Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File: v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier: TYFKA+sLOmyFNyqiRismN9fqTWKOeAxrsHPn/nwnF90=
Subject key identifier: BF:41:98:19:8E:80:B3:93:EE:DD:B7:7C:D5:D6:2F:C0:6A:98:97:24
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 019FFF80BBCA140AE75EBABED6316957281C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number: 0EAF
Signing time: Fri 14 Aug 2026 09:00:54 +0000
Manifest this update: Fri 14 Aug 2026 09:00:54 +0000
Manifest next update: Sat 15 Aug 2026 09:00:54 +0000
Files and hashes: 1: 5qCGbZj0fFzeN9z8gSaICT7yMA8.roa (hash: G66CwDSwPZ1mdj+oT5dw0nJbDcfnWDDiijDE5PcBGVI=)
2: W6VRxWMjY9RGYyNWUZ2Zrt5iGrQ.roa (hash: yDioc2gm4HKxpifXJms6Im9q4otOwWsYrylm+7dKp/8=)
3: Xts4DhBp7ZAXfoRbGSvo9y0epuw.roa (hash: +l+O+f+RgDS0P2v4v/Eiuo9qo0STO/EOfvPlMPBfz4M=)
4: ba0ulzzlxoKj7mmyIENd0mKkNQw.roa (hash: p7fb2fAb3ItubjjP5l3VBGCbn7g/XTc7585asMeO0R0=)
5: c5q6TPwm54z2LvrJGvcWXn2lLuc.roa (hash: PfHyIuw7JwnsE13vLHW24JJ5nVp6Ybi/KbqXWAmiqzc=)
6: ck5nzW7UcSxKWzHP2H-a3ylVN5E.roa (hash: OEda1WOM4ctfo76KkiHy1LOUWsgAZX7lWi/0FxF3rRA=)
7: dPJN6UsUvoT-CwaD6I6GCSDt2l8.roa (hash: Lm0/M7odPEdXSXGeFcgguujGj4w0jC2wgnprNlK79t8=)
8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: SpBTrX8j6EexE2sH2mVZ2k0gDACc7/BsQQWKbEFlOuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:80:bb:ca:14:0a:e7:5e:ba:be:d6:31:69:57:28:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Aug 14 09:00:54 2026 GMT
Not After : Aug 15 09:00:54 2026 GMT
Subject: CN=bf4198198e80b393eeddb77cd5d62fc06a989724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0b:74:4e:be:af:e2:8b:39:19:c2:78:1d:c4:
c9:4e:23:65:94:9e:f1:a1:d7:20:e3:bf:76:06:4b:
1b:95:f0:e3:52:6f:31:2f:84:3e:be:b6:85:f0:c9:
56:c0:45:b3:14:d9:9d:91:0e:1f:b6:fb:9a:b5:14:
ea:b4:04:56:8c:e3:61:18:05:58:6d:6a:c9:9a:0e:
45:37:0e:28:07:a9:42:6b:86:3f:45:7a:88:7d:61:
b6:e5:57:5f:92:97:9d:56:08:07:90:10:82:55:c2:
84:d9:cc:72:bf:8f:57:3d:fb:73:05:74:e1:ee:63:
8e:e8:fe:f5:09:69:1c:8b:cf:9f:ee:e9:88:80:da:
d3:39:27:48:ce:ff:36:82:f5:56:6f:f1:bc:89:80:
f4:79:ef:76:e0:66:84:74:44:95:e4:72:9a:71:85:
0c:97:7e:6e:cd:16:e2:5a:50:d4:7b:c4:ef:30:9f:
e1:f2:dd:23:8e:d3:45:61:e2:18:89:29:47:8e:12:
0e:e9:da:b4:3f:f5:39:06:cd:bd:35:0e:92:d7:9a:
4b:38:9f:bf:19:bc:31:fb:c8:bb:16:04:2b:65:1d:
c8:46:f4:53:fb:25:7c:a8:e4:4c:9e:47:57:ac:cb:
39:aa:a8:5f:97:03:ae:d9:39:83:a7:a6:9e:47:4f:
f9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:41:98:19:8E:80:B3:93:EE:DD:B7:7C:D5:D6:2F:C0:6A:98:97:24
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:52:73:93:98:f3:68:ae:c9:80:2f:f7:5c:69:42:27:78:05:
64:43:d2:a4:b1:eb:5d:1d:ea:51:72:7d:28:b6:4e:fd:bc:c2:
b1:60:68:6c:af:e1:19:3d:2b:e3:25:6a:03:c2:de:28:be:3e:
34:fe:64:07:d5:73:ad:8a:a4:d9:be:99:82:d9:b0:8d:53:79:
43:95:a3:a0:53:4c:dc:ad:91:e3:43:71:5b:45:f7:2e:af:0d:
04:8d:b4:43:aa:ed:e1:b5:c8:71:83:0f:32:b2:67:84:14:77:
5a:95:30:02:e2:81:36:4a:ff:c1:97:31:78:16:b8:81:d6:4d:
85:a6:ed:e6:08:69:01:ce:25:62:81:68:67:6a:1c:89:05:b7:
df:a8:78:33:53:66:07:44:21:84:b3:44:fd:45:26:11:86:43:
6a:eb:7e:45:88:c0:55:cb:80:42:62:85:91:c0:b8:80:44:70:
04:d1:c2:5d:8a:c6:a5:2b:66:65:fa:9a:74:4b:2c:1c:88:7b:
e8:e6:58:76:7e:3c:58:18:52:fc:aa:4d:f9:0c:a4:8f:54:81:
97:61:9c:8a:b7:d8:b9:0f:97:7a:9a:a7:27:3c:66:b1:77:b4:
f4:ad:2b:fa:51:af:ed:84:e1:3c:1e:14:45:e1:97:3b:6a:60:
b7:eb:49:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ//gLvKFArnXrq+1jFpVygcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYjQ5MzQ1N2IyZjAyZTY5Yjg1ZjcxOGRjYzE2YTlhOWVm
MGZjZDEwHhcNMjYwODE0MDkwMDU0WhcNMjYwODE1MDkwMDU0WjAzMTEwLwYDVQQD
EyhiZjQxOTgxOThlODBiMzkzZWVkZGI3N2NkNWQ2MmZjMDZhOTg5NzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gt0Tr6v4os5GcJ4HcTJTiNllJ7x
odcg4792BksblfDjUm8xL4Q+vraF8MlWwEWzFNmdkQ4ftvuatRTqtARWjONhGAVY
bWrJmg5FNw4oB6lCa4Y/RXqIfWG25VdfkpedVggHkBCCVcKE2cxyv49XPftzBXTh
7mOO6P71CWkci8+f7umIgNrTOSdIzv82gvVWb/G8iYD0ee924GaEdESV5HKacYUM
l35uzRbiWlDUe8TvMJ/h8t0jjtNFYeIYiSlHjhIO6dq0P/U5Bs29NQ6S15pLOJ+/
Gbwx+8i7FgQrZR3IRvRT+yV8qORMnkdXrMs5qqhflwOu2TmDp6aeR0/5jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9BmBmOgLOT7t23fNXWL8BqmJckMB8GA1UdIwQY
MBaAFL+0k0V7LwLmm4X3GNzBapqe8PzRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdTVFJYc3ZBdWFiaGZjWTNNRnFtcDd3X05FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hNDE0MWQtODQ5OC00MmY0LWIyZjMt
MWY2NDA5ODQ4MTUwLzEvdjdTVFJYc3ZBdWFiaGZjWTNNRnFtcDd3X05FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hNDE0MWQtODQ5OC00MmY0LWIyZjMtMWY2NDA5ODQ4MTUw
LzEvdjdTVFJYc3ZBdWFiaGZjWTNNRnFtcDd3X05FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1Jzk5jz
aK7JgC/3XGlCJ3gFZEPSpLHrXR3qUXJ9KLZO/bzCsWBobK/hGT0r4yVqA8LeKL4+
NP5kB9VzrYqk2b6ZgtmwjVN5Q5WjoFNM3K2R40NxW0X3Lq8NBI20Q6rt4bXIcYMP
MrJnhBR3WpUwAuKBNkr/wZcxeBa4gdZNhabt5ghpAc4lYoFoZ2ociQW336h4M1Nm
B0QhhLNE/UUmEYZDaut+RYjAVcuAQmKFkcC4gERwBNHCXYrGpStmZfqadEssHIh7
6OZYdn48WBhS/KpN+Qykj1SBl2GcirfYuQ+XepqnJzxmsXe09K0r+lGv7YThPB4U
ReGXO2pgt+tJPQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 11:13:48 2026 by rpki-client