Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: pTeBJcYUOCBN21fechlPxmMJAWCeoTLRI0bJBxi8rts=
Subject key identifier: 65:A3:55:B6:CB:4A:32:11:87:D2:C4:25:CB:E4:B8:64:D8:0F:D0:22
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 019E1CEBE4EC1CF319D77EAE05A5022085B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 16:01:21 +0000
Manifest this update: Tue 12 May 2026 16:01:21 +0000
Manifest next update: Wed 13 May 2026 16:01:21 +0000
Files and hashes: 1: 1-OuWPae2QmllBKFyaudDbNphGTc.roa (hash: TeZRPwnS84XUZCjrREzBGuK8EpeGGUaXoq1j2Y/fQSQ=)
2: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: gEYiY3lle5UqSMaF59ymzu8JZfURxB1BNsqUefiOAsE=)
3: egw9QX1Wt4p34wD72nrev9Z3xNY.roa (hash: nskdvkCOlHahXUYLR2CJrMUSg+SVahy3tOlmXUVE40k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:e4:ec:1c:f3:19:d7:7e:ae:05:a5:02:20:85:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: May 12 16:01:21 2026 GMT
Not After : May 13 16:01:21 2026 GMT
Subject: CN=65a355b6cb4a321187d2c425cbe4b864d80fd022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:52:f2:3c:73:11:ff:90:89:ce:4c:68:ab:c1:
e1:36:11:a4:52:98:7e:7a:b5:55:6d:18:3f:b2:1b:
b4:e2:61:8d:24:27:7e:b6:9c:cf:96:80:13:6d:ce:
fa:96:33:a1:12:07:ec:fa:c2:a7:57:8f:dd:d0:a9:
51:f4:d6:b8:69:86:e2:5c:a2:d5:0d:86:23:42:fe:
35:00:20:98:d9:8c:06:5e:54:51:b4:c8:e8:32:7a:
f9:31:80:8c:92:94:a8:f8:31:eb:04:65:7e:95:9f:
95:11:57:da:dc:6b:b2:b1:24:62:30:8a:60:44:61:
72:05:fe:60:cb:d5:0b:f0:a9:35:df:3c:f5:db:8d:
7a:13:b7:90:12:2e:80:2e:ca:ce:61:0c:dd:f1:b8:
fe:a0:a7:1d:a0:57:37:c0:d8:b7:6c:f3:89:38:af:
e0:a5:13:e8:50:f1:cf:54:fb:3a:63:18:b2:1b:f3:
80:f6:64:d2:b9:81:fe:f6:c1:8a:ed:73:6e:b2:67:
16:9d:d5:45:61:9e:36:48:ea:96:9e:01:72:64:b6:
37:87:3d:a4:e2:21:43:08:4e:82:c1:90:3c:08:2e:
54:d4:da:6c:04:1c:a9:78:92:ad:66:73:9e:e4:7e:
ac:f7:ef:6b:45:fc:1c:19:e4:19:bd:75:8e:e1:b2:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A3:55:B6:CB:4A:32:11:87:D2:C4:25:CB:E4:B8:64:D8:0F:D0:22
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:89:0d:a9:e5:0f:2b:22:88:a4:8e:5b:3a:8a:7d:68:34:21:
4c:27:4d:10:f5:2c:d1:77:85:b1:74:26:33:01:b4:bd:85:5f:
ea:9e:fa:ee:ed:2c:ae:28:7b:68:80:17:b3:fe:cc:80:a3:3f:
c2:06:a6:72:0e:ba:4c:a4:89:1e:90:f2:7b:4d:a8:a6:4d:14:
78:38:f6:45:48:c1:71:db:b1:80:37:d9:c6:56:8c:58:4f:8c:
a8:7d:62:24:c1:7a:ee:7f:9e:5c:37:ba:00:c8:be:97:ba:3e:
8a:c0:09:f6:ef:f4:59:aa:2c:d9:f3:2a:24:7a:97:c9:ed:d9:
96:1d:35:94:93:70:f3:b0:f8:d7:4a:7d:3d:f1:0c:17:c5:c2:
84:92:32:39:16:36:c3:9f:bb:90:d6:6e:9e:87:0e:d0:86:a4:
9f:16:9d:f0:33:71:93:1d:64:6c:9d:de:a7:1b:1e:1e:dc:f9:
d4:2f:57:ff:c3:95:2b:00:4b:b4:ef:80:bb:b7:b1:44:ce:aa:
12:25:23:34:24:c0:73:35:3b:f0:42:7d:d4:8b:79:f8:1f:0d:
f7:3f:52:02:5c:32:20:1d:5f:53:bf:8d:97:a7:1a:30:25:30:
f5:cb:a7:c4:fd:25:58:d8:3e:9b:de:6e:d7:38:4e:87:0d:5e:
42:68:25:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c6+TsHPMZ136uBaUCIIWwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZjU0YmUxYjVlZDVmZDU5MmZhY2E0NjhkZjExMTAwOTVm
M2VhMGEwHhcNMjYwNTEyMTYwMTIxWhcNMjYwNTEzMTYwMTIxWjAzMTEwLwYDVQQD
Eyg2NWEzNTViNmNiNGEzMjExODdkMmM0MjVjYmU0Yjg2NGQ4MGZkMDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1LyPHMR/5CJzkxoq8HhNhGkUph+
erVVbRg/shu04mGNJCd+tpzPloATbc76ljOhEgfs+sKnV4/d0KlR9Na4aYbiXKLV
DYYjQv41ACCY2YwGXlRRtMjoMnr5MYCMkpSo+DHrBGV+lZ+VEVfa3GuysSRiMIpg
RGFyBf5gy9UL8Kk13zz12416E7eQEi6ALsrOYQzd8bj+oKcdoFc3wNi3bPOJOK/g
pRPoUPHPVPs6YxiyG/OA9mTSuYH+9sGK7XNusmcWndVFYZ42SOqWngFyZLY3hz2k
4iFDCE6CwZA8CC5U1NpsBBypeJKtZnOe5H6s9+9rRfwcGeQZvXWO4bIhYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWjVbbLSjIRh9LEJcvkuGTYD9AiMB8GA1UdIwQY
MBaAFO31S+G17V/VkvrKRo3xEQCV8+oKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUt
OWU2MTRmNDQ2NmM1LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUtOWU2MTRmNDQ2NmM1
LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYkNqeUP
KyKIpI5bOop9aDQhTCdNEPUs0XeFsXQmMwG0vYVf6p767u0srih7aIAXs/7MgKM/
wgamcg66TKSJHpDye02opk0UeDj2RUjBcduxgDfZxlaMWE+MqH1iJMF67n+eXDe6
AMi+l7o+isAJ9u/0Waos2fMqJHqXye3Zlh01lJNw87D410p9PfEMF8XChJIyORY2
w5+7kNZunocO0Iaknxad8DNxkx1kbJ3epxseHtz51C9X/8OVKwBLtO+Au7exRM6q
EiUjNCTAczU78EJ91It5+B8N9z9SAlwyIB1fU7+Nl6caMCUw9cunxP0lWNg+m95u
1zhOhw1eQmglwQ==
-----END CERTIFICATE-----
Generated at Wed May 13 00:46:28 2026 by rpki-client