Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
File: eXfk4sKqJsENBx-hBFwTHm0WD3A.mft (raw, json)
Hash identifier: P9BDlpMCD0aR1Bggl02obQvelyAU5Nsuji16XTiHJ8E=
Subject key identifier: 97:36:7F:14:8F:3F:26:3D:95:F4:26:29:9D:6D:0C:44:3D:46:4B:8B
Authority key identifier: 79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
Certificate issuer: /CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Certificate serial: 019F8FB4E508EE5514C031E1C1536202B7E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
Manifest number: 027E
Signing time: Thu 23 Jul 2026 16:00:24 +0000
Manifest this update: Thu 23 Jul 2026 16:00:24 +0000
Manifest next update: Fri 24 Jul 2026 16:00:24 +0000
Files and hashes: 1: Fw8PMiL8XbMvdKq8X17Je2tMF2E.roa (hash: NpJsXlY3046ddjEeyCOq10eq8sScmSmiV1XiKlKV9B0=)
2: eXfk4sKqJsENBx-hBFwTHm0WD3A.crl (hash: mVTJ645WpHRQfspiFGas1vrGwm3nzIosJLCDdfx3yKA=)
3: gX53hGvI2Ikan8CxxCyuf_vZ79I.roa (hash: 4mcjc+KxmF9esYxAnrxtXO1FlJlFgCD8tZbz9RIGOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:e5:08:ee:55:14:c0:31:e1:c1:53:62:02:b7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70
Validity
Not Before: Jul 23 16:00:24 2026 GMT
Not After : Jul 24 16:00:24 2026 GMT
Subject: CN=97367f148f3f263d95f426299d6d0c443d464b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:24:be:2f:cd:3b:d1:4d:c9:b3:7c:9b:c2:
e6:9a:f6:39:1c:a7:95:6e:de:98:9e:10:7b:fa:7a:
e4:c7:10:94:38:65:f9:04:9b:06:da:95:24:76:df:
75:bd:01:67:7a:e9:ec:56:7c:8a:b4:6f:da:9e:07:
83:7f:32:70:61:b5:36:12:c2:8b:a2:91:45:81:17:
c1:c0:c3:23:cf:57:f7:07:f1:36:77:43:d6:ed:16:
b5:9e:9b:01:38:97:1f:16:ec:02:2d:18:99:71:e2:
b0:3e:06:fe:85:67:3e:37:db:f9:6b:a4:7f:fd:3a:
48:19:2b:10:98:10:51:9c:ee:ac:4e:d1:68:8d:6a:
06:0a:35:7d:f6:b6:80:89:3c:bf:c3:a1:a7:d3:30:
cf:9c:a5:81:33:02:a3:6f:11:7e:ef:3c:9d:cb:17:
4a:9a:de:86:91:2a:6d:21:74:2e:59:47:f7:37:37:
a2:b8:f1:da:29:27:b2:79:fc:3a:9e:16:c0:30:fe:
84:be:30:94:07:5c:1c:9e:d5:d8:a2:6e:5d:ee:57:
c4:0a:f4:d2:d4:9d:e9:8d:e9:92:92:ab:7b:24:ed:
c1:3d:94:45:69:23:0d:9d:5f:1f:69:ff:cc:b6:67:
8b:4b:2e:cc:05:8a:87:40:43:95:3e:54:35:10:df:
b3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:36:7F:14:8F:3F:26:3D:95:F4:26:29:9D:6D:0C:44:3D:46:4B:8B
X509v3 Authority Key Identifier:
keyid:79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f9:66:bd:f2:7c:36:97:ef:64:64:14:a2:f1:de:4f:bf:9f:
94:eb:bd:79:a1:0a:84:1e:d0:3c:ef:fd:69:d2:c0:20:14:a9:
83:36:ed:65:71:69:ef:0e:9b:d4:27:9f:21:97:6e:33:ff:44:
bd:e4:0e:5b:18:90:2d:b9:2e:70:67:cc:95:d1:48:66:ed:a6:
66:b0:43:05:7d:57:81:d3:3c:14:98:40:02:4e:f7:9e:01:0b:
fe:09:1a:a6:51:43:00:94:9e:bc:e7:08:91:e6:d0:51:aa:c1:
f0:0a:f0:e4:c9:83:c3:58:03:0a:55:9a:b1:c1:43:34:04:68:
23:ce:02:37:1a:2c:34:45:39:61:74:e3:07:5c:8d:71:e6:31:
a3:8c:5e:63:dd:74:b0:ca:0f:dd:2a:2d:b0:ed:95:b1:cd:f9:
a2:80:37:bf:97:a7:3b:2f:35:75:ee:68:09:f6:21:e5:b2:f7:
e8:a7:14:f8:03:42:b1:45:e4:87:ef:db:f5:37:e0:b8:02:f8:
52:48:3a:1e:96:d7:3e:bb:93:69:bb:64:58:74:30:18:2d:a7:
72:4c:d4:f1:b5:5f:9d:b8:29:55:17:a0:12:20:72:2a:2f:e4:
1d:04:a9:5d:03:ea:43:33:4e:3e:05:b8:0b:90:b7:c5:46:75:
b3:83:96:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtOUI7lUUwDHhwVNiArfjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzdlNGUyYzJhYTI2YzEwZDA3MWZhMTA0NWMxMzFlNmQx
NjBmNzAwHhcNMjYwNzIzMTYwMDI0WhcNMjYwNzI0MTYwMDI0WjAzMTEwLwYDVQQD
Eyg5NzM2N2YxNDhmM2YyNjNkOTVmNDI2Mjk5ZDZkMGM0NDNkNDY0YjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxQkvi/NO9FNybN8m8LmmvY5HKeV
bt6YnhB7+nrkxxCUOGX5BJsG2pUkdt91vQFneunsVnyKtG/angeDfzJwYbU2EsKL
opFFgRfBwMMjz1f3B/E2d0PW7Ra1npsBOJcfFuwCLRiZceKwPgb+hWc+N9v5a6R/
/TpIGSsQmBBRnO6sTtFojWoGCjV99raAiTy/w6Gn0zDPnKWBMwKjbxF+7zydyxdK
mt6GkSptIXQuWUf3NzeiuPHaKSeyefw6nhbAMP6EvjCUB1wcntXYom5d7lfECvTS
1J3pjemSkqt7JO3BPZRFaSMNnV8faf/MtmeLSy7MBYqHQEOVPlQ1EN+zAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJc2fxSPPyY9lfQmKZ1tDEQ9RkuLMB8GA1UdIwQY
MBaAFHl35OLCqibBDQcfoQRcEx5tFg9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NzE3ZDktODY3MS00YzYwLThmZDkt
MjIxNmMzOTU3NTk4LzEvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS82NzE3ZDktODY3MS00YzYwLThmZDktMjIxNmMzOTU3NTk4
LzEvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx/lmvfJ8
NpfvZGQUovHeT7+flOu9eaEKhB7QPO/9adLAIBSpgzbtZXFp7w6b1CefIZduM/9E
veQOWxiQLbkucGfMldFIZu2mZrBDBX1XgdM8FJhAAk73ngEL/gkaplFDAJSevOcI
kebQUarB8Arw5MmDw1gDClWascFDNARoI84CNxosNEU5YXTjB1yNceYxo4xeY910
sMoP3SotsO2Vsc35ooA3v5enOy81de5oCfYh5bL36KcU+ANCsUXkh+/b9TfguAL4
Ukg6HpbXPruTabtkWHQwGC2nckzU8bVfnbgpVRegEiByKi/kHQSpXQPqQzNOPgW4
C5C3xUZ1s4OW2w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:01 2026 by rpki-client