Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
File: eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft (raw, json)
Hash identifier: XQVyxNIg/qtIN+ZnhEBHkL6jYnmWPMj4zDtTJ5lVxE4=
Subject key identifier: 06:B9:77:A0:F1:F0:34:8B:4C:4B:D6:ED:9B:AA:16:66:39:54:6C:1D
Authority key identifier: 7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
Certificate issuer: /CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Certificate serial: 01A0EF30311AC4288529A36FE0186AD081D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
Manifest number: 0372
Signing time: Tue 29 Sep 2026 22:01:47 +0000
Manifest this update: Tue 29 Sep 2026 22:01:47 +0000
Manifest next update: Wed 30 Sep 2026 22:01:47 +0000
Files and hashes: 1: 3gMylm_7kdY05Np-Gs1Ujn2TpUw.roa (hash: W5KGrcdaIcr77/oIsEbLhshZMJrc2jrTw0N4xA3kS0o=)
2: SHM9R3kXlAO8-e-rYuN_jsGmG6M.roa (hash: X06rQu41FDn+MhiPC2VMwGHMTFpmXVd6mlDBUP0P6FE=)
3: eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl (hash: NbCXL3K1JfJ69kClk8wMgKU29x0tvYg3KgcY7WgGARE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:30:31:1a:c4:28:85:29:a3:6f:e0:18:6a:d0:81:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Validity
Not Before: Sep 29 22:01:47 2026 GMT
Not After : Sep 30 22:01:47 2026 GMT
Subject: CN=06b977a0f1f0348b4c4bd6ed9baa166639546c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:9b:24:e4:ef:41:38:ce:cd:ea:fd:3b:bd:
e2:30:f4:ff:0f:a2:fa:95:b2:52:6c:f1:e8:cb:a3:
eb:f4:a6:39:20:cc:fa:f3:ed:98:66:06:f9:ca:23:
2f:f8:43:bb:21:ec:39:88:57:1e:7d:b8:03:f0:15:
e7:af:3a:e5:61:59:49:04:9f:7e:16:14:31:f5:85:
5a:51:0d:89:eb:a6:b3:92:a0:ab:71:17:41:99:11:
84:37:b1:27:89:ce:ca:21:65:36:08:95:d0:63:c4:
01:02:18:68:6a:69:65:a4:5c:8f:f9:8c:55:d5:f3:
ff:71:55:3f:70:30:0f:06:ee:b2:6e:30:73:25:a1:
9f:14:cc:0f:2b:04:e0:fe:81:7a:36:16:d5:b9:ec:
e0:58:b2:b3:20:e3:40:92:83:b9:6e:6b:79:d2:6c:
95:8e:99:f1:95:b5:0c:68:b5:4a:bc:c1:b4:65:a2:
9d:45:58:7c:54:4d:de:f6:21:2f:56:96:08:57:ae:
e4:d9:41:af:af:76:99:e8:5a:2b:d0:87:b3:0d:90:
2c:a9:3c:3e:4f:08:c0:95:52:db:cb:05:96:f0:45:
57:af:c4:b2:45:ea:5c:fa:5c:f5:ab:c6:4f:d9:28:
53:7e:6a:89:87:c2:48:8a:2b:bf:7c:fd:f3:a4:45:
9f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B9:77:A0:F1:F0:34:8B:4C:4B:D6:ED:9B:AA:16:66:39:54:6C:1D
X509v3 Authority Key Identifier:
keyid:7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:30:5c:26:81:88:87:6d:42:de:62:be:b6:bb:cf:1b:ae:88:
25:45:7d:e8:c8:c7:2d:aa:1e:4f:70:60:6c:a9:af:74:33:36:
ce:25:17:4d:a8:ba:60:11:c2:60:20:e8:fb:be:30:a8:49:55:
43:57:98:39:86:41:0a:a0:bb:72:aa:0d:fe:3d:d1:ed:08:25:
98:6f:1d:f0:ff:9c:98:fb:60:0a:c2:9c:76:8a:17:f8:f9:95:
c6:60:63:11:c7:93:aa:e4:ef:b4:d3:c6:43:19:a0:c7:27:10:
79:e1:7b:0b:2a:da:d4:38:01:d6:83:ac:d8:c8:0d:5f:c1:5c:
08:1a:9b:15:22:b9:91:05:0b:dc:59:02:9c:ab:d8:48:18:c2:
98:a8:e8:a3:1e:d1:8f:0b:b4:ad:9f:17:19:19:e7:d9:e7:a7:
81:30:e7:83:01:fb:67:22:c5:50:c1:83:18:2a:2c:b3:93:9a:
37:d0:37:bc:8a:3a:5f:30:2b:9d:d4:be:da:53:9c:fd:6d:86:
70:fa:80:d9:82:1d:b3:10:4b:b7:71:36:8a:e6:c8:dd:21:44:
d1:4d:26:92:bd:7f:03:4b:91:f0:d9:cd:59:9e:06:3d:97:cb:
9f:21:44:5b:94:60:4d:62:2e:8b:58:c5:0c:0d:2a:d2:52:76:
92:17:84:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 09:13:11 2026 by rpki-client