Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File: v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier: 0pXF/l5b4mvCvI1mEvJpbt1P68htgNTfdFqErATwYW8=
Subject key identifier: 7F:B9:92:1D:06:D5:A4:A0:11:0D:92:17:A4:82:A8:89:A3:5A:20:03
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 019E2A392E5EA684DD9603B550A1C29AD4DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number: 0DBC
Signing time: Fri 15 May 2026 06:00:50 +0000
Manifest this update: Fri 15 May 2026 06:00:50 +0000
Manifest next update: Sat 16 May 2026 06:00:50 +0000
Files and hashes: 1: 5qCGbZj0fFzeN9z8gSaICT7yMA8.roa (hash: G66CwDSwPZ1mdj+oT5dw0nJbDcfnWDDiijDE5PcBGVI=)
2: W6VRxWMjY9RGYyNWUZ2Zrt5iGrQ.roa (hash: yDioc2gm4HKxpifXJms6Im9q4otOwWsYrylm+7dKp/8=)
3: Xts4DhBp7ZAXfoRbGSvo9y0epuw.roa (hash: +l+O+f+RgDS0P2v4v/Eiuo9qo0STO/EOfvPlMPBfz4M=)
4: ba0ulzzlxoKj7mmyIENd0mKkNQw.roa (hash: p7fb2fAb3ItubjjP5l3VBGCbn7g/XTc7585asMeO0R0=)
5: c5q6TPwm54z2LvrJGvcWXn2lLuc.roa (hash: PfHyIuw7JwnsE13vLHW24JJ5nVp6Ybi/KbqXWAmiqzc=)
6: ck5nzW7UcSxKWzHP2H-a3ylVN5E.roa (hash: OEda1WOM4ctfo76KkiHy1LOUWsgAZX7lWi/0FxF3rRA=)
7: dPJN6UsUvoT-CwaD6I6GCSDt2l8.roa (hash: Lm0/M7odPEdXSXGeFcgguujGj4w0jC2wgnprNlK79t8=)
8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: GgznF7ryxi8Ig4Ng7+/zHcJAwEWZA7+oD/JL1TAieYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:39:2e:5e:a6:84:dd:96:03:b5:50:a1:c2:9a:d4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: May 15 06:00:50 2026 GMT
Not After : May 16 06:00:50 2026 GMT
Subject: CN=7fb9921d06d5a4a0110d9217a482a889a35a2003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ad:a7:d5:19:0d:c4:69:d4:fb:2f:98:cf:fd:
1b:8d:9f:84:7c:1a:a9:65:55:c5:60:f6:2d:c5:33:
2b:ab:2b:0f:f8:0c:16:bd:f1:66:97:30:cb:b5:53:
60:8b:e1:4f:83:d8:37:c2:54:fd:72:56:52:b3:bb:
7e:24:b4:b7:97:54:8c:35:41:1e:cc:e9:25:fb:a3:
f2:83:3f:24:6b:94:da:5d:22:c0:64:bd:4c:65:3c:
76:05:db:d0:4e:28:dd:e0:db:f6:34:0c:89:67:e6:
93:eb:d5:b8:ed:26:a1:93:20:f6:f7:06:29:9b:8b:
bf:42:93:db:38:7b:dd:3c:02:f4:8a:48:1d:35:3a:
48:7c:3c:94:e5:ca:58:45:4a:54:a6:20:b6:f0:d0:
94:f3:42:56:b5:58:cc:d9:00:f6:79:31:a6:34:b3:
40:8a:dd:60:93:cd:92:af:7a:ce:4a:aa:2b:ef:bf:
74:08:c5:74:80:f3:c9:d8:0d:ad:6b:84:98:63:40:
59:e7:48:d0:34:4a:c2:39:61:20:58:24:c1:90:7e:
a4:dd:41:37:73:c6:95:76:c9:64:de:92:98:f3:3c:
c4:23:e9:96:a2:f7:16:80:b6:bf:81:fb:4b:b2:ac:
8b:e9:77:02:a3:4c:b3:0d:2d:e8:26:be:ac:3d:00:
22:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B9:92:1D:06:D5:A4:A0:11:0D:92:17:A4:82:A8:89:A3:5A:20:03
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:10:0f:01:43:0e:04:03:57:d5:2f:9b:13:40:78:37:15:cf:
0c:f9:be:56:6f:72:29:a1:18:d5:3e:71:11:b2:a8:c5:17:ed:
c8:ea:48:74:ba:95:ff:c5:64:fb:0b:0f:b0:15:05:d5:43:39:
ab:a3:08:d0:97:a4:65:00:dc:06:87:ca:54:3a:cd:ae:b1:ad:
08:f8:5b:e8:3a:9e:b1:38:68:10:f1:1e:7d:b5:b7:d2:98:55:
65:98:f3:5f:1a:2f:f3:b3:c2:16:f0:5d:66:f3:b2:14:7b:f9:
94:67:54:f8:d6:05:fa:0f:17:16:f4:86:40:88:8d:52:4b:1c:
fc:5a:cc:2a:7c:1d:66:1b:56:ed:9e:bc:3f:e7:ef:ae:c5:07:
70:2a:bb:c2:a7:72:b8:19:ed:e8:ff:6e:f3:2b:19:d4:8b:e7:
f4:39:ed:e7:3f:b8:58:e2:d3:10:db:91:6d:fd:21:02:4e:25:
fc:29:4e:f4:1d:b9:aa:88:76:f3:bb:b5:f8:9b:71:c0:1a:c8:
46:cd:79:9f:e1:7f:e2:76:f5:2a:25:79:ef:42:d3:da:d4:be:
91:9b:6f:d1:e4:1f:0b:4b:d9:ab:87:b5:2d:c8:eb:53:d0:af:
da:b5:06:5d:14:9d:dc:88:b1:4d:be:f5:3a:b8:f9:01:37:9c:
fc:10:50:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:56:00 2026 by rpki-client