Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
File: eXfk4sKqJsENBx-hBFwTHm0WD3A.mft (raw, json)
Hash identifier: kUrOPQ5CCXP9GMI1sfWMIVDIkDnKFiDf0b1lRm/5o5g=
Subject key identifier: 81:FE:36:3F:42:BD:B0:B8:52:E4:75:03:CF:31:A1:FF:48:8F:0C:69
Authority key identifier: 79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
Certificate issuer: /CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Certificate serial: 01A11B99FCB283A2F6C8161CB5B52CDB66F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
Manifest number: 034B
Signing time: Thu 08 Oct 2026 13:00:38 +0000
Manifest this update: Thu 08 Oct 2026 13:00:38 +0000
Manifest next update: Fri 09 Oct 2026 13:00:38 +0000
Files and hashes: 1: Fw8PMiL8XbMvdKq8X17Je2tMF2E.roa (hash: NpJsXlY3046ddjEeyCOq10eq8sScmSmiV1XiKlKV9B0=)
2: eXfk4sKqJsENBx-hBFwTHm0WD3A.crl (hash: 26wZtzL91FQQJzLVmsXoC5UTw9uBbDAXz2WqJ9SS9BY=)
3: gX53hGvI2Ikan8CxxCyuf_vZ79I.roa (hash: 4mcjc+KxmF9esYxAnrxtXO1FlJlFgCD8tZbz9RIGOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:99:fc:b2:83:a2:f6:c8:16:1c:b5:b5:2c:db:66:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Validity
Not Before: Oct 8 13:00:38 2026 GMT
Not After : Oct 9 13:00:38 2026 GMT
Subject: CN=81fe363f42bdb0b852e47503cf31a1ff488f0c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:01:df:b2:17:18:bf:c2:25:09:4e:71:d5:
dc:a2:f1:84:0f:46:e7:23:f9:fc:77:d4:6b:d2:d3:
0b:1b:17:5e:62:c0:9b:36:51:e0:a1:1e:3b:c1:8c:
74:04:20:80:00:66:a2:03:3f:d6:ce:1e:45:fd:f9:
69:4f:f6:7f:37:ba:3c:4d:90:44:b0:9c:b2:b0:32:
75:d2:69:d9:46:de:16:68:99:20:39:d4:90:81:27:
0d:a0:ad:35:19:71:e4:fe:cd:b6:ad:eb:74:c4:e4:
a5:8e:14:b6:16:89:72:10:a1:e3:42:05:a5:2a:f4:
d0:9d:46:c2:67:4e:28:66:fb:14:08:1a:a3:cc:04:
14:78:7d:5f:f9:af:ec:51:f5:2b:a6:b2:5f:41:32:
1d:52:10:52:3f:ad:12:bc:d1:84:58:b2:82:a8:55:
54:09:de:51:99:a8:41:27:eb:44:ab:e4:07:c5:0a:
fd:f6:d8:60:8b:91:7b:32:42:54:37:19:08:d8:7e:
6c:98:40:c4:68:a3:e6:7c:2f:50:1a:b4:8e:31:d4:
cc:77:1e:94:8b:47:3b:f3:65:4b:4f:e2:48:80:35:
d8:4a:a2:d9:9d:8c:2b:00:b2:62:d4:df:be:84:b1:
51:72:0b:f1:b9:df:e0:4d:ba:3e:28:5b:6a:11:2b:
bf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FE:36:3F:42:BD:B0:B8:52:E4:75:03:CF:31:A1:FF:48:8F:0C:69
X509v3 Authority Key Identifier:
keyid:79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c5:bd:d4:1b:ac:73:2b:e6:91:8b:67:27:9d:e4:6f:f2:09:
43:cd:8e:a4:de:ff:8a:51:56:97:b3:5c:e6:b5:cf:7e:33:b1:
ea:46:3a:06:57:6f:7f:f7:54:7e:32:31:b5:84:33:10:d6:2e:
72:c3:7d:19:38:81:bd:80:e8:44:64:30:f3:bc:9a:63:af:49:
1d:f7:c0:6e:08:44:4f:31:09:4c:ad:e5:61:a8:c4:6a:0e:97:
88:15:34:e1:bf:4b:10:c5:73:a3:30:bf:29:73:cb:62:19:57:
ad:e3:85:4e:66:53:b6:8b:97:6c:6f:0a:2b:80:b5:45:1a:26:
01:51:7a:3d:34:84:3a:e5:86:4c:a5:89:c7:35:62:de:98:1f:
74:b0:33:9f:76:cb:22:29:a3:fe:92:18:65:26:4b:e6:e6:89:
0a:9d:a1:b0:cc:42:ec:b0:28:1b:84:10:f2:42:fc:7c:83:e9:
de:69:7d:0d:de:a0:ac:71:d2:87:ac:cb:05:6b:35:61:a0:08:
db:7d:ed:fa:30:a1:9b:d8:f2:c6:3e:5f:a0:65:f2:26:1a:0a:
ad:e0:79:e8:17:93:72:3b:31:15:43:6a:4d:5d:77:64:91:f5:
6c:93:e8:17:12:b9:6f:3d:e9:db:54:1b:3a:43:85:f5:76:90:
29:37:4d:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEbmfyyg6L2yBYctbUs22b0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzdlNGUyYzJhYTI2YzEwZDA3MWZhMTA0NWMxMzFlNmQx
NjBmNzAwHhcNMjYxMDA4MTMwMDM4WhcNMjYxMDA5MTMwMDM4WjAzMTEwLwYDVQQD
Eyg4MWZlMzYzZjQyYmRiMGI4NTJlNDc1MDNjZjMxYTFmZjQ4OGYwYzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs4B37IXGL/CJQlOcdXcovGED0bn
I/n8d9Rr0tMLGxdeYsCbNlHgoR47wYx0BCCAAGaiAz/Wzh5F/flpT/Z/N7o8TZBE
sJyysDJ10mnZRt4WaJkgOdSQgScNoK01GXHk/s22ret0xOSljhS2FolyEKHjQgWl
KvTQnUbCZ04oZvsUCBqjzAQUeH1f+a/sUfUrprJfQTIdUhBSP60SvNGEWLKCqFVU
Cd5RmahBJ+tEq+QHxQr99thgi5F7MkJUNxkI2H5smEDEaKPmfC9QGrSOMdTMdx6U
i0c782VLT+JIgDXYSqLZnYwrALJi1N++hLFRcgvxud/gTbo+KFtqESu/CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIH+Nj9CvbC4UuR1A88xof9IjwxpMB8GA1UdIwQY
MBaAFHl35OLCqibBDQcfoQRcEx5tFg9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NzE3ZDktODY3MS00YzYwLThmZDkt
MjIxNmMzOTU3NTk4LzEvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS82NzE3ZDktODY3MS00YzYwLThmZDktMjIxNmMzOTU3NTk4
LzEvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwMW91Bus
cyvmkYtnJ53kb/IJQ82OpN7/ilFWl7Nc5rXPfjOx6kY6Bldvf/dUfjIxtYQzENYu
csN9GTiBvYDoRGQw87yaY69JHffAbghETzEJTK3lYajEag6XiBU04b9LEMVzozC/
KXPLYhlXreOFTmZTtouXbG8KK4C1RRomAVF6PTSEOuWGTKWJxzVi3pgfdLAzn3bL
Iimj/pIYZSZL5uaJCp2hsMxC7LAoG4QQ8kL8fIPp3ml9Dd6grHHSh6zLBWs1YaAI
233t+jChm9jyxj5foGXyJhoKreB56BeTcjsxFUNqTV13ZJH1bJPoFxK5bz3p21Qb
OkOF9XaQKTdNXg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 17:33:29 2026 by rpki-client