Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
File: eXfk4sKqJsENBx-hBFwTHm0WD3A.mft (raw, json)
Hash identifier: Azuk24dkNuimpWz2Vl+6WgWdHfW3BrB80sfwAwVHaUM=
Subject key identifier: 21:08:11:66:D2:10:E7:DB:AA:23:69:1A:D5:A4:D0:CB:02:CC:E3:3B
Authority key identifier: 79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
Certificate issuer: /CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Certificate serial: 019D26964CED5B8C5A53D9C2874FE0F5C53F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
Manifest number: 013E
Signing time: Wed 25 Mar 2026 20:01:17 +0000
Manifest this update: Wed 25 Mar 2026 20:01:17 +0000
Manifest next update: Thu 26 Mar 2026 20:01:17 +0000
Files and hashes: 1: Fw8PMiL8XbMvdKq8X17Je2tMF2E.roa (hash: NpJsXlY3046ddjEeyCOq10eq8sScmSmiV1XiKlKV9B0=)
2: eXfk4sKqJsENBx-hBFwTHm0WD3A.crl (hash: BumpGxbuMEUW8dH1ejYKmdOLGS8yPEizAxcWCvDNPr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:4c:ed:5b:8c:5a:53:d9:c2:87:4f:e0:f5:c5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Validity
Not Before: Mar 25 20:01:17 2026 GMT
Not After : Mar 26 20:01:17 2026 GMT
Subject: CN=21081166d210e7dbaa23691ad5a4d0cb02cce33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ab:5b:de:e0:07:05:4d:ff:87:b0:7d:7f:97:
95:a9:63:92:86:fe:f1:f8:cf:67:66:19:a5:c5:b4:
75:aa:2c:35:07:2c:02:de:3f:8a:da:9d:51:25:55:
d7:fe:93:80:16:62:ad:d9:a3:61:dc:da:4d:e2:62:
5c:a8:c0:c8:87:b3:0c:39:8e:6e:e2:2f:36:a1:61:
fb:bb:c5:4b:8b:44:6b:06:d5:80:0f:97:95:43:f8:
a8:18:65:d0:96:38:3b:d2:93:3c:0a:9f:49:73:68:
44:20:29:3d:44:d2:97:6a:cd:d4:48:7b:de:ee:47:
7e:87:dd:12:6b:55:dd:ac:54:ec:6e:fe:9b:52:45:
05:c7:93:1a:b3:29:bd:9d:a8:e8:18:23:ac:d7:4c:
7c:40:b8:a3:22:4a:70:9c:25:c3:d3:f0:27:a6:ca:
8f:2d:d1:10:2c:91:2d:5a:3e:2b:e9:d5:d9:3c:f6:
41:e5:8a:b6:95:84:3d:75:88:f4:29:3c:1c:49:26:
ae:53:b5:92:36:31:20:31:a5:28:18:16:1e:db:59:
21:95:45:ca:0f:53:c3:fe:b8:d8:39:7b:30:96:83:
3e:e6:42:3d:5c:c9:39:f1:fa:b1:c4:5f:25:32:2c:
fd:ec:f5:f8:c0:8c:62:68:0c:d9:52:9f:e2:ea:1a:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:08:11:66:D2:10:E7:DB:AA:23:69:1A:D5:A4:D0:CB:02:CC:E3:3B
X509v3 Authority Key Identifier:
keyid:79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0c:5b:ff:4f:87:fb:56:7f:88:18:78:da:27:94:ee:4e:fc:
6b:86:bc:a6:ae:02:d4:5a:70:81:89:3b:e7:62:4a:0c:e0:c0:
c8:24:83:1f:22:52:e8:65:c1:66:f6:e9:55:17:34:f9:53:67:
0a:97:ad:a6:d2:bb:f4:0b:db:0f:6f:fd:93:7b:18:f4:ec:20:
17:ee:e8:c4:cb:65:54:73:cc:9a:cb:80:83:19:6a:ee:7a:8a:
b5:ab:e9:1b:39:06:6a:25:14:b4:5d:39:31:03:a7:0f:0a:21:
eb:96:25:4e:a5:ca:bd:94:3e:4d:d7:00:fc:5e:7c:a9:c7:6b:
50:50:6c:2c:dc:43:03:56:83:5d:03:15:5f:db:b3:7d:c4:ab:
57:2d:67:ad:40:88:dd:e7:35:e5:a7:db:eb:51:ea:52:30:7e:
b5:2b:ef:97:89:cb:c4:61:7d:7a:27:3f:51:40:c5:a4:b3:17:
71:e8:67:2a:0e:0f:b8:33:0b:d5:13:84:06:b2:ef:03:c4:06:
76:47:29:39:d4:fa:ac:0e:b2:45:f1:f9:5d:26:03:d7:7b:b1:
65:58:40:37:c0:eb:7f:95:fa:bc:68:42:0b:8b:dd:60:ca:b3:
b1:e6:45:28:1c:dd:f3:4b:43:f3:f9:ca:28:12:58:b8:f5:93:
4c:dc:4f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:27 2026 by rpki-client