Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
File: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft (raw, json)
Hash identifier: 42aEFdqJfghlIDuX9F6JTs3zDwhb0ynrpGT0vxxhaPk=
Subject key identifier: 15:B3:40:3A:8B:73:40:8A:28:67:AF:93:6C:78:ED:CA:5B:69:E9:C5
Authority key identifier: 11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
Certificate issuer: /CN=1171641f157cb57b532626359e71582742c2dccb
Certificate serial: 01A0D1FFEB1073BBBFC927D9B91A536AF192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
Manifest number: 193E
Signing time: Thu 24 Sep 2026 06:00:04 +0000
Manifest this update: Thu 24 Sep 2026 06:00:04 +0000
Manifest next update: Fri 25 Sep 2026 06:00:04 +0000
Files and hashes: 1: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl (hash: zGfUyPiq5e5GljrOcksK5sHKX5h6PsubrYU3Y0wZQT4=)
2: g3yb9GvnR-4yvkFxTiRQRjASrNM.roa (hash: IRUvAUHV7ruHaa7xmQq2ksFvesViZHulW4HJ9YDCukA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:ff:eb:10:73:bb:bf:c9:27:d9:b9:1a:53:6a:f1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1171641f157cb57b532626359e71582742c2dccb
Validity
Not Before: Sep 24 06:00:04 2026 GMT
Not After : Sep 25 06:00:04 2026 GMT
Subject: CN=15b3403a8b73408a2867af936c78edca5b69e9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cf:de:ee:52:6f:55:8a:bd:6d:39:6b:88:a2:
e2:b2:ea:20:12:6e:46:a0:11:a4:f6:3e:c5:a6:41:
3b:80:ae:25:d0:69:41:55:1e:79:ed:cf:87:de:a7:
c7:23:11:8e:af:70:d9:ad:32:5a:9c:76:7b:ec:a5:
50:0a:ef:58:71:dc:61:c1:9b:64:b9:b8:1a:21:0e:
72:14:87:1f:e8:24:74:23:9d:ac:b0:f9:b5:1e:ee:
f8:1c:4a:51:db:50:ed:d8:6a:95:11:d9:c2:a7:40:
0b:9c:fa:6d:ee:69:21:1d:68:8a:f6:21:22:b7:d0:
48:03:a0:09:5f:a3:6a:51:72:72:5f:bb:a4:48:b3:
ae:b6:9e:d2:7e:d2:b1:0e:2f:b4:7e:35:32:6d:df:
66:dc:fa:77:c4:ec:c2:8e:80:1f:7c:e9:32:b6:8a:
a1:2f:22:d9:db:b8:6d:9a:d1:46:58:f8:f9:d7:a9:
83:68:02:32:ae:bf:a0:8d:c4:8e:10:ae:46:40:5c:
b7:3b:48:60:88:c2:ae:ef:f4:0c:4d:1a:4e:9c:a9:
9c:75:f8:ca:a0:8d:fc:fa:96:85:d3:6f:ec:95:62:
73:f6:cd:f0:f3:49:75:23:c3:99:63:23:72:8d:f8:
ee:12:85:88:9a:20:5d:6b:f3:41:1e:39:ad:cf:0f:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B3:40:3A:8B:73:40:8A:28:67:AF:93:6C:78:ED:CA:5B:69:E9:C5
X509v3 Authority Key Identifier:
keyid:11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:00:e8:22:21:db:60:23:1d:36:85:3d:17:15:27:48:50:a4:
c3:77:5a:cf:91:b8:ff:c7:30:bd:55:09:30:f2:a0:c7:57:37:
af:32:3d:92:3f:6e:30:7c:cd:f7:f6:bf:9a:4a:9f:43:4f:64:
88:71:56:60:6b:c0:4b:d2:6b:15:4d:b9:35:c2:2d:a1:08:cc:
da:f6:70:31:98:4f:b2:d1:e9:b0:25:ae:16:18:2e:88:84:dc:
c2:54:0f:54:1c:40:56:4f:d5:2b:5d:94:2f:3f:6a:00:c8:f9:
4d:4c:df:c2:95:81:41:d7:b1:2b:d1:c8:60:a9:c7:47:53:32:
89:ae:aa:82:09:ff:a2:75:eb:b4:55:a9:c3:6f:66:41:63:1a:
a7:46:3f:8e:46:4d:dc:3c:8a:7c:93:93:0f:09:f2:c2:78:08:
3e:f1:32:80:7d:d4:c7:e8:78:95:ef:61:41:33:ba:69:ca:07:
83:66:7b:75:bf:72:68:28:5b:30:41:b1:c5:1e:61:a8:67:17:
d6:d9:a4:90:e0:d6:71:36:8a:28:48:4f:46:4f:13:54:d8:e6:
4e:66:6c:80:10:7a:c3:65:87:f0:9b:af:c1:e2:f7:f4:ae:da:
7e:f9:4d:1b:be:f3:5e:68:93:b1:3a:8e:ea:72:8f:56:fa:a3:
ce:31:ad:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDR/+sQc7u/ySfZuRpTavGSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNzE2NDFmMTU3Y2I1N2I1MzI2MjYzNTllNzE1ODI3NDJj
MmRjY2IwHhcNMjYwOTI0MDYwMDA0WhcNMjYwOTI1MDYwMDA0WjAzMTEwLwYDVQQD
EygxNWIzNDAzYThiNzM0MDhhMjg2N2FmOTM2Yzc4ZWRjYTViNjllOWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs/e7lJvVYq9bTlriKLisuogEm5G
oBGk9j7FpkE7gK4l0GlBVR557c+H3qfHIxGOr3DZrTJanHZ77KVQCu9YcdxhwZtk
ubgaIQ5yFIcf6CR0I52ssPm1Hu74HEpR21Dt2GqVEdnCp0ALnPpt7mkhHWiK9iEi
t9BIA6AJX6NqUXJyX7ukSLOutp7SftKxDi+0fjUybd9m3Pp3xOzCjoAffOkytoqh
LyLZ27htmtFGWPj516mDaAIyrr+gjcSOEK5GQFy3O0hgiMKu7/QMTRpOnKmcdfjK
oI38+paF02/slWJz9s3w80l1I8OZYyNyjfjuEoWImiBda/NBHjmtzw8+7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWzQDqLc0CKKGevk2x47cpbaenFMB8GA1UdIwQY
MBaAFBFxZB8VfLV7UyYmNZ5xWCdCwtzLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZmE3MTEtMDZiMC00MWUzLTljNzIt
M2NiOWUxMDJhZmUwLzEvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8zZmE3MTEtMDZiMC00MWUzLTljNzItM2NiOWUxMDJhZmUw
LzEvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGADoIiHb
YCMdNoU9FxUnSFCkw3daz5G4/8cwvVUJMPKgx1c3rzI9kj9uMHzN9/a/mkqfQ09k
iHFWYGvAS9JrFU25NcItoQjM2vZwMZhPstHpsCWuFhguiITcwlQPVBxAVk/VK12U
Lz9qAMj5TUzfwpWBQdexK9HIYKnHR1Myia6qggn/onXrtFWpw29mQWMap0Y/jkZN
3DyKfJOTDwnywngIPvEygH3Ux+h4le9hQTO6acoHg2Z7db9yaChbMEGxxR5hqGcX
1tmkkODWcTaKKEhPRk8TVNjmTmZsgBB6w2WH8JuvweL39K7afvlNG77zXmiTsTqO
6nKPVvqjzjGt3Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:58:09 2026 by rpki-client