Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
File: eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft (raw, json)
Hash identifier: X9GUhUmttzthb5dSsd2lfZHK+rORfZonQ8u/8Ynft0A=
Subject key identifier: 72:8A:72:DC:A4:53:9A:2F:AB:39:F1:C2:0B:95:C1:57:A2:A5:05:C5
Authority key identifier: 7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
Certificate issuer: /CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Certificate serial: 019CADFE829CE167FC2056C248B18AB9A818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
Manifest number: 013E
Signing time: Mon 02 Mar 2026 10:01:03 +0000
Manifest this update: Mon 02 Mar 2026 10:01:03 +0000
Manifest next update: Tue 03 Mar 2026 10:01:03 +0000
Files and hashes: 1: 3gMylm_7kdY05Np-Gs1Ujn2TpUw.roa (hash: W5KGrcdaIcr77/oIsEbLhshZMJrc2jrTw0N4xA3kS0o=)
2: SHM9R3kXlAO8-e-rYuN_jsGmG6M.roa (hash: X06rQu41FDn+MhiPC2VMwGHMTFpmXVd6mlDBUP0P6FE=)
3: eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl (hash: em0hwEqx3FtzvEQoqhhkYEhpOLiKi0uxJzRzWUVndoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:82:9c:e1:67:fc:20:56:c2:48:b1:8a:b9:a8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Validity
Not Before: Mar 2 10:01:03 2026 GMT
Not After : Mar 3 10:01:03 2026 GMT
Subject: CN=728a72dca4539a2fab39f1c20b95c157a2a505c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:91:d8:a2:7e:80:7f:e3:d0:ed:dc:ed:91:
ac:1c:4d:21:fa:f4:6a:f7:be:c1:62:fc:a2:1b:26:
75:36:04:b5:62:21:02:12:79:7d:1f:36:f2:08:bf:
8d:c8:0a:bd:9d:22:cb:8f:57:7e:b2:ff:13:e3:fe:
f6:94:fa:d6:fa:2c:c4:bb:fc:ff:19:fb:b0:d5:b7:
9b:64:7a:32:88:35:0b:99:79:10:c1:bc:99:3f:cc:
88:18:ea:3f:65:85:a8:b3:e4:49:b1:f6:d6:48:5b:
09:d1:11:53:da:ad:49:c8:69:4c:7b:a7:e4:43:2a:
43:b8:e3:46:bb:bc:f3:c0:da:17:14:7c:bd:7a:ea:
4b:2d:55:a2:8d:2e:22:48:12:17:58:a2:11:21:28:
ed:4c:15:21:75:1b:21:0c:cc:d6:76:ad:48:3d:bf:
04:75:40:71:c2:85:22:bd:66:64:eb:fa:97:6b:02:
42:bd:d0:67:2c:10:c3:74:57:e4:3c:56:98:88:c0:
0b:e3:e3:ef:89:24:44:77:14:c4:a1:b4:30:6c:d7:
44:4d:62:06:6c:19:7f:c8:71:d2:2d:68:a3:1f:b4:
ab:cc:c7:00:fc:97:5a:ca:70:d8:20:9e:e0:d4:65:
f7:4b:1f:91:05:e3:06:bd:d0:9d:1e:2a:8e:9f:f4:
ae:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8A:72:DC:A4:53:9A:2F:AB:39:F1:C2:0B:95:C1:57:A2:A5:05:C5
X509v3 Authority Key Identifier:
keyid:7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c3:32:62:96:05:06:34:7a:2f:8b:27:0d:52:c8:ee:42:2f:
76:42:84:d9:c7:e8:ac:97:b3:6e:91:0e:c7:bb:78:0f:72:73:
8e:05:ae:08:cf:70:47:9d:55:22:5f:be:72:08:30:f0:c7:18:
98:bb:58:ba:b0:d8:bc:0c:5c:e5:9f:17:49:c9:9d:4a:9e:05:
9c:30:b2:0f:ce:01:45:f7:e7:ad:55:df:84:b2:d0:7a:b1:db:
80:b1:c9:74:49:9f:ea:60:61:fd:d2:48:2b:34:01:0f:98:2e:
cd:e4:f5:5a:e4:98:1d:62:27:da:5d:98:a3:48:b2:a1:06:f5:
23:e3:d9:43:da:f7:af:1a:b0:46:6f:79:5c:2f:1a:fc:cb:ad:
e5:fa:3b:e7:9a:84:e8:63:ba:b5:98:59:97:a9:8e:94:1c:f6:
fa:f5:9a:ad:b6:33:4c:72:2d:93:be:18:de:70:f8:dc:7a:cf:
41:ab:b9:5a:99:41:70:9c:41:da:57:2c:46:aa:7c:dc:5f:3d:
05:03:69:8d:ea:84:d9:05:ca:86:9f:85:b0:42:c6:df:e9:d1:
d9:b8:59:30:14:e8:0c:d9:49:ba:ca:ae:2a:90:05:64:ec:6d:
bb:45:93:d4:0d:72:a1:b4:85:2f:72:c1:73:2e:ae:5f:6e:77:
81:57:d6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:32 2026 by rpki-client