:40:ba:f0:f0:b2:97:f4:
16:f4:16:1e:49:60:41:be:db:b7:77:38:59:fa:81:04:8c:1d:
8c:75:4c:34:ef:e3:0e:99:7f:03:a6:61:af:c9:d9:e8:15:19:
7c:03:f7:b2:96:34:bf:9f:f1:d2:52:a0:b6:4e:f5:0e:96:01:
06:55:71:bf:70:9f:2d:b4:13:83:d5:3a:85:a8:3c:d0:26:6f:
f0:9a:45:d8:72:c3:19:46:2b:6f:74:81:82:2c:d2:9c:52:e5:
eb:73:f9:17:48:35:4a:cb:de:1d:82:ea:01:bb:d9:e9:9c:a4:
ac:f4:6a:07:7a:5a:9d:f8:2b:61:5e:ba:0c:87:66:39:d0:f9:
ed:d5:89:68:df:85:c5:40:ff:5f:98:4c:81:13:99:00:8d:5e:
2a:2f:e1:d2:1c:5b:07:37:b4:1f:01:0b:94:21:4b:d9:ac:eb:
82:98:a3:49:5a:3b:38:10:d3:da:5e:86:84:2a:a7:86:88:eb:
8f:46:da:d2:aa:74:32:1e:da:1b:bb:a5:98:81:97:52:11:9b:
fc:9d:6f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:46:15 2026 by rpki-client