Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: 50xyudstK85UON/QdkXcVGV/GK/Z8wpZ7nrgr99kRjs=
Subject key identifier: 41:A7:3F:F3:7D:7E:47:07:80:38:D1:34:E7:25:C2:4D:7E:04:AD:32
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 019D27A8818A7AEAC5CD4CFF30EB88254091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 01:00:47 +0000
Manifest this update: Thu 26 Mar 2026 01:00:47 +0000
Manifest next update: Fri 27 Mar 2026 01:00:47 +0000
Files and hashes: 1: 1-OuWPae2QmllBKFyaudDbNphGTc.roa (hash: TeZRPwnS84XUZCjrREzBGuK8EpeGGUaXoq1j2Y/fQSQ=)
2: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: IxQEJVViK9a1JW8oWPMCei+pCxk+U/hYsj59oa80qFs=)
3: egw9QX1Wt4p34wD72nrev9Z3xNY.roa (hash: nskdvkCOlHahXUYLR2CJrMUSg+SVahy3tOlmXUVE40k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:81:8a:7a:ea:c5:cd:4c:ff:30:eb:88:25:40:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Mar 26 01:00:47 2026 GMT
Not After : Mar 27 01:00:47 2026 GMT
Subject: CN=41a73ff37d7e47078038d134e725c24d7e04ad32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:92:29:9b:0d:1e:30:5b:2a:9e:9c:a0:d9:
6b:69:5a:05:6e:3c:58:7e:62:2a:ee:39:78:34:08:
83:aa:66:d3:47:0f:b5:b2:6c:ce:fa:b8:4b:a6:2b:
ad:fc:8c:76:20:3d:af:a5:fa:8c:a6:d8:d7:74:1a:
c6:00:a3:ed:5f:2d:88:9d:a8:35:b8:1e:70:23:0a:
19:aa:4b:84:b6:a5:92:cc:48:bd:b9:4c:cb:11:57:
46:cb:f4:c0:46:e3:35:3c:dc:5c:3c:b0:46:f6:7a:
51:95:7c:bf:92:07:13:af:e1:ef:b2:81:50:03:77:
24:04:c8:2a:b1:40:8b:ed:aa:3f:f7:a2:f0:f3:fc:
49:ad:dc:58:59:08:0b:10:cf:4f:26:4b:67:c6:10:
e7:29:3f:0d:93:0c:72:c8:33:42:fa:34:01:b4:f5:
27:80:c1:0f:ca:22:7f:bc:76:60:7f:47:0a:b4:c9:
04:c6:00:3f:fb:5e:64:89:6a:56:61:02:35:16:79:
b1:55:eb:3d:19:1a:82:34:9f:7a:bc:9c:73:7a:8d:
c2:8e:cd:f8:bc:82:c6:fc:eb:d3:26:2c:1a:82:d3:
c4:42:b8:3a:13:4f:52:86:e2:f1:66:3b:90:cc:78:
8d:fc:66:83:1c:96:04:af:7c:ba:0c:08:43:c6:ca:
22:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A7:3F:F3:7D:7E:47:07:80:38:D1:34:E7:25:C2:4D:7E:04:AD:32
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:55:a9:c3:ad:68:bc:a7:25:0a:f8:8a:e1:09:e9:30:97:07:
2a:9d:0c:21:68:cb:6a:0d:fd:56:4f:25:98:a2:5b:05:af:b3:
39:9d:54:fc:b1:16:b7:09:cb:8a:7d:c6:11:34:4f:07:1f:4f:
78:fd:57:12:32:81:0d:88:a6:5e:2f:95:e5:d2:2f:ca:7e:a4:
d6:87:d2:1c:cd:b3:b8:89:11:1d:0f:35:e9:92:0e:4a:49:32:
de:f4:da:b5:84:b6:41:82:b2:33:14:38:e5:05:5f:29:1e:89:
07:84:71:5e:cd:88:8c:aa:22:57:c1:ed:44:64:85:57:02:2d:
19:50:f7:ce:30:32:f5:00:0b:2d:80:59:fc:9b:d8:55:1f:92:
01:09:e3:f2:6f:67:e1:86:25:b6:f2:63:7b:b2:95:3b:e6:e2:
fd:29:db:10:bc:fb:f0:51:75:24:99:68:ff:0a:c7:4e:fe:c7:
70:db:aa:e0:cb:71:ca:65:84:29:7a:d1:39:5f:37:2e:13:fe:
45:8f:e3:ec:e2:b6:3f:f7:16:81:95:5c:68:61:01:97:80:59:
f5:4e:0e:d1:4a:8e:3f:86:46:b2:a9:19:c4:a7:13:ee:49:fd:
0b:eb:12:95:28:8c:a2:3e:ee:29:14:48:1a:0b:a0:56:c4:0e:
97:56:16:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:50 2026 by rpki-client