Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
File: eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft (raw, json)
Hash identifier: xsrpM/XY3yWg09MV5xI455vvHl7pN9dXHJxBwkXAxec=
Subject key identifier: 27:0E:28:AF:AD:AE:0E:55:D2:B0:E5:56:F5:39:1F:4C:4A:04:B9:8D
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 019EC3A5BE0F1E6E91AF0E4F44AF1A0DEC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
Manifest number: 0961
Signing time: Sun 14 Jun 2026 01:01:19 +0000
Manifest this update: Sun 14 Jun 2026 01:01:19 +0000
Manifest next update: Mon 15 Jun 2026 01:01:19 +0000
Files and hashes: 1: AmpembMZnQ3F11s0E_0dYki25Mc.roa (hash: WDbKJoErc1LVQLx62LO/KjvhetUehDjF17FpYSbvL/4=)
2: PKXuRc_5_wM56Jttnq1znbxTNrM.roa (hash: wNBNrg7iwt49739UTs0ZF6veqyOIJdBVUfKeZkV8DDw=)
3: eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl (hash: dq21fE0dR7czoXYo8ba6n2NXZy8cBsZ8ArAPMLyCsxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:be:0f:1e:6e:91:af:0e:4f:44:af:1a:0d:ec:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Jun 14 01:01:19 2026 GMT
Not After : Jun 15 01:01:19 2026 GMT
Subject: CN=270e28afadae0e55d2b0e556f5391f4c4a04b98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:15:fd:66:b7:39:08:a1:9a:9f:a8:16:64:
cd:35:d3:49:89:ba:a5:e0:31:e7:a2:40:6f:5f:89:
35:34:dd:69:e2:15:3d:5e:b2:e3:c6:b0:c4:db:5a:
db:ba:ae:65:12:60:a9:70:02:f6:ac:70:2d:c2:37:
1b:49:af:a0:14:36:34:48:60:f6:9d:b5:32:87:b1:
ed:aa:1d:cb:b4:65:b6:7e:59:58:e3:34:00:66:cd:
36:8a:53:36:49:3e:7f:77:df:4b:af:1b:43:6f:28:
a7:0e:fd:4a:75:76:4e:03:43:16:5c:a1:45:0b:0a:
99:22:85:b0:8e:01:37:c2:19:9d:99:b4:a8:23:34:
00:f9:58:69:51:0c:78:d3:5c:33:d7:cb:26:e9:ff:
9c:a9:30:15:9d:37:c6:8f:32:29:07:07:28:51:d6:
a5:f5:18:8f:bd:ec:23:2b:ec:6f:31:c2:56:12:de:
61:df:f3:a0:4d:b3:b3:77:2c:e3:1d:78:ac:02:25:
99:24:27:33:c9:fb:f9:e5:fb:39:4c:15:fc:6e:74:
98:27:f2:d7:3b:e7:f6:da:d4:bc:87:ee:b6:e0:14:
68:15:3e:69:88:80:05:0e:de:64:0b:05:b8:bc:bc:
f5:dd:42:38:f0:20:a8:c4:c2:d3:00:c4:59:56:54:
28:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0E:28:AF:AD:AE:0E:55:D2:B0:E5:56:F5:39:1F:4C:4A:04:B9:8D
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:17:32:01:cc:d2:7e:77:b4:ac:72:75:6b:0b:cc:d9:92:e3:
77:27:78:be:16:0a:66:4f:3f:74:d0:3f:5f:16:bf:7f:1b:74:
f0:b9:f5:c4:78:63:4b:3b:6a:9d:36:b2:26:8a:15:db:a8:a5:
9d:17:b4:39:a3:e2:de:c1:26:39:50:5b:c5:28:7b:76:f9:ec:
50:77:8c:ee:74:b7:56:76:13:4d:01:dd:2f:6f:f9:d6:00:c8:
f0:a2:dc:7e:9c:10:68:ba:7f:c4:20:80:0b:b1:25:af:ad:f7:
3f:dd:28:31:e4:27:f5:40:37:5f:37:19:05:ca:a4:09:1f:90:
d7:7a:8a:fa:2d:f8:7e:1e:97:db:e7:82:9a:3d:25:b6:aa:47:
df:8a:2e:dd:3e:4d:81:3b:23:16:c7:6b:7f:f5:e6:79:f5:82:
ee:df:bd:e6:7b:3c:c1:13:36:15:fe:d9:63:fe:16:be:07:fc:
ee:2b:4e:e2:b0:1b:b6:4b:71:e3:36:27:18:5a:23:4c:ed:8d:
47:6a:98:79:96:cf:c9:4f:f6:6a:85:0f:ee:37:f1:d8:30:71:
cf:db:f4:a7:a2:60:9e:18:e2:88:88:f4:7d:13:39:6e:9e:51:
82:b0:77:9d:14:14:3f:bd:b0:52:8c:37:3a:b9:6d:b5:47:a3:
28:22:ae:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:24 2026 by rpki-client