Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File: v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier: WlEq56OpATV9zOTgcj7ksRF0nPUZqbzf9hvuDQgKgj0=
Subject key identifier: 56:F9:79:20:62:AE:D7:74:63:0E:DC:7B:C9:D3:A7:E8:DE:AF:EA:AA
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 019D38D3925952C3A4201906DE857CE2388A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number: 0D3F
Signing time: Sun 29 Mar 2026 09:01:22 +0000
Manifest this update: Sun 29 Mar 2026 09:01:22 +0000
Manifest next update: Mon 30 Mar 2026 09:01:22 +0000
Files and hashes: 1: 5qCGbZj0fFzeN9z8gSaICT7yMA8.roa (hash: G66CwDSwPZ1mdj+oT5dw0nJbDcfnWDDiijDE5PcBGVI=)
2: W6VRxWMjY9RGYyNWUZ2Zrt5iGrQ.roa (hash: yDioc2gm4HKxpifXJms6Im9q4otOwWsYrylm+7dKp/8=)
3: Xts4DhBp7ZAXfoRbGSvo9y0epuw.roa (hash: +l+O+f+RgDS0P2v4v/Eiuo9qo0STO/EOfvPlMPBfz4M=)
4: ba0ulzzlxoKj7mmyIENd0mKkNQw.roa (hash: p7fb2fAb3ItubjjP5l3VBGCbn7g/XTc7585asMeO0R0=)
5: c5q6TPwm54z2LvrJGvcWXn2lLuc.roa (hash: PfHyIuw7JwnsE13vLHW24JJ5nVp6Ybi/KbqXWAmiqzc=)
6: ck5nzW7UcSxKWzHP2H-a3ylVN5E.roa (hash: OEda1WOM4ctfo76KkiHy1LOUWsgAZX7lWi/0FxF3rRA=)
7: dPJN6UsUvoT-CwaD6I6GCSDt2l8.roa (hash: Lm0/M7odPEdXSXGeFcgguujGj4w0jC2wgnprNlK79t8=)
8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: tmbyWsMlTKiWKyoccV1OqSy3bnImyLj58jLs74WKy4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:92:59:52:c3:a4:20:19:06:de:85:7c:e2:38:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Mar 29 09:01:22 2026 GMT
Not After : Mar 30 09:01:22 2026 GMT
Subject: CN=56f9792062aed774630edc7bc9d3a7e8deafeaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0e:35:f0:41:ed:a3:d0:68:25:2f:11:c1:94:
90:a3:d4:27:9b:a5:f9:d4:5f:d6:d0:17:f7:03:1b:
d1:8c:bb:3f:d9:26:4b:6c:76:26:5c:d2:b5:c4:8f:
44:e1:70:cb:84:75:b1:99:b5:a7:a4:cc:a9:b9:73:
d1:05:ee:da:84:3f:ad:91:29:6c:42:d3:db:1e:f0:
26:a4:c3:72:c0:de:e8:2c:21:90:f0:da:2f:88:20:
43:21:de:4d:d0:79:5d:2e:84:0e:f7:45:dc:ea:c4:
55:a1:ca:40:ef:53:57:14:45:12:5e:99:19:ba:ee:
63:51:a8:81:bf:80:66:a4:24:3a:61:a6:03:ae:da:
21:40:66:2f:aa:18:58:61:0c:83:38:7d:d2:04:4e:
92:93:b4:b8:43:7c:40:ed:88:b7:69:8a:62:fb:d0:
c2:59:23:de:6d:d1:50:18:f3:50:5c:e3:58:12:19:
1c:11:01:75:c8:53:32:5d:c3:7d:0f:7e:1b:2d:b8:
60:49:b0:9c:8a:dd:9c:b4:51:6b:60:0d:14:0f:22:
f8:58:c4:01:82:26:2b:73:3d:59:4c:2a:66:e1:60:
f0:89:ec:4e:d3:73:a5:e4:59:6a:83:33:ac:76:6d:
0e:86:57:25:b6:4c:2c:c7:cd:aa:6e:7c:ce:46:3c:
79:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F9:79:20:62:AE:D7:74:63:0E:DC:7B:C9:D3:A7:E8:DE:AF:EA:AA
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:77:e3:97:be:72:75:79:e6:39:b6:da:c0:49:df:6f:c7:05:
20:98:c4:45:97:e7:18:b5:0c:f9:10:5f:27:81:22:67:22:c3:
a5:bc:ad:7d:23:b6:2c:22:db:63:84:ab:a8:3d:fe:b6:39:45:
ec:b2:a9:f3:e1:8a:54:88:a8:4b:16:e5:bc:41:8a:fd:bf:3d:
bd:2c:92:3c:7b:c3:c9:76:99:34:f1:c8:c0:ae:fb:dc:7f:74:
0d:96:3d:1b:89:5d:f2:fb:7c:dc:fa:63:c2:dd:85:ea:85:a7:
00:1a:db:c3:1d:4b:69:f1:7c:dd:db:56:61:41:15:26:43:81:
90:55:27:31:92:32:be:6c:a0:24:46:2b:2f:cf:56:c2:28:ea:
92:9c:5b:03:74:fb:9a:ae:1f:ab:87:21:0a:fb:f1:c3:92:ff:
87:fd:6e:76:ef:8d:d9:ab:88:46:58:80:38:33:d2:6d:01:f5:
64:0a:30:42:9d:94:7d:32:a0:db:48:d8:d7:c8:c9:21:33:d3:
55:67:44:3e:b1:95:99:fc:58:ab:ae:a6:e2:b2:da:ac:9f:12:
59:8a:15:09:37:e1:43:11:2b:36:09:d8:85:8f:60:d9:51:d1:
5d:30:21:61:b2:61:53:ed:be:6e:59:8c:f8:5a:dd:cc:e4:4e:
0e:14:0f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:41 2026 by rpki-client