Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: eNe9RstNK7qqvCkKjRyR1unNYCi8tOXvSTMOqrW3XXE=
Subject key identifier: 4A:3E:7F:58:1C:27:5E:CB:B7:96:81:82:C2:5C:4B:65:5C:F1:16:A7
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 019EFB0239C353FCD4FE7AD71550E8CB2AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 1978
Signing time: Wed 24 Jun 2026 19:01:27 +0000
Manifest this update: Wed 24 Jun 2026 19:01:27 +0000
Manifest next update: Thu 25 Jun 2026 19:01:27 +0000
Files and hashes: 1: 1-OuWPae2QmllBKFyaudDbNphGTc.roa (hash: TeZRPwnS84XUZCjrREzBGuK8EpeGGUaXoq1j2Y/fQSQ=)
2: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: zuh0U6R/exapuXZ4MGW1izx8/43cKzYXeFM5oLcw8mE=)
3: egw9QX1Wt4p34wD72nrev9Z3xNY.roa (hash: nskdvkCOlHahXUYLR2CJrMUSg+SVahy3tOlmXUVE40k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:02:39:c3:53:fc:d4:fe:7a:d7:15:50:e8:cb:2a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Jun 24 19:01:27 2026 GMT
Not After : Jun 25 19:01:27 2026 GMT
Subject: CN=4a3e7f581c275ecbb7968182c25c4b655cf116a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:15:c7:25:db:4b:89:2f:ef:ba:1a:ed:5e:
af:1f:cd:3e:df:43:94:6b:a2:5b:d9:0d:59:28:88:
12:dd:99:80:d9:17:05:f1:d9:ef:f4:29:0b:5f:8c:
da:53:be:b4:f2:8c:f2:50:86:45:4c:35:1b:b6:e2:
84:b9:82:e9:16:69:3b:98:27:82:f2:30:cc:13:09:
be:8c:49:ba:e1:31:5a:d3:f3:68:69:61:56:54:c6:
29:78:08:f8:f7:4c:20:a1:98:7d:98:18:81:85:14:
fb:7c:af:9c:09:44:dd:af:fc:00:49:e7:c4:c8:ac:
f8:2c:c2:37:c0:c9:55:5f:08:0f:11:fa:7d:d6:b3:
21:db:42:4a:2a:92:49:11:38:7a:01:60:0c:8c:0a:
4b:4e:5c:ae:e0:19:88:de:58:8a:85:c6:90:56:b7:
eb:02:17:8a:ee:a4:65:79:da:0d:f3:c1:cb:1e:2b:
ea:00:06:fc:a3:33:c4:51:99:f4:50:51:ac:f3:b2:
18:48:a5:4b:a0:7d:67:9d:55:7f:e6:10:8e:90:41:
cd:ba:1b:8c:1d:51:32:65:36:21:5b:e5:2b:d3:9f:
d5:69:2b:a5:21:6b:f5:af:7e:63:45:52:2b:90:71:
09:53:28:2f:1d:0e:99:95:8e:6f:c0:c4:51:0e:93:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3E:7F:58:1C:27:5E:CB:B7:96:81:82:C2:5C:4B:65:5C:F1:16:A7
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:aa:97:04:d3:e0:61:6a:bd:1d:b3:70:28:75:64:cf:c5:2d:
ba:78:c5:0f:cd:0b:52:c4:9d:19:97:c6:9a:5e:af:72:10:f0:
d6:4b:36:fd:0e:5a:a7:0a:74:cc:fb:cd:25:ec:aa:6d:56:0a:
5a:f6:67:68:2d:0a:4b:31:83:34:3e:44:71:94:a4:94:c4:d6:
75:38:68:15:18:83:8c:76:c3:c8:64:b1:b7:5f:f4:9e:52:b5:
95:32:55:5a:eb:9d:eb:3f:bd:39:13:71:87:c4:8f:32:06:7a:
4b:91:1d:04:fc:6e:75:fc:36:bb:4d:42:5b:fe:b1:cd:7e:86:
d1:63:7a:f8:99:d3:6a:03:d6:ff:dd:47:2c:38:c7:30:48:48:
20:f3:14:a5:7e:aa:98:47:a7:3c:95:36:a1:e8:6a:07:22:f8:
9c:3a:84:17:41:aa:82:69:6f:8b:17:ee:3c:a1:5c:52:c4:4b:
94:ae:93:28:a8:b7:da:58:05:4e:3c:a5:0c:8c:35:2d:0f:e0:
91:64:e1:39:31:90:4b:c2:fd:8b:2d:25:36:2d:10:35:1f:39:
e4:ab:79:a8:b1:82:72:64:e8:d9:24:87:87:87:23:c0:54:d1:
05:c4:39:fe:ad:78:ee:c0:22:61:4b:78:53:f5:a1:d1:09:10:
de:7a:5a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:16:41 2026 by rpki-client