Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
File: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft (raw, json)
Hash identifier: ST6pFCxJzoPnu0TGJtvtmlFROuHlKQn33sLyhHf4rVA=
Subject key identifier: 8A:C2:B4:32:4C:6C:77:06:E3:EC:2D:2F:AD:55:18:0A:C2:0C:C0:F2
Authority key identifier: 11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
Certificate issuer: /CN=1171641f157cb57b532626359e71582742c2dccb
Certificate serial: 019F935BECEBAC872AB976BF7A5C5A914A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
Manifest number: 1899
Signing time: Fri 24 Jul 2026 09:01:42 +0000
Manifest this update: Fri 24 Jul 2026 09:01:42 +0000
Manifest next update: Sat 25 Jul 2026 09:01:42 +0000
Files and hashes: 1: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl (hash: rT0rGvMJhnRClPfo9R3AlioRwK1PnA12ZDRk6btC3YE=)
2: g3yb9GvnR-4yvkFxTiRQRjASrNM.roa (hash: IRUvAUHV7ruHaa7xmQq2ksFvesViZHulW4HJ9YDCukA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:ec:eb:ac:87:2a:b9:76:bf:7a:5c:5a:91:4a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1171641f157cb57b532626359e71582742c2dccb
Validity
Not Before: Jul 24 09:01:42 2026 GMT
Not After : Jul 25 09:01:42 2026 GMT
Subject: CN=8ac2b4324c6c7706e3ec2d2fad55180ac20cc0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:d5:bc:56:6c:d9:fe:88:92:d4:63:57:7a:
2f:40:ba:29:70:f6:62:6a:79:3e:4b:b7:27:55:a1:
e3:fb:5f:50:6c:25:42:30:97:80:9c:00:6e:00:e5:
58:d6:fb:73:00:ad:57:ae:a3:59:59:84:51:d8:3c:
0c:39:74:86:92:f5:e7:f2:d8:41:65:a0:fa:9f:c0:
c8:7d:69:2d:32:c3:48:da:f3:75:f0:4c:ba:c3:53:
41:3c:37:4c:7c:f9:1d:68:ed:80:99:62:6f:7c:7f:
e9:f3:81:c9:a7:6f:39:fe:ce:90:36:e7:63:69:c9:
d7:d8:29:d2:58:2c:fa:f5:97:68:ac:b1:8f:ff:19:
4c:9b:ab:d4:28:ab:a5:26:3c:3e:1b:1e:47:e9:40:
bd:a3:05:46:2e:d5:ec:87:bb:94:61:8e:0d:5a:8d:
da:f4:9a:7a:04:f2:aa:93:7c:59:c4:7f:9e:54:eb:
6e:ba:ed:30:9d:54:0a:69:a4:65:a2:83:44:61:6d:
77:e5:12:5d:d1:ad:b6:3d:26:bf:b4:82:be:bc:73:
08:a1:b2:9a:23:2f:1e:ad:80:c2:c4:88:2b:bc:37:
35:57:49:d3:54:38:99:64:98:3d:9f:e1:63:ee:82:
c7:58:cf:a5:ed:f4:da:e8:3c:26:55:d4:4d:b6:c1:
fa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C2:B4:32:4C:6C:77:06:E3:EC:2D:2F:AD:55:18:0A:C2:0C:C0:F2
X509v3 Authority Key Identifier:
keyid:11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:dd:fa:d0:27:15:78:96:21:2d:6d:c4:7e:58:53:4b:32:0f:
87:75:22:68:c7:f8:17:b7:52:be:59:ff:f9:fb:77:24:bb:db:
dc:1c:6e:ba:c2:a1:68:9a:a2:1a:1b:7e:4d:86:3b:b1:04:56:
17:af:20:b8:ba:1a:cc:ba:be:56:59:b2:7f:56:2f:f3:3b:df:
1a:f5:a8:6c:d0:e5:0c:dc:c1:35:df:6b:c6:54:e8:b0:07:94:
b3:48:40:fd:0a:32:d9:f7:2a:fe:ec:11:e6:d3:c0:56:b7:44:
0c:61:44:ca:11:b8:f9:26:53:76:d6:f0:f3:32:a2:7c:8c:26:
dc:d0:80:9a:0c:07:37:c8:a2:7d:06:38:af:76:fc:47:50:c3:
d8:ff:ec:31:b6:b9:eb:0e:54:9f:81:1e:18:9e:30:ce:be:20:
a2:54:4c:8e:74:d8:98:39:a8:43:3d:d3:e8:dc:c6:cc:05:25:
1b:4f:0d:ef:e3:de:70:15:6b:92:4b:fa:d4:78:dc:5d:56:f2:
8a:a0:f6:01:59:cd:3d:ba:5d:29:24:53:6c:1a:e5:af:4d:aa:
e7:fa:a7:1a:83:28:9b:a6:0c:8c:e1:b8:be:3b:c0:e9:9d:29:
7d:b9:a9:08:66:f4:0d:9d:d4:32:00:76:4f:2b:1e:4d:80:39:
9e:3f:45:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:47:36 2026 by rpki-client