Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
File: eXfk4sKqJsENBx-hBFwTHm0WD3A.mft (raw, json)
Hash identifier: S2vunlmk7ayNqEi3GOvtjDwDqKrQ+Qv8+LYCmQ1eyFA=
Subject key identifier: 49:D4:14:D0:B2:08:D5:B4:4E:BD:35:94:30:7C:9A:12:24:D3:A8:D0
Authority key identifier: 79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
Certificate issuer: /CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Certificate serial: 019EC30019C0D1109732F49BB52A8CFC3CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
Manifest number: 0214
Signing time: Sat 13 Jun 2026 22:00:24 +0000
Manifest this update: Sat 13 Jun 2026 22:00:24 +0000
Manifest next update: Sun 14 Jun 2026 22:00:24 +0000
Files and hashes: 1: Fw8PMiL8XbMvdKq8X17Je2tMF2E.roa (hash: NpJsXlY3046ddjEeyCOq10eq8sScmSmiV1XiKlKV9B0=)
2: eXfk4sKqJsENBx-hBFwTHm0WD3A.crl (hash: oSHU1yAmv9c89vY2xXu2tcVK8MShQKKz9eLD6hOf3vc=)
3: gX53hGvI2Ikan8CxxCyuf_vZ79I.roa (hash: 4mcjc+KxmF9esYxAnrxtXO1FlJlFgCD8tZbz9RIGOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:19:c0:d1:10:97:32:f4:9b:b5:2a:8c:fc:3c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Validity
Not Before: Jun 13 22:00:24 2026 GMT
Not After : Jun 14 22:00:24 2026 GMT
Subject: CN=49d414d0b208d5b44ebd3594307c9a1224d3a8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:0d:08:c9:78:59:0e:e8:86:cc:9d:34:e1:
10:04:e8:50:c5:0d:d2:3d:7e:d5:09:48:26:52:1d:
99:53:ce:c6:f4:ca:73:f2:3a:0a:90:5f:59:2c:4c:
8f:a3:93:cb:d8:3b:e5:af:a1:9d:91:4d:7d:1b:56:
0e:13:c4:41:a8:ae:21:fd:04:5b:f9:47:42:fa:7c:
78:f8:f0:08:63:ec:29:ca:ad:28:de:d1:d1:e4:33:
35:bc:bf:45:36:7f:8f:59:ca:45:c6:4f:39:13:d4:
3f:5d:6c:40:6a:bd:fb:8e:1b:20:64:42:3d:a4:10:
ae:72:be:71:82:2b:f6:36:1f:d7:bf:3c:ef:8a:ed:
a0:d4:0e:09:1a:44:11:9b:0a:64:26:b7:6e:89:2d:
30:c1:fe:92:37:e9:4c:b9:25:17:f9:c8:e4:5a:e0:
61:7a:fe:4d:d1:27:7f:81:ad:33:52:6e:c3:c7:75:
e6:47:69:f9:d8:a0:9b:17:33:1c:78:02:ec:b9:f0:
95:52:8a:64:e7:30:47:80:7f:b2:2e:85:eb:1e:b6:
54:30:d2:bb:04:de:12:91:fb:f9:18:66:35:99:51:
63:97:b3:09:e2:00:00:3b:ac:26:b5:66:e6:31:1a:
30:d5:57:54:05:10:74:a1:5b:cd:cd:58:df:4f:75:
5b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D4:14:D0:B2:08:D5:B4:4E:BD:35:94:30:7C:9A:12:24:D3:A8:D0
X509v3 Authority Key Identifier:
keyid:79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f5:b6:b7:ed:ed:02:63:1f:1c:d1:33:32:47:ff:24:e5:1e:
57:b9:ea:20:e6:96:ae:35:7d:9a:ce:50:79:7a:27:ac:89:0b:
c3:84:9b:eb:3d:58:bf:08:ee:f2:88:1c:23:96:99:0f:c5:c3:
ce:48:34:64:33:6d:3f:be:29:eb:5d:9c:af:3c:07:00:f5:e7:
3c:a4:7b:a4:d3:39:0c:7a:db:42:35:61:12:cd:33:ef:0f:c2:
1b:4a:fd:ce:c0:67:61:93:0e:77:ab:b1:e4:6e:77:48:a3:8f:
97:f1:93:77:69:5d:f4:ba:a3:f9:eb:64:a0:4a:6c:f4:16:ed:
a4:94:71:ba:2c:58:f2:e5:0b:85:4f:fe:bb:f3:39:d1:db:c8:
a4:e5:fc:84:f4:ee:ee:63:34:f7:bb:63:c0:74:a6:fb:0f:13:
f9:9b:eb:a1:c8:11:3c:65:cd:ee:16:b4:a4:c4:e5:77:e0:9d:
07:a8:1a:d6:ec:b1:8d:98:ef:d6:5d:fc:8c:86:a6:2c:9d:e3:
2e:88:6a:08:45:00:c5:c4:63:2c:bb:cf:a0:6c:61:0d:82:d0:
62:15:bc:cf:e4:77:19:d2:b8:7f:83:b4:53:16:3a:60:e7:21:
6b:fe:b4:2d:81:28:8e:6f:2b:5b:f1:ee:e3:c0:86:5c:0e:cc:
50:9c:f2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:05:20 2026 by rpki-client