Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
File: eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft (raw, json)
Hash identifier: kWFu0I1U08+vY7aSZymEbCGR2b7msiHGlSkrPwrSLxc=
Subject key identifier: 0B:7F:E3:16:E7:F0:0D:EA:BD:E4:F1:21:36:0E:78:28:E5:71:D8:8B
Authority key identifier: 7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
Certificate issuer: /CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Certificate serial: 019D29973094A1871B9B4275444B8A2208E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
Manifest number: 017E
Signing time: Thu 26 Mar 2026 10:01:07 +0000
Manifest this update: Thu 26 Mar 2026 10:01:07 +0000
Manifest next update: Fri 27 Mar 2026 10:01:07 +0000
Files and hashes: 1: 3gMylm_7kdY05Np-Gs1Ujn2TpUw.roa (hash: W5KGrcdaIcr77/oIsEbLhshZMJrc2jrTw0N4xA3kS0o=)
2: SHM9R3kXlAO8-e-rYuN_jsGmG6M.roa (hash: X06rQu41FDn+MhiPC2VMwGHMTFpmXVd6mlDBUP0P6FE=)
3: eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl (hash: QQbDCHY2h720hfVoEQbIuPiZeAACRxOIUT37G6vsQVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:30:94:a1:87:1b:9b:42:75:44:4b:8a:22:08:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Validity
Not Before: Mar 26 10:01:07 2026 GMT
Not After : Mar 27 10:01:07 2026 GMT
Subject: CN=0b7fe316e7f00deabde4f121360e7828e571d88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:df:b5:3c:b5:0a:cb:d3:87:9c:44:7b:91:
f1:07:6f:66:cd:15:81:39:4b:30:d7:82:06:3b:6c:
bb:e7:01:7a:a9:d6:b8:11:e4:54:f6:50:99:71:a7:
10:73:e7:10:1c:95:40:e1:4c:91:00:62:72:d9:d8:
5e:c5:b7:cc:3f:b8:23:01:1b:2b:a9:58:43:b7:f4:
67:82:79:05:fa:da:ea:dc:f5:64:9f:64:43:b7:b8:
e4:93:a9:9e:dc:0e:0b:26:6f:ff:ef:54:fe:5c:c4:
5d:20:66:18:93:d8:a2:bc:fc:ee:1b:b9:dc:cf:f0:
fe:99:cb:8a:c4:38:27:90:1f:dc:a1:6f:65:d3:bf:
32:eb:a6:0a:64:f5:03:48:e7:8a:30:ef:26:b0:4f:
c7:37:79:f2:ba:5c:50:c0:bb:ce:2b:53:08:e0:df:
23:de:b1:0d:23:98:6d:7a:27:d0:ad:4d:d8:d7:11:
6c:c5:60:1f:ac:73:0b:2e:b9:70:be:25:77:12:b1:
bf:6f:8f:4c:46:88:71:d2:d2:d5:de:84:94:1d:7a:
ca:b7:04:56:13:4f:20:ef:9e:ad:5e:2b:e9:ee:03:
81:92:d1:af:6a:06:e8:ca:bc:5c:e4:35:69:b9:97:
4b:99:8a:ba:cc:9e:b8:7e:75:87:b3:1a:88:f0:16:
6c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7F:E3:16:E7:F0:0D:EA:BD:E4:F1:21:36:0E:78:28:E5:71:D8:8B
X509v3 Authority Key Identifier:
keyid:7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ce:6b:f9:b5:03:ec:ed:9a:60:cd:be:98:3a:7c:40:f9:f0:
2e:a2:b9:20:ab:e7:6f:cb:ec:95:6a:18:b0:eb:3e:10:48:f8:
66:e0:91:90:02:1b:10:c4:5c:7b:e2:fa:fd:7e:a8:84:58:3b:
67:22:6a:d9:a2:8d:b7:57:cf:be:64:83:3c:5e:85:2e:7c:5c:
a7:d6:31:6a:96:b4:81:99:3c:5a:f3:ef:8e:ae:6a:94:af:4c:
c1:af:62:d1:af:0c:d5:f2:7d:a1:a5:e4:c5:b2:16:54:b2:05:
d3:a6:77:90:e2:20:36:42:e2:a3:19:9c:21:98:04:d5:01:e4:
76:83:6c:9d:cf:5e:be:90:bc:8b:b9:d6:d5:21:f0:fd:48:ad:
d1:96:3e:39:04:ef:69:a2:9a:15:7a:1f:9e:0a:a9:a6:75:98:
68:04:9f:78:72:74:83:54:4c:9d:94:8a:86:45:e0:59:79:27:
bc:f5:85:b0:c5:0b:53:0c:9d:dc:2d:2c:28:d7:ef:a9:dc:a6:
07:cb:6e:34:4d:88:4a:40:75:6a:98:8c:48:51:d6:a5:03:7a:
64:4e:df:16:03:0c:c7:38:15:6d:d6:21:b8:31:c9:20:20:71:
a1:be:73:b4:98:3a:d7:cc:90:a1:14:0e:f7:c5:4e:92:39:2d:
b5:3c:5d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:34:03 2026 by rpki-client