Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
File: eXfk4sKqJsENBx-hBFwTHm0WD3A.mft (raw, json)
Hash identifier: gNN3ZZuridcgZ+9xz4TVp+f+/Y/c7FYxA0I9rTHYxYs=
Subject key identifier: 70:25:41:26:BD:BB:18:10:67:22:B2:DE:FA:0B:D7:A2:8C:60:64:25
Authority key identifier: 79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
Certificate issuer: /CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Certificate serial: 01A0DDCDFEC1D394BEEAD7314959A45944DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
Manifest number: 032B
Signing time: Sat 26 Sep 2026 13:00:59 +0000
Manifest this update: Sat 26 Sep 2026 13:00:59 +0000
Manifest next update: Sun 27 Sep 2026 13:00:59 +0000
Files and hashes: 1: Fw8PMiL8XbMvdKq8X17Je2tMF2E.roa (hash: NpJsXlY3046ddjEeyCOq10eq8sScmSmiV1XiKlKV9B0=)
2: eXfk4sKqJsENBx-hBFwTHm0WD3A.crl (hash: J1/pkhm0c6AZg2z/4xfBDwy11fHEP8mxAiD6WqQKdQE=)
3: gX53hGvI2Ikan8CxxCyuf_vZ79I.roa (hash: 4mcjc+KxmF9esYxAnrxtXO1FlJlFgCD8tZbz9RIGOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:cd:fe:c1:d3:94:be:ea:d7:31:49:59:a4:59:44:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Validity
Not Before: Sep 26 13:00:59 2026 GMT
Not After : Sep 27 13:00:59 2026 GMT
Subject: CN=70254126bdbb18106722b2defa0bd7a28c606425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:1b:1c:5e:b9:46:dc:9e:d6:ae:17:02:54:
ed:6a:cc:cd:1a:eb:5a:fe:ae:6f:57:6e:24:d2:4f:
84:1d:28:7f:4b:44:be:15:b4:27:85:97:71:83:cd:
f2:f0:35:82:51:34:5f:e3:79:0f:5e:87:32:01:0a:
f9:33:e1:18:bf:b8:36:0f:23:ef:18:f9:9d:8f:05:
cb:ce:9c:90:b1:b4:95:67:82:1c:2c:c0:af:51:e0:
3d:a2:95:e1:3b:cd:a1:e0:f7:01:12:99:d8:e8:d0:
93:c9:b1:cf:46:de:7f:ab:43:18:8f:0f:50:98:c3:
6b:d5:5b:b6:7c:f1:40:28:68:c2:b0:f6:87:3e:84:
ef:df:d3:34:03:11:d7:1e:0d:14:3e:d5:46:21:a4:
55:96:61:cc:4e:d4:a8:6e:7c:89:0e:1b:9c:f4:70:
44:81:04:cf:d8:28:50:93:e0:31:16:40:b4:88:77:
d2:d5:40:18:bc:01:95:f8:b0:d6:98:b3:6a:30:74:
c8:d4:47:ab:1a:5a:c4:60:06:f1:63:43:2c:0d:93:
8b:ba:14:43:3a:e3:cb:43:46:53:36:2a:cd:e0:e3:
84:7d:8b:fe:d7:8e:cd:b5:f2:6a:72:82:f8:3d:c4:
e0:48:a9:bf:29:c0:7a:1c:e2:be:7c:da:dc:4c:49:
71:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:25:41:26:BD:BB:18:10:67:22:B2:DE:FA:0B:D7:A2:8C:60:64:25
X509v3 Authority Key Identifier:
keyid:79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cf:f1:24:b6:69:6a:1c:64:0c:51:8a:f9:dd:5a:df:e2:f3:
09:a8:81:fa:ce:5e:84:37:46:22:bb:e0:be:26:41:0d:16:19:
97:bd:bf:59:85:0a:88:6d:8b:55:b4:f6:d0:1b:19:5f:33:b8:
87:20:67:ad:b8:15:54:f0:ad:f1:5f:d1:96:fe:a3:2f:fa:da:
85:db:56:ba:45:e5:12:a2:18:e4:90:eb:8a:23:43:6a:91:5d:
ae:f5:b5:61:00:76:6b:18:d9:1f:05:b1:4b:d7:85:c5:e3:9a:
2e:40:00:50:bc:4b:85:2d:37:ce:54:64:1c:da:44:f0:3a:5f:
c7:df:50:27:cb:81:e6:d6:09:72:1c:6e:8a:b5:62:3f:62:50:
4f:18:8a:85:55:45:9e:39:e9:5d:69:8b:dd:30:f9:2d:0e:db:
eb:47:89:5b:aa:45:e7:34:5d:d0:4d:f7:fd:86:d9:64:5f:e2:
bc:06:6e:95:24:d5:1f:b9:d1:49:1d:21:a5:60:36:68:73:17:
22:e0:fd:c5:3e:97:91:3b:2a:9c:72:06:b1:57:b4:32:d8:e9:
8a:d3:ea:4a:64:68:a0:97:2d:0a:3b:e1:3a:74:f1:6c:80:36:
af:72:10:9f:fb:ee:08:92:33:21:c7:35:2f:0e:6d:54:24:c7:
08:31:9f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:32:32 2026 by rpki-client