Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: 42g/mMQNdgGRTADtCpDi11RwuKMs5MBNe8QjAH5O95c=
Subject key identifier: A1:71:6F:03:72:2A:F1:C4:9C:17:BA:EC:1A:16:59:54:8E:70:5D:BD
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 019DECA47AA85FE262C9CF4304B9E6D01170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 18EC
Signing time: Sun 03 May 2026 07:01:35 +0000
Manifest this update: Sun 03 May 2026 07:01:35 +0000
Manifest next update: Mon 04 May 2026 07:01:35 +0000
Files and hashes: 1: 1-OuWPae2QmllBKFyaudDbNphGTc.roa (hash: TeZRPwnS84XUZCjrREzBGuK8EpeGGUaXoq1j2Y/fQSQ=)
2: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: cbTb1kVCgrcNsoWhjWOlqFLFVV8z+xysmcI9JR6YxtU=)
3: egw9QX1Wt4p34wD72nrev9Z3xNY.roa (hash: nskdvkCOlHahXUYLR2CJrMUSg+SVahy3tOlmXUVE40k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:a4:7a:a8:5f:e2:62:c9:cf:43:04:b9:e6:d0:11:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: May 3 07:01:35 2026 GMT
Not After : May 4 07:01:35 2026 GMT
Subject: CN=a1716f03722af1c49c17baec1a1659548e705dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:b9:e7:a7:c4:22:16:e8:e8:f2:3c:19:a5:
11:a5:58:67:6f:6a:a4:78:38:13:3e:34:df:4c:bc:
18:dd:23:0c:de:e0:69:e4:07:57:cf:74:d2:31:a6:
4a:bf:14:6c:9b:c0:b3:52:1d:95:f5:c9:bd:9e:de:
0f:74:66:cf:39:2c:e1:a2:72:e7:ad:5d:07:30:87:
c5:82:0c:5b:e8:f8:21:3b:93:2d:b2:a3:cd:9f:c5:
e5:57:6f:be:8c:4b:6c:43:8e:80:ae:1b:45:10:f1:
63:19:95:c2:45:59:c9:80:61:1e:f2:9e:68:b3:85:
5f:ab:b8:67:91:5b:f1:1f:2b:b4:bc:50:fa:6e:fa:
26:20:02:16:b1:fa:ed:06:bc:ee:6f:69:7b:dd:ce:
84:d7:25:54:35:3b:6e:5c:c0:c6:3b:4d:5a:ca:bc:
d7:4f:79:ab:71:19:75:61:59:cb:51:f6:fb:c7:f4:
e7:0e:58:15:a3:33:97:2e:a6:18:a1:70:e2:90:9f:
06:45:00:80:aa:75:3d:43:54:4d:27:bb:34:a1:19:
45:7c:21:98:22:c7:a9:7e:ba:02:0d:95:78:eb:96:
f9:15:f6:49:51:aa:96:61:05:43:4d:40:55:e7:9a:
96:89:3a:a2:92:a7:12:b5:14:e4:df:cf:0a:8b:93:
6b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:71:6F:03:72:2A:F1:C4:9C:17:BA:EC:1A:16:59:54:8E:70:5D:BD
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:04:0e:3c:33:06:f0:c2:55:fa:6d:0a:2c:f7:21:db:29:ec:
e9:0e:63:f2:79:72:58:e8:bf:0e:41:04:08:ea:2d:8c:37:84:
0b:4a:18:28:2e:c9:3e:da:f6:e9:b7:91:4a:b1:30:35:c8:fa:
43:4c:bd:04:4b:8b:d5:29:99:28:d1:e2:c1:30:41:2a:cb:2e:
bb:85:58:f8:7a:8a:bd:d9:29:40:ef:33:ee:d0:c8:ae:d5:aa:
a0:5f:06:be:6b:43:ef:f5:33:45:53:05:51:bf:c5:fc:b5:0c:
c8:ee:6f:e8:de:7a:8d:34:9f:f7:6f:44:6f:a5:56:ca:43:27:
a6:0c:b2:4b:69:75:4e:1a:03:34:ff:7d:b5:18:36:89:d6:98:
93:94:a1:09:72:99:dc:32:6d:97:66:dc:ce:b2:15:4e:1f:a1:
7c:a1:89:0f:51:22:11:5d:db:1d:49:0d:7c:90:a4:9f:83:db:
e7:23:78:50:54:16:37:22:78:0f:6a:f1:f0:10:0f:75:73:e2:
0a:01:82:30:b2:be:8f:28:fe:42:ce:a9:d9:51:dc:81:6e:7d:
0f:11:75:a9:52:5b:4f:70:f3:93:f3:5e:01:cb:68:5b:7d:9f:
c4:2e:11:8d:7d:b1:4c:c7:7a:39:2e:18:1c:52:13:87:b1:45:
48:93:c4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:04:34 2026 by rpki-client