Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: 6jLAUajU8/E0f8YW+8jwfvoqqwTLnKt2k6BUr9iaBhY=
Subject key identifier: 28:DE:8E:50:01:C4:F8:02:C2:47:B5:80:82:63:45:A5:FE:55:AD:79
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 019D04E5922F0181390342610C085696808F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 1874
Signing time: Thu 19 Mar 2026 07:00:47 +0000
Manifest this update: Thu 19 Mar 2026 07:00:47 +0000
Manifest next update: Fri 20 Mar 2026 07:00:47 +0000
Files and hashes: 1: 1-OuWPae2QmllBKFyaudDbNphGTc.roa (hash: TeZRPwnS84XUZCjrREzBGuK8EpeGGUaXoq1j2Y/fQSQ=)
2: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: 3l0uf3+d30HHarF1ocnHgrAauIbQu6f2958uClyrNkM=)
3: egw9QX1Wt4p34wD72nrev9Z3xNY.roa (hash: nskdvkCOlHahXUYLR2CJrMUSg+SVahy3tOlmXUVE40k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:e5:92:2f:01:81:39:03:42:61:0c:08:56:96:80:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Mar 19 07:00:47 2026 GMT
Not After : Mar 20 07:00:47 2026 GMT
Subject: CN=28de8e5001c4f802c247b580826345a5fe55ad79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c1:57:75:7a:5f:1c:f5:9b:e2:df:3b:7a:26:
b5:95:d2:c3:d2:18:c0:73:76:f7:d6:ba:11:ec:b4:
90:d7:ae:30:42:b3:78:35:0b:23:ac:17:c9:b3:91:
e9:1c:e4:e2:67:12:c0:b1:5a:4b:76:81:14:95:2a:
45:d6:87:6e:41:79:11:51:a9:49:1e:79:74:85:1a:
80:73:41:0e:ac:fb:7f:03:0f:a7:62:12:4b:32:24:
a3:96:88:08:6d:fa:73:a6:d1:b8:e9:6d:00:48:85:
bc:5f:fb:ba:c3:6b:f2:43:f8:02:9b:b3:90:e6:b1:
57:8b:24:f8:4c:80:ed:08:e0:bb:b0:c9:34:88:db:
bf:f5:91:d9:0f:14:97:6b:0a:67:24:ba:5c:cc:7d:
b3:6e:39:5b:77:89:58:bb:8e:9d:59:48:c7:7c:af:
25:e2:8c:aa:ac:69:d1:1d:59:fb:20:36:d6:4d:f1:
a1:8d:7f:b9:b8:48:a1:fa:86:eb:52:af:14:39:43:
85:d3:2c:fd:d2:69:d6:2f:50:a0:de:d3:fe:41:52:
6e:4d:86:0f:dd:0b:74:6b:12:7b:e5:cb:45:3c:0c:
67:35:d4:98:40:48:dd:10:4f:2b:75:25:f9:89:9d:
3e:df:f9:ad:fa:5c:be:70:f7:11:a2:27:f3:95:38:
f6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DE:8E:50:01:C4:F8:02:C2:47:B5:80:82:63:45:A5:FE:55:AD:79
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c4:5b:fa:21:01:0d:49:14:ae:24:e3:63:cf:3a:f6:5c:92:
9a:c2:58:cb:1f:04:a5:c3:96:98:7c:da:66:cc:e3:ab:64:d3:
59:f5:4a:55:7c:4d:a7:46:67:21:a7:9f:8f:89:f6:9b:20:03:
02:6b:c2:b8:0e:52:54:f3:c6:3c:39:9e:56:e5:da:c3:89:16:
bd:da:aa:98:75:ec:b7:03:96:12:50:65:6d:0d:bf:3a:c1:d2:
5b:36:9e:ad:f4:c7:81:04:bb:d2:b9:dc:55:4d:05:4d:bf:4a:
0b:ae:1a:e5:c2:3b:77:ef:5d:a3:55:7e:2f:86:ba:ec:c7:86:
76:59:86:1e:23:7d:d8:18:b2:2f:62:85:c3:f5:27:b0:a7:82:
0e:71:42:e5:69:1a:cc:f6:63:58:61:de:db:30:00:42:77:8d:
a8:84:88:e0:85:f3:6e:32:ea:40:57:96:58:77:79:0f:09:bc:
f7:08:0c:f5:21:3b:f4:1e:c8:f8:4c:f7:a3:8f:14:fb:6a:26:
71:0f:ef:d2:01:ec:ba:10:aa:dc:71:56:76:17:85:1f:2f:21:
70:42:fe:34:58:25:9b:76:e9:85:a6:48:a7:5a:eb:52:de:7a:
c7:1d:dd:8b:7e:b2:53:d1:39:58:62:14:b5:77:c4:3a:59:1d:
a5:8f:78:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:01:24 2026 by rpki-client