Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
File: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft (raw, json)
Hash identifier: 6e/ZwLr3y+J40J64lUQ/vCuh5PrtdPMP2BgKymjcEw0=
Subject key identifier: ED:C7:55:4B:3F:7E:0F:26:54:06:4B:B2:E1:DC:F2:E1:61:A9:BA:48
Authority key identifier: 11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
Certificate issuer: /CN=1171641f157cb57b532626359e71582742c2dccb
Certificate serial: 01A0DF861FC364D811995C353F10A3DBA29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
Manifest number: 1945
Signing time: Sat 26 Sep 2026 21:01:44 +0000
Manifest this update: Sat 26 Sep 2026 21:01:44 +0000
Manifest next update: Sun 27 Sep 2026 21:01:44 +0000
Files and hashes: 1: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl (hash: 6ExTC5Efwx+92DuNHUA02lyMrtcD63OzR0v93rJhMb4=)
2: g3yb9GvnR-4yvkFxTiRQRjASrNM.roa (hash: IRUvAUHV7ruHaa7xmQq2ksFvesViZHulW4HJ9YDCukA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:1f:c3:64:d8:11:99:5c:35:3f:10:a3:db:a2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1171641f157cb57b532626359e71582742c2dccb
Validity
Not Before: Sep 26 21:01:44 2026 GMT
Not After : Sep 27 21:01:44 2026 GMT
Subject: CN=edc7554b3f7e0f2654064bb2e1dcf2e161a9ba48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:46:d4:02:4c:7a:43:7d:4e:b1:e2:1a:d1:54:
62:be:86:8e:5d:18:89:ed:b5:2b:c7:91:fa:42:ef:
64:98:3b:50:e4:4b:a3:8b:63:93:1d:c3:5c:56:01:
e4:38:e3:19:79:d7:df:b7:9b:c2:15:b1:87:ce:7b:
4d:2a:3a:df:da:ad:99:84:25:03:34:ed:69:a8:2f:
9c:6c:91:f7:7a:4b:94:49:9c:e8:a1:d6:50:46:5b:
77:6a:24:02:27:94:3f:17:13:77:6d:70:bd:1f:e3:
e3:49:cf:ab:ee:0d:4b:15:8b:ba:33:27:0f:c8:75:
79:7b:00:7d:a6:55:b1:83:84:51:23:22:34:70:3f:
e3:8a:9b:0e:29:76:ac:de:39:2b:45:48:dd:0c:1a:
de:8d:bf:aa:f9:3d:fa:f4:d9:e2:e3:3a:c0:29:5b:
dd:e6:9d:5c:7a:0c:6a:ec:2c:f6:28:38:6d:00:54:
0c:4c:70:f1:f2:dc:64:b1:4c:5e:1a:c7:0f:71:28:
b3:6a:65:8a:f3:57:e7:13:14:0c:89:2d:0c:23:46:
bb:a8:0d:be:73:48:b5:7a:97:c8:10:dd:bf:8c:1d:
3e:06:b2:48:5f:91:e5:87:6f:c4:4e:79:ee:7a:e1:
d0:01:a7:90:bc:cd:e8:2a:e4:03:f7:fc:bd:de:86:
22:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C7:55:4B:3F:7E:0F:26:54:06:4B:B2:E1:DC:F2:E1:61:A9:BA:48
X509v3 Authority Key Identifier:
keyid:11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c5:dc:09:ba:c7:f2:9d:bc:35:1b:dd:b5:40:b8:9d:7f:b9:
ed:99:ad:23:a8:54:cc:8c:19:f0:05:e5:db:5a:67:ab:9d:26:
56:c6:0f:1e:d3:23:a7:9f:9b:7b:3b:c7:5f:54:97:e4:82:74:
e0:8b:59:2c:61:9e:82:45:c6:1a:1f:fb:10:3c:a4:f7:50:97:
a0:57:d3:f3:09:06:f3:81:0b:96:aa:6a:2c:81:42:81:d8:7f:
49:1e:72:80:f2:f9:b7:51:12:b1:38:a8:f2:0a:1f:69:76:79:
4b:b1:af:30:ad:e7:4c:da:60:31:55:0c:fd:34:95:c4:62:85:
34:0a:21:4d:65:57:4f:38:a5:3f:32:14:4b:e6:13:f5:19:10:
b1:ad:d9:23:bf:2b:48:56:98:f4:93:58:20:60:b1:19:bb:cb:
43:b8:86:05:18:99:64:d0:d4:eb:03:60:70:2f:7a:82:49:5b:
4d:e5:62:91:ef:2d:2a:57:ce:f4:5b:77:d5:67:37:fe:2c:23:
ef:71:6d:80:15:2a:cf:d3:ef:6f:86:f7:00:f0:37:f2:17:a0:
14:c2:f8:6a:13:c5:8b:18:18:83:0c:98:3a:5a:f3:37:da:b8:
d9:79:68:da:00:8f:f3:b0:ea:d3:ff:40:2b:4c:87:6e:69:6c:
7e:fb:c9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:35:08 2026 by rpki-client