Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File: v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier: Z99V6OSha6jXNX2oxE1x++YtxN44VJG4G6AMaGuDJGE=
Subject key identifier: C5:FF:E9:9D:39:3E:9C:70:95:EA:58:47:5D:4C:E3:EC:3A:40:AE:E4
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 019FFD9366C4CA7B8048E0EEB62B9BA26E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number: 0EAE
Signing time: Fri 14 Aug 2026 00:02:03 +0000
Manifest this update: Fri 14 Aug 2026 00:02:03 +0000
Manifest next update: Sat 15 Aug 2026 00:02:03 +0000
Files and hashes: 1: 5qCGbZj0fFzeN9z8gSaICT7yMA8.roa (hash: G66CwDSwPZ1mdj+oT5dw0nJbDcfnWDDiijDE5PcBGVI=)
2: W6VRxWMjY9RGYyNWUZ2Zrt5iGrQ.roa (hash: yDioc2gm4HKxpifXJms6Im9q4otOwWsYrylm+7dKp/8=)
3: Xts4DhBp7ZAXfoRbGSvo9y0epuw.roa (hash: +l+O+f+RgDS0P2v4v/Eiuo9qo0STO/EOfvPlMPBfz4M=)
4: ba0ulzzlxoKj7mmyIENd0mKkNQw.roa (hash: p7fb2fAb3ItubjjP5l3VBGCbn7g/XTc7585asMeO0R0=)
5: c5q6TPwm54z2LvrJGvcWXn2lLuc.roa (hash: PfHyIuw7JwnsE13vLHW24JJ5nVp6Ybi/KbqXWAmiqzc=)
6: ck5nzW7UcSxKWzHP2H-a3ylVN5E.roa (hash: OEda1WOM4ctfo76KkiHy1LOUWsgAZX7lWi/0FxF3rRA=)
7: dPJN6UsUvoT-CwaD6I6GCSDt2l8.roa (hash: Lm0/M7odPEdXSXGeFcgguujGj4w0jC2wgnprNlK79t8=)
8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: yG/IHnbrXN8uPiOs36mviZy2HSOr2Q+gCjrurgVJzMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:93:66:c4:ca:7b:80:48:e0:ee:b6:2b:9b:a2:6e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Aug 14 00:02:03 2026 GMT
Not After : Aug 15 00:02:03 2026 GMT
Subject: CN=c5ffe99d393e9c7095ea58475d4ce3ec3a40aee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:a4:3a:73:c0:d9:ff:b1:6b:0e:4d:c6:cd:
18:0d:bd:ea:01:5d:0a:cf:1a:fd:85:ce:79:a8:21:
b7:bc:c4:2f:ef:33:83:ee:b3:8d:99:17:a0:b6:87:
4f:82:b1:5e:96:08:27:d3:90:7b:79:43:81:2f:57:
8f:03:f7:ab:4f:da:00:6b:1c:c2:e9:bc:5b:1a:f8:
5f:90:b2:68:2d:14:94:56:80:f3:ca:91:1e:93:2f:
ff:b6:1b:4c:8f:37:1a:3d:6f:45:63:52:f4:aa:b1:
3e:00:ab:31:3c:44:f8:f0:08:7e:52:3e:b7:97:e2:
33:bc:9d:e4:3b:44:ec:61:49:f4:8a:cc:70:a7:ef:
d2:df:3d:c1:16:73:06:70:6e:28:30:53:83:96:54:
a6:6a:b3:a0:7f:44:8d:4a:01:ce:5e:4b:42:41:fa:
23:22:aa:99:d2:11:b4:0f:3d:85:c0:72:c0:c3:97:
c0:ed:d7:88:10:1a:3f:67:af:0f:14:20:14:82:c6:
0f:2b:c3:ec:0a:cd:4c:ba:83:5f:9b:1b:91:2c:c9:
68:f9:3e:db:e0:1a:9a:20:20:6c:30:c0:2c:48:b2:
d0:b9:a1:c7:20:0f:a2:c8:9b:99:c5:d3:d1:bc:92:
e8:71:6c:33:f6:50:0e:f9:78:03:6f:bd:5e:1a:d9:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FF:E9:9D:39:3E:9C:70:95:EA:58:47:5D:4C:E3:EC:3A:40:AE:E4
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:03:89:60:0b:82:cf:56:ee:b9:5b:a1:8e:44:d9:b5:a9:ab:
ff:05:52:6a:db:dd:e5:bb:89:ef:26:96:a9:a8:ab:a8:c0:42:
99:5f:0e:2c:0f:47:85:2d:59:6b:5b:3a:e7:d2:2e:bc:6d:97:
1f:dd:9e:67:f9:2d:88:0f:72:38:27:69:96:90:87:53:b2:8f:
09:b1:51:48:38:48:bd:1a:46:b5:d4:18:cd:98:3b:e8:d1:9c:
5c:68:b7:0a:71:98:ae:89:03:8a:32:99:d1:84:63:a5:32:6b:
3e:d1:5f:b6:f6:8f:1b:49:40:49:1e:da:5a:3f:99:0b:6f:fc:
f0:d0:e3:59:3d:a4:17:3d:32:14:09:95:6f:0c:93:ec:e1:ed:
ef:5b:eb:9d:37:65:08:bf:42:25:2a:5f:93:54:2c:60:ee:aa:
ac:cf:5e:02:9a:a8:e7:ef:77:5a:14:af:8e:1b:3a:31:9f:6a:
01:52:0d:4e:9b:87:6d:ac:a9:60:6d:de:d7:92:14:81:19:a5:
08:b3:7c:9e:ea:6b:b9:ed:88:67:a2:30:af:00:6c:56:53:81:
4d:90:dc:5f:6d:32:17:7f:06:dd:be:1c:73:a1:23:57:a8:54:
9c:f3:0f:b0:4f:98:1c:35:d0:eb:dd:e0:d5:76:ae:3c:6f:0f:
35:3d:be:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 10:12:15 2026 by rpki-client