Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
File: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json)
Hash identifier: 4z9UGyvT5XITv5vGu474z5poXVKrOgpQ9wyXkMxL7Ns=
Subject key identifier: 98:FC:C2:56:94:67:17:3C:3A:D5:83:61:F1:9C:59:E5:FF:60:AB:8C
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Certificate issuer: /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial: 019F946D8CC8CC2F01EB1BA243C77A001D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
Manifest number: 1948
Signing time: Fri 24 Jul 2026 14:00:35 +0000
Manifest this update: Fri 24 Jul 2026 14:00:35 +0000
Manifest next update: Sat 25 Jul 2026 14:00:35 +0000
Files and hashes: 1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: h5qkzDNT95+niTdeSIOGYfM5jDb8NzT5lTioZWGKM+o=)
2: XTqrU8Fe3dyCsrhN-j7VCGJxXio.roa (hash: f4c8Huch2WTliXq5MFgPvjqV6741k9rGMrHBDUOfaY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:8c:c8:cc:2f:01:eb:1b:a2:43:c7:7a:00:1d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Validity
Not Before: Jul 24 14:00:35 2026 GMT
Not After : Jul 25 14:00:35 2026 GMT
Subject: CN=98fcc2569467173c3ad58361f19c59e5ff60ab8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:79:b8:de:68:36:d5:a1:c0:c0:71:66:4e:
7f:f6:76:c4:0a:db:fe:b2:58:90:93:2e:5c:3f:b3:
2d:26:fb:b7:0b:71:08:3b:70:a9:fd:4d:ab:38:ac:
6e:b9:10:b0:9d:33:09:ec:3e:76:23:2c:a2:dc:af:
e5:3b:04:5f:c4:a5:e8:8c:0d:d6:7b:c8:46:15:dd:
ba:93:b6:fb:19:20:bc:de:22:ef:08:f5:90:99:2c:
1b:11:74:cb:e8:7b:4d:b5:6a:5b:89:12:2a:13:7b:
f2:9f:cd:7b:01:c4:ca:16:25:1f:b8:e8:73:93:fb:
e2:ae:50:e7:f6:9d:bf:85:19:e5:78:b5:69:79:f9:
99:de:4b:c5:c2:64:a2:2e:73:91:56:ac:37:6d:d5:
f3:3f:ff:53:17:96:20:98:c8:8d:47:6f:35:f4:8d:
65:5b:f5:be:a6:be:89:c5:4b:8e:0b:e6:5a:b9:c9:
35:77:dc:68:ee:4e:81:22:f7:03:33:d5:f9:6c:33:
28:90:aa:86:32:1f:bd:05:bc:4b:db:6f:a4:54:e5:
af:ae:4f:75:68:d3:18:33:a5:e5:f0:d7:f1:4a:2a:
7d:bf:20:06:95:47:99:d3:dc:fc:5e:0b:f8:48:9e:
e5:08:3b:7a:b5:cf:14:f0:0d:3e:be:98:01:22:5e:
e2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FC:C2:56:94:67:17:3C:3A:D5:83:61:F1:9C:59:E5:FF:60:AB:8C
X509v3 Authority Key Identifier:
keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:02:0f:9c:3d:9e:d1:26:ae:3e:14:d8:65:8b:13:57:7f:0c:
b6:c4:9e:85:24:7f:22:6c:fd:7a:ea:cf:f2:e2:a0:ae:1a:ee:
51:50:da:00:5f:54:1d:eb:84:13:d9:ce:69:98:78:fb:91:fa:
f8:a6:26:31:18:58:9f:03:82:0a:66:8f:09:d5:6e:21:64:32:
50:97:cb:96:ce:b8:1e:43:57:68:57:48:43:c3:97:48:8b:d0:
43:e2:ce:9a:d6:d2:cb:97:e6:7e:f2:e5:dd:c3:46:26:dc:4e:
97:04:7d:14:a3:25:96:5d:a9:fd:bb:a7:02:4e:be:ca:e6:98:
86:80:05:27:70:cc:b9:a5:3e:7f:76:fa:48:d1:a3:97:a6:46:
3c:76:03:cd:8f:32:4c:32:db:ec:5e:35:7b:39:7f:6d:a3:c7:
66:31:b7:b9:c3:ff:a8:de:f2:56:f1:d8:9a:b9:2e:1e:53:b6:
af:64:cd:14:b9:7c:c3:86:09:85:ab:b2:85:98:30:03:4f:75:
03:84:b2:22:42:3a:8b:4b:00:fe:15:7e:48:8c:b2:9e:55:92:
2f:cd:53:48:c6:05:81:fe:f4:ae:87:25:22:7c:48:05:db:00:
af:16:cd:a5:7d:6f:d6:80:b2:13:49:af:75:6c:0f:77:41:1a:
c0:d7:20:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:11:51 2026 by rpki-client