Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
File: eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft (raw, json)
Hash identifier: y3MPQBszjYBhB2jS60KXDo9s9HWRW9nm6/qhXiG7LPc=
Subject key identifier: E9:FD:89:8A:20:BA:A0:6F:BD:D7:F3:57:F0:65:A8:67:65:55:F4:0D
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 019F94365EDA45B6C2DB8691E9E9CC4C382E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
Manifest number: 09CD
Signing time: Fri 24 Jul 2026 13:00:18 +0000
Manifest this update: Fri 24 Jul 2026 13:00:18 +0000
Manifest next update: Sat 25 Jul 2026 13:00:18 +0000
Files and hashes: 1: AmpembMZnQ3F11s0E_0dYki25Mc.roa (hash: WDbKJoErc1LVQLx62LO/KjvhetUehDjF17FpYSbvL/4=)
2: PKXuRc_5_wM56Jttnq1znbxTNrM.roa (hash: wNBNrg7iwt49739UTs0ZF6veqyOIJdBVUfKeZkV8DDw=)
3: eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl (hash: 2W2jw0/42JKEGqzolEtd/gNftKfLwhIg776JBALf4IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:5e:da:45:b6:c2:db:86:91:e9:e9:cc:4c:38:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Jul 24 13:00:18 2026 GMT
Not After : Jul 25 13:00:18 2026 GMT
Subject: CN=e9fd898a20baa06fbdd7f357f065a8676555f40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a4:e0:39:a6:ce:8c:9f:11:92:d1:e7:6b:79:
17:de:b6:d3:81:a3:59:40:d4:45:fe:d0:36:d6:35:
52:6a:51:b9:4d:e1:d8:a4:9e:4b:91:01:2e:9d:b1:
f0:08:9e:9b:11:1f:a6:70:c8:51:ba:c6:38:96:4a:
69:87:57:46:67:eb:2e:2e:96:4b:cd:14:93:52:9c:
76:5f:ce:3d:28:01:af:36:2c:d8:ed:88:12:22:76:
23:e5:6d:fd:cd:1f:4b:4a:48:cc:fb:79:31:cc:9d:
4b:d9:2c:92:c1:67:32:2c:77:d6:f1:29:7e:26:b9:
3d:c8:ab:a2:64:ea:38:89:e7:ce:48:10:08:25:b1:
6e:9b:17:d4:f5:d5:11:10:88:df:29:99:b9:92:b5:
6c:ef:5c:04:16:1d:d1:e4:0a:f8:6a:7e:aa:63:dc:
26:08:e3:67:3d:29:8c:0b:61:55:03:a2:e6:af:d5:
1b:8d:6e:5c:2c:6e:4b:66:43:83:7d:a2:b6:b2:a2:
cf:da:bd:8d:21:fc:5f:d7:97:18:d6:68:b9:73:3d:
0d:62:4a:15:1f:3f:6a:3b:98:80:70:7e:d0:e8:b1:
ea:37:42:e3:8c:18:51:8d:1c:fa:32:f4:0e:c0:13:
02:64:0a:e1:15:ac:4e:e5:9a:88:3c:4d:1e:5e:fb:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FD:89:8A:20:BA:A0:6F:BD:D7:F3:57:F0:65:A8:67:65:55:F4:0D
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5d:22:a5:c8:72:9c:7c:8b:7f:00:2a:e5:4b:e5:6f:57:f4:
25:3b:59:51:fc:e9:22:23:e0:a3:f5:ad:93:7f:0e:03:7b:ac:
49:e1:b8:e0:47:d4:a0:ca:07:4d:4f:37:71:b3:8f:6c:bf:b9:
eb:7e:0b:af:da:7b:cc:fc:80:ee:9c:cf:1e:d0:94:77:ea:57:
12:94:bf:41:a5:45:81:3b:59:4b:3a:b9:11:70:d8:e3:ee:87:
4b:94:cc:fa:1c:b3:f7:9c:bb:27:57:1e:47:e8:49:cd:40:a2:
cb:68:85:74:ac:32:37:54:5e:23:7f:72:2e:bf:9d:58:ad:5b:
9a:56:e7:f1:7d:d8:f8:aa:b8:47:a6:46:13:b8:7a:7e:88:93:
a3:91:e5:ba:12:c1:78:14:1d:7c:3f:a8:1a:21:d1:89:c9:df:
26:a5:66:82:54:57:13:1f:8d:22:89:4c:fe:aa:47:e4:9a:40:
7d:31:76:94:ef:93:90:5b:10:bc:48:b9:9e:05:18:60:4d:f0:
3d:11:50:e2:e3:53:96:59:89:32:97:59:a9:95:2b:f5:b9:06:
32:6a:df:19:b4:8d:33:2f:4a:ee:4b:db:ec:60:9a:e9:fe:9d:
3c:b3:1f:bf:be:ef:12:8e:18:03:0c:27:8c:dc:1a:ae:20:bb:
ef:d5:96:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNl7aRbbC24aR6enMTDguMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzZkN2QwYmJjYzA4NTE2NTIzZDVkZjI0ZTY4ODJiNzJj
YTU2OTMwHhcNMjYwNzI0MTMwMDE4WhcNMjYwNzI1MTMwMDE4WjAzMTEwLwYDVQQD
EyhlOWZkODk4YTIwYmFhMDZmYmRkN2YzNTdmMDY1YTg2NzY1NTVmNDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KTgOabOjJ8RktHna3kX3rbTgaNZ
QNRF/tA21jVSalG5TeHYpJ5LkQEunbHwCJ6bER+mcMhRusY4lkpph1dGZ+suLpZL
zRSTUpx2X849KAGvNizY7YgSInYj5W39zR9LSkjM+3kxzJ1L2SySwWcyLHfW8Sl+
Jrk9yKuiZOo4iefOSBAIJbFumxfU9dUREIjfKZm5krVs71wEFh3R5Ar4an6qY9wm
CONnPSmMC2FVA6Lmr9UbjW5cLG5LZkODfaK2sqLP2r2NIfxf15cY1mi5cz0NYkoV
Hz9qO5iAcH7Q6LHqN0LjjBhRjRz6MvQOwBMCZArhFaxO5ZqIPE0eXvu3uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOn9iYoguqBvvdfzV/BlqGdlVfQNMB8GA1UdIwQY
MBaAFHl219C7zAhRZSPV3yTmiCtyylaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMt
ODU0MTgyY2IwNmE2LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMtODU0MTgyY2IwNmE2
LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeF0ipchy
nHyLfwAq5Uvlb1f0JTtZUfzpIiPgo/Wtk38OA3usSeG44EfUoMoHTU83cbOPbL+5
634Lr9p7zPyA7pzPHtCUd+pXEpS/QaVFgTtZSzq5EXDY4+6HS5TM+hyz95y7J1ce
R+hJzUCiy2iFdKwyN1ReI39yLr+dWK1bmlbn8X3Y+Kq4R6ZGE7h6foiTo5HluhLB
eBQdfD+oGiHRicnfJqVmglRXEx+NIolM/qpH5JpAfTF2lO+TkFsQvEi5ngUYYE3w
PRFQ4uNTllmJMpdZqZUr9bkGMmrfGbSNMy9K7kvb7GCa6f6dPLMfv77vEo4YAwwn
jNwariC779WWTw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:25:14 2026 by rpki-client