Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: aHUmfQW9bVgnSirQ2js3uRtG0xSVb6Fa25+98hgOsnA=
Subject key identifier: B2:59:AE:16:08:07:DD:24:BA:9B:73:42:63:03:59:AA:68:E5:13:97
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 01A117BD6A5906F3C27DE07B12F570865480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 1A90
Signing time: Wed 07 Oct 2026 19:00:51 +0000
Manifest this update: Wed 07 Oct 2026 19:00:51 +0000
Manifest next update: Thu 08 Oct 2026 19:00:51 +0000
Files and hashes: 1: 1-OuWPae2QmllBKFyaudDbNphGTc.roa (hash: TeZRPwnS84XUZCjrREzBGuK8EpeGGUaXoq1j2Y/fQSQ=)
2: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: l0XVkQFc3hdwlMFAneZCbQfBMWyB79L+b/6PGkj9VKQ=)
3: egw9QX1Wt4p34wD72nrev9Z3xNY.roa (hash: nskdvkCOlHahXUYLR2CJrMUSg+SVahy3tOlmXUVE40k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:bd:6a:59:06:f3:c2:7d:e0:7b:12:f5:70:86:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Oct 7 19:00:51 2026 GMT
Not After : Oct 8 19:00:51 2026 GMT
Subject: CN=b259ae160807dd24ba9b7342630359aa68e51397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:a7:4e:9b:c1:c0:dd:d3:69:a5:60:6e:04:
2a:2a:a6:b8:d8:3c:91:54:5a:b0:2c:9e:33:42:2f:
56:c1:7e:97:9f:8c:c5:be:6b:08:43:3e:fa:ce:cc:
23:3e:9e:19:9f:49:8e:8b:00:98:5d:39:9e:8d:c8:
cc:b4:4a:3b:6c:b7:f9:04:12:d2:10:f0:ca:50:f4:
ca:77:41:08:b9:18:e7:da:77:cb:8c:2e:02:22:70:
cc:a9:3b:1d:e4:a4:14:52:91:c8:47:6e:cb:aa:00:
20:91:da:67:28:fe:28:81:6f:c5:9a:1e:15:14:97:
9f:02:24:be:d5:d7:0b:71:b7:4d:6b:ea:03:69:cd:
c5:f1:84:50:a2:5a:79:66:d7:33:7e:aa:e4:5e:95:
52:11:7f:69:78:df:34:9a:01:fd:d9:ac:b6:88:de:
53:a9:2f:71:a7:cb:d5:d1:2f:12:d3:95:5f:9a:55:
61:70:23:59:9d:1c:00:88:81:21:de:cc:60:b4:bb:
1d:15:dc:64:a5:1d:4d:73:8b:3a:2b:40:74:b2:30:
c3:35:b5:97:47:0a:f6:c3:d6:e7:65:fe:0f:2d:b1:
28:b5:a6:3b:98:99:58:12:53:78:42:21:28:48:e0:
35:2d:3f:0d:23:49:65:ae:be:fc:9c:eb:b7:7d:df:
63:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:59:AE:16:08:07:DD:24:BA:9B:73:42:63:03:59:AA:68:E5:13:97
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b6:c8:81:89:9d:df:88:47:c3:55:3c:36:8b:33:ba:fd:c1:
6d:b6:b9:fd:a5:d9:c6:b9:30:19:06:76:f8:04:66:e0:21:82:
69:79:ba:b4:bb:d4:66:ab:97:80:f8:a0:36:99:cd:67:f0:7c:
74:66:29:c9:51:9d:f3:b8:58:cc:eb:34:35:5b:b4:97:0e:7e:
f3:7e:2e:a4:c1:45:a7:90:b2:86:c5:3d:5f:80:0b:e7:d4:da:
7b:7b:5a:c1:aa:16:bf:68:92:1a:03:a7:11:86:bd:87:ab:60:
26:78:49:c8:51:16:b4:91:1c:81:25:9d:79:d8:b4:b6:13:fd:
ce:b9:a3:d9:67:00:c6:0b:3a:06:2f:d6:e0:9c:59:9b:ff:64:
77:d1:97:4d:2b:04:63:a0:28:16:3a:5c:ea:ef:34:9c:8b:3e:
b3:f9:77:07:74:12:b2:b2:f2:61:ba:c8:23:9a:bd:5c:f9:9f:
26:12:59:25:92:6f:50:51:88:6c:f8:a9:6f:a8:9f:dc:52:f1:
d9:c4:fa:fd:d2:7b:d1:18:2b:2c:bd:45:1f:ab:35:00:fe:cb:
5f:88:12:4e:b5:a0:ba:79:6f:6d:c8:fb:f3:72:06:5e:13:a4:
01:eb:85:e7:8a:fe:e8:5d:5d:8e:fe:b5:f7:01:1e:2e:c3:f0:
ad:d2:ff:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEXvWpZBvPCfeB7EvVwhlSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZjU0YmUxYjVlZDVmZDU5MmZhY2E0NjhkZjExMTAwOTVm
M2VhMGEwHhcNMjYxMDA3MTkwMDUxWhcNMjYxMDA4MTkwMDUxWjAzMTEwLwYDVQQD
EyhiMjU5YWUxNjA4MDdkZDI0YmE5YjczNDI2MzAzNTlhYTY4ZTUxMzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiqnTpvBwN3TaaVgbgQqKqa42DyR
VFqwLJ4zQi9WwX6Xn4zFvmsIQz76zswjPp4Zn0mOiwCYXTmejcjMtEo7bLf5BBLS
EPDKUPTKd0EIuRjn2nfLjC4CInDMqTsd5KQUUpHIR27LqgAgkdpnKP4ogW/Fmh4V
FJefAiS+1dcLcbdNa+oDac3F8YRQolp5ZtczfqrkXpVSEX9peN80mgH92ay2iN5T
qS9xp8vV0S8S05VfmlVhcCNZnRwAiIEh3sxgtLsdFdxkpR1Nc4s6K0B0sjDDNbWX
Rwr2w9bnZf4PLbEotaY7mJlYElN4QiEoSOA1LT8NI0llrr78nOu3fd9jdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJZrhYIB90kuptzQmMDWapo5ROXMB8GA1UdIwQY
MBaAFO31S+G17V/VkvrKRo3xEQCV8+oKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUt
OWU2MTRmNDQ2NmM1LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUtOWU2MTRmNDQ2NmM1
LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbbIgYmd
34hHw1U8Noszuv3Bbba5/aXZxrkwGQZ2+ARm4CGCaXm6tLvUZquXgPigNpnNZ/B8
dGYpyVGd87hYzOs0NVu0lw5+834upMFFp5CyhsU9X4AL59Tae3tawaoWv2iSGgOn
EYa9h6tgJnhJyFEWtJEcgSWdedi0thP9zrmj2WcAxgs6Bi/W4JxZm/9kd9GXTSsE
Y6AoFjpc6u80nIs+s/l3B3QSsrLyYbrII5q9XPmfJhJZJZJvUFGIbPipb6if3FLx
2cT6/dJ70RgrLL1FH6s1AP7LX4gSTrWgunlvbcj783IGXhOkAeuF54r+6F1djv61
9wEeLsPwrdL/8Q==
-----END CERTIFICATE-----
Generated at Thu Oct 8 03:50:56 2026 by rpki-client