Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: +bg1b0EPtZ+Uey0YxdGF5NRsV1KmWvBGDd32q8+gYpw=
Subject key identifier: FB:E6:85:6B:43:A9:16:93:E6:A6:2F:19:01:92:EC:70:95:05:0F:0D
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 019D2996C1F876FE57D46ECA2427DC71A134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 10:00:38 +0000
Manifest this update: Thu 26 Mar 2026 10:00:38 +0000
Manifest next update: Fri 27 Mar 2026 10:00:38 +0000
Files and hashes: 1: 1-OuWPae2QmllBKFyaudDbNphGTc.roa (hash: TeZRPwnS84XUZCjrREzBGuK8EpeGGUaXoq1j2Y/fQSQ=)
2: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: djy+stP80azqDdNcdk75ShHvXxUfwAyKuZ+rVhgIL3Y=)
3: egw9QX1Wt4p34wD72nrev9Z3xNY.roa (hash: nskdvkCOlHahXUYLR2CJrMUSg+SVahy3tOlmXUVE40k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:c1:f8:76:fe:57:d4:6e:ca:24:27:dc:71:a1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Mar 26 10:00:38 2026 GMT
Not After : Mar 27 10:00:38 2026 GMT
Subject: CN=fbe6856b43a91693e6a62f190192ec7095050f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:88:4e:d2:0f:bc:ca:30:e7:47:06:00:64:5b:
fe:8b:96:cc:51:a8:a2:0b:a6:93:28:1a:ef:aa:af:
c4:6b:ec:a6:d4:e3:02:73:6f:45:27:bd:70:10:22:
81:15:a4:b9:29:a1:d8:c3:0c:d3:1d:db:59:9e:18:
4a:50:9d:b3:17:68:23:63:55:be:d1:8d:9d:6b:40:
bf:b1:2e:07:f6:19:5c:ca:f9:c3:ca:00:ea:3c:c6:
73:55:89:28:c9:c8:c9:d4:8d:bf:b8:c1:de:fe:01:
35:3c:2d:fe:85:5b:84:f0:18:90:4c:51:87:2f:96:
2f:ec:20:81:96:cb:cd:bc:4f:97:d2:4d:7f:84:c3:
7f:64:21:89:ef:26:4e:2a:5b:f8:eb:7c:37:f0:02:
e2:1e:3b:a1:0b:b0:8f:58:61:3c:5d:75:4b:62:fd:
2a:d3:81:ff:02:02:b6:59:27:c7:1d:66:05:7d:f4:
98:29:ec:cc:a1:07:de:68:f5:60:6d:ee:30:17:41:
7f:ee:d3:f5:a2:92:de:bc:98:19:73:4e:09:ff:60:
cf:bc:81:7e:b6:3e:a0:08:e2:33:49:b8:a4:83:36:
5c:f8:97:f8:2e:5e:19:ff:1e:f5:44:c0:64:dd:94:
3c:0e:29:4e:34:f2:67:c4:75:73:0c:02:52:ac:ae:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E6:85:6B:43:A9:16:93:E6:A6:2F:19:01:92:EC:70:95:05:0F:0D
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5a:96:39:97:80:5c:63:f7:26:1d:fe:16:6d:66:f1:c3:9c:
bd:66:bd:f2:8c:c5:8c:83:03:10:92:ee:e7:20:42:b3:cf:1a:
4d:7f:8e:a9:e2:ac:e5:fb:8f:93:52:7c:ea:c3:31:f5:80:f2:
8e:a8:fd:d0:b8:78:ed:98:50:5c:13:00:b5:6d:55:6e:21:05:
79:58:c8:25:fe:42:1a:a0:a4:f4:8f:45:2c:35:75:60:2c:99:
37:05:06:62:75:45:f1:1e:65:f5:3e:b1:a2:19:ae:f7:53:d1:
d2:66:5d:1f:4f:e8:4e:d6:c2:cd:e1:02:2b:be:2a:45:3b:7a:
ec:59:2f:43:7d:e7:2f:a7:2d:81:b9:6b:61:f0:6e:62:d2:a5:
96:8b:63:42:1d:97:89:e0:5c:21:a8:4e:f1:45:16:4e:cb:f9:
3a:7a:b2:73:94:98:42:40:c5:07:b3:91:66:8a:27:fe:eb:39:
33:a4:70:06:99:c9:4c:7d:67:7f:d4:66:42:04:f4:6e:b2:8e:
f1:62:1c:0e:f8:c8:4b:dd:4b:5a:8c:98:e2:de:c6:0c:88:6f:
41:31:49:33:f9:66:e0:1d:b4:93:86:d8:92:bd:21:cf:89:78:
95:c9:d4:b1:1f:db:13:ca:66:84:2c:7d:6f:22:84:05:f3:72:
51:8b:a0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:08 2026 by rpki-client