Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
File: eXfk4sKqJsENBx-hBFwTHm0WD3A.mft (raw, json)
Hash identifier: YHTDve0wymZO/sP+uq7XUNs2Zk0GLl3PAdTKWr5I3EU=
Subject key identifier: 71:A1:6C:21:0E:AE:EE:E0:C3:E4:7F:40:67:02:3F:0D:98:55:AE:FE
Authority key identifier: 79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
Certificate issuer: /CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Certificate serial: 01A11D888424D40B5E44149D2A1C3EAA55DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
Manifest number: 034C
Signing time: Thu 08 Oct 2026 22:00:48 +0000
Manifest this update: Thu 08 Oct 2026 22:00:48 +0000
Manifest next update: Fri 09 Oct 2026 22:00:48 +0000
Files and hashes: 1: Fw8PMiL8XbMvdKq8X17Je2tMF2E.roa (hash: NpJsXlY3046ddjEeyCOq10eq8sScmSmiV1XiKlKV9B0=)
2: eXfk4sKqJsENBx-hBFwTHm0WD3A.crl (hash: xZ683wEw7FglPe5MGGEfaP3vyBYazzdpeEWDyJiiDWA=)
3: gX53hGvI2Ikan8CxxCyuf_vZ79I.roa (hash: 4mcjc+KxmF9esYxAnrxtXO1FlJlFgCD8tZbz9RIGOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:88:84:24:d4:0b:5e:44:14:9d:2a:1c:3e:aa:55:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Validity
Not Before: Oct 8 22:00:48 2026 GMT
Not After : Oct 9 22:00:48 2026 GMT
Subject: CN=71a16c210eaeeee0c3e47f4067023f0d9855aefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:e6:c1:b0:7c:19:25:e8:c0:ab:49:62:f3:
0b:dc:30:28:91:e8:81:69:81:38:fa:6b:e2:5a:f6:
5f:65:50:47:5b:26:3e:03:8b:f7:aa:36:50:4b:be:
31:88:19:95:e3:80:1b:16:1b:af:36:35:10:24:78:
50:fe:85:95:3f:8f:13:fb:a1:b9:b2:3c:10:19:64:
ae:ca:ce:96:47:5b:bf:c3:c6:89:9b:58:d8:ff:56:
a4:dc:2a:28:c1:90:90:f0:6d:88:1e:44:ee:34:9f:
45:51:a5:b7:94:2d:ea:b7:d1:02:ad:d7:99:41:12:
1c:e7:02:c9:46:fa:40:2b:24:cd:13:bd:ee:41:7e:
a3:a0:c2:68:f4:73:59:fe:4f:d9:86:c5:2a:52:c0:
77:1a:32:18:9c:78:3d:9d:2b:03:6c:1c:43:7d:33:
c5:5d:9a:aa:15:1c:64:f5:90:39:bc:25:d2:c6:9e:
46:27:27:a1:79:f4:f3:5b:95:e6:fd:05:39:ba:e1:
02:9d:17:92:f5:64:71:36:ad:1d:39:00:5b:dd:f8:
8a:ea:27:b2:da:d1:a5:10:6a:78:d3:d2:61:36:53:
75:0a:b7:61:ff:24:89:39:40:60:fd:8e:97:47:ef:
33:80:4a:df:61:43:ca:72:ec:ec:35:0d:71:bf:bc:
1d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A1:6C:21:0E:AE:EE:E0:C3:E4:7F:40:67:02:3F:0D:98:55:AE:FE
X509v3 Authority Key Identifier:
keyid:79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:cc:95:1f:fd:36:9d:b3:01:01:85:91:ec:33:d0:d2:fb:dd:
a5:62:c4:8c:ca:69:c2:ee:13:53:97:a9:29:71:73:bc:47:c8:
27:8a:32:f4:a6:ba:b1:fe:94:73:49:e7:36:ba:65:4e:f5:6b:
dc:f7:73:19:50:c1:53:38:55:57:08:c1:87:c8:cb:5b:ff:7f:
0b:0f:7a:49:a5:7a:ac:18:e9:3a:c2:1b:2d:7a:21:6b:4e:af:
4d:90:65:0c:d8:a6:b2:b2:96:5c:d2:90:57:0f:10:80:88:4c:
73:f8:bd:dc:be:a3:54:39:15:8f:22:60:b0:73:04:d5:4f:48:
94:60:f3:e9:5f:75:18:29:0f:48:93:28:36:8c:cf:55:02:7b:
a5:63:4d:d2:97:2c:3f:33:8c:e3:bb:ee:e6:7e:aa:d5:ca:a3:
96:26:fa:d9:81:bc:eb:58:1d:41:17:42:75:0f:08:c6:1c:e9:
d7:4b:29:6c:ee:00:b0:54:f3:38:a3:c5:5c:c6:bb:a7:be:e3:
a1:d5:4e:62:8a:f8:c1:a9:66:8b:9f:06:bf:24:e5:d5:7e:f8:
9a:c2:2d:5c:61:81:88:35:eb:f7:b9:ef:f7:1b:1b:18:be:a0:
78:96:e5:71:69:64:a9:b3:b9:ae:c2:47:13:c5:bf:ab:fd:7e:
40:81:1e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 08:40:45 2026 by rpki-client