Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
File: exPgVmn1VmYr7FZk4QFln5Zsgmo.mft (raw, json)
Hash identifier: Jat9L4LfEwgyvChld4j+yzfFpetwIrwYJf4gIDCw1io=
Subject key identifier: 20:8F:2F:6A:DE:C0:51:E6:A7:B9:7F:F8:B1:DD:34:D1:40:A2:8B:EA
Authority key identifier: 7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
Certificate issuer: /CN=7b13e05669f556662bec5664e101659f966c826a
Certificate serial: 019DCED0A66E59C455D75C7D20323F4F47B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
Manifest number: 0FBE
Signing time: Mon 27 Apr 2026 12:01:13 +0000
Manifest this update: Mon 27 Apr 2026 12:01:13 +0000
Manifest next update: Tue 28 Apr 2026 12:01:13 +0000
Files and hashes: 1: LJc4xny-NiHIVSL68IVZ4XTj6Jg.roa (hash: AamZndOHPqaQSB83PXvUvHWPSG8HTmIvo2+7QUnEhhs=)
2: exPgVmn1VmYr7FZk4QFln5Zsgmo.crl (hash: 8w7MD9UaqlmUNmZZImuu5tOzOEx8u9SnZ0sIA7Wg7GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:a6:6e:59:c4:55:d7:5c:7d:20:32:3f:4f:47:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b13e05669f556662bec5664e101659f966c826a
Validity
Not Before: Apr 27 12:01:13 2026 GMT
Not After : Apr 28 12:01:13 2026 GMT
Subject: CN=208f2f6adec051e6a7b97ff8b1dd34d140a28bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:b1:d6:04:bb:72:60:6b:1a:41:a6:7d:53:
39:2e:e0:76:7f:e5:e4:3b:2c:6b:51:75:08:39:d9:
19:c7:1b:cb:ae:bd:9c:63:b7:50:9a:74:bc:d8:90:
21:53:96:e1:62:c8:bc:0d:61:ee:f7:83:4a:3c:47:
3b:ef:93:21:a5:a2:cf:b9:bc:d9:85:6e:54:48:2b:
ce:1f:ab:a3:7a:0e:b5:cd:4b:09:fc:38:ea:0e:35:
08:54:ee:aa:99:3e:5f:1c:58:93:11:cd:f6:ee:48:
bd:24:a4:5a:4a:9b:32:e2:8c:a6:d2:92:ee:bd:1a:
f8:5a:25:67:8c:95:a7:e7:15:c5:9f:8d:ba:dc:63:
7e:77:31:dd:86:16:94:96:7e:d4:d9:f7:40:c2:bc:
e9:cb:ab:8d:63:32:46:bb:71:87:60:cd:fb:2c:9b:
62:61:69:51:c2:69:9a:1d:07:25:e4:23:d7:11:d4:
01:c0:e6:f4:06:e4:43:47:a1:78:f4:b3:59:72:d3:
00:03:f6:0b:a6:b0:89:6d:21:70:fe:d6:da:c3:a4:
cf:57:39:d7:42:8f:81:51:af:73:53:5f:07:75:ae:
47:8a:fb:5a:d1:64:dd:f4:4d:7c:e7:e9:c3:48:2a:
15:b0:75:23:b7:05:53:2d:4b:4b:00:15:bc:1f:90:
78:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8F:2F:6A:DE:C0:51:E6:A7:B9:7F:F8:B1:DD:34:D1:40:A2:8B:EA
X509v3 Authority Key Identifier:
keyid:7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:62:44:e7:23:1c:e2:44:96:b0:84:96:0c:a6:87:9d:05:76:
77:d9:30:57:9c:f0:02:86:2a:e4:4f:ac:68:e4:98:0e:70:05:
1e:20:07:34:d5:6d:7d:eb:55:ae:41:f0:9c:bf:aa:38:ef:4a:
9b:68:15:6d:b9:99:1a:34:e2:46:31:08:7d:01:be:62:94:6e:
76:a9:ed:59:09:5d:8b:69:70:f6:6a:e4:3b:00:ad:8f:7a:72:
7f:b1:e7:6a:af:0b:89:db:d6:bd:04:b1:3d:c9:18:5c:98:28:
05:0c:4b:f3:cb:6c:26:0b:3a:c6:75:4c:99:5e:ef:a5:65:12:
45:44:7c:47:89:59:a0:cd:1b:55:d4:41:fd:3d:35:37:2d:a4:
5a:e7:df:c3:64:9e:15:19:03:22:98:2f:be:92:f3:47:c8:10:
60:d1:bb:70:0c:9c:3c:aa:96:fd:3e:4f:c1:60:47:99:81:1a:
68:c2:70:d0:32:cc:70:1b:c9:b6:64:dd:4e:d6:f2:98:f3:6d:
b5:be:8c:9a:b3:7c:8f:5f:2d:04:a9:cb:ac:f1:9c:00:90:0f:
14:de:f7:c9:ba:b3:39:37:e1:b3:cd:a0:2b:c2:d0:50:16:a9:
07:9a:ed:e5:cc:b5:05:ea:b8:fc:7e:ff:ad:93:94:2c:f9:4e:
df:7c:ca:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3O0KZuWcRV11x9IDI/T0e4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMTNlMDU2NjlmNTU2NjYyYmVjNTY2NGUxMDE2NTlmOTY2
YzgyNmEwHhcNMjYwNDI3MTIwMTEzWhcNMjYwNDI4MTIwMTEzWjAzMTEwLwYDVQQD
EygyMDhmMmY2YWRlYzA1MWU2YTdiOTdmZjhiMWRkMzRkMTQwYTI4YmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6ux1gS7cmBrGkGmfVM5LuB2f+Xk
OyxrUXUIOdkZxxvLrr2cY7dQmnS82JAhU5bhYsi8DWHu94NKPEc775MhpaLPubzZ
hW5USCvOH6ujeg61zUsJ/DjqDjUIVO6qmT5fHFiTEc327ki9JKRaSpsy4oym0pLu
vRr4WiVnjJWn5xXFn4263GN+dzHdhhaUln7U2fdAwrzpy6uNYzJGu3GHYM37LJti
YWlRwmmaHQcl5CPXEdQBwOb0BuRDR6F49LNZctMAA/YLprCJbSFw/tbaw6TPVznX
Qo+BUa9zU18Hda5Hivta0WTd9E185+nDSCoVsHUjtwVTLUtLABW8H5B4fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCPL2rewFHmp7l/+LHdNNFAoovqMB8GA1UdIwQY
MBaAFHsT4FZp9VZmK+xWZOEBZZ+WbIJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXhQZ1ZtbjFWbVlyN0ZaazRRRmxuNVpzZ21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mNzc2MWEtZmMzOC00NzVjLThhMTEt
OTRjNzMzNDZjMGVhLzEvZXhQZ1ZtbjFWbVlyN0ZaazRRRmxuNVpzZ21vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9mNzc2MWEtZmMzOC00NzVjLThhMTEtOTRjNzMzNDZjMGVh
LzEvZXhQZ1ZtbjFWbVlyN0ZaazRRRmxuNVpzZ21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGJE5yMc
4kSWsISWDKaHnQV2d9kwV5zwAoYq5E+saOSYDnAFHiAHNNVtfetVrkHwnL+qOO9K
m2gVbbmZGjTiRjEIfQG+YpRudqntWQldi2lw9mrkOwCtj3pyf7Hnaq8LidvWvQSx
PckYXJgoBQxL88tsJgs6xnVMmV7vpWUSRUR8R4lZoM0bVdRB/T01Ny2kWuffw2Se
FRkDIpgvvpLzR8gQYNG7cAycPKqW/T5PwWBHmYEaaMJw0DLMcBvJtmTdTtbymPNt
tb6MmrN8j18tBKnLrPGcAJAPFN73ybqzOTfhs82gK8LQUBapB5rt5cy1Beq4/H7/
rZOULPlO33zKsw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:06:01 2026 by rpki-client