Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: vEXBvt3oCjPFRps2R0DgrYV1vwCbmvIABmNjGBsiX2Y=
Subject key identifier: E9:51:5D:2B:3E:2F:90:CD:94:FF:A7:69:D0:43:E4:F5:3C:80:2D:26
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 01A0D2371A99BCE2AA048CFC4A3C0529EC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 07:00:21 +0000
Manifest this update: Thu 24 Sep 2026 07:00:21 +0000
Manifest next update: Fri 25 Sep 2026 07:00:21 +0000
Files and hashes: 1: 1-OuWPae2QmllBKFyaudDbNphGTc.roa (hash: TeZRPwnS84XUZCjrREzBGuK8EpeGGUaXoq1j2Y/fQSQ=)
2: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: zZmCgcQM5r6NvWchtnT5yEy0ThM6mShTbnHUhaWN4/w=)
3: egw9QX1Wt4p34wD72nrev9Z3xNY.roa (hash: nskdvkCOlHahXUYLR2CJrMUSg+SVahy3tOlmXUVE40k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:1a:99:bc:e2:aa:04:8c:fc:4a:3c:05:29:ec:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Sep 24 07:00:21 2026 GMT
Not After : Sep 25 07:00:21 2026 GMT
Subject: CN=e9515d2b3e2f90cd94ffa769d043e4f53c802d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:9c:f7:20:84:0f:19:f2:c2:10:bb:4c:44:
14:e9:50:80:6c:47:c1:71:1b:09:21:aa:20:ae:02:
be:aa:7a:cb:24:79:3d:ec:1d:ec:71:ea:09:74:42:
8d:a5:55:f5:33:c2:99:3f:08:94:36:56:70:c1:d7:
4d:b8:07:15:80:cf:63:f2:cf:1d:5c:e4:36:52:94:
00:6f:ff:b1:24:38:9d:0d:89:36:ae:4a:c2:14:b3:
8f:75:dc:0d:bf:5e:8e:80:50:50:02:e5:84:64:04:
e5:ac:46:2c:31:08:0e:4e:28:d9:80:e7:ba:17:50:
8e:72:3d:b7:fc:f9:9e:47:b4:38:9e:5e:2c:5f:07:
1b:58:ae:3e:4b:d3:6d:03:2c:40:a2:25:4e:15:35:
7c:13:c7:b1:7b:c2:fc:87:7d:11:38:1a:4a:7e:46:
fc:f0:b2:9d:e7:d1:ca:3a:2e:da:36:94:26:5d:e2:
a9:31:ff:6b:b1:3f:71:d5:61:a3:97:64:a2:67:41:
8d:33:ec:75:05:c1:7e:71:cc:38:13:d6:f7:7d:47:
75:a0:c2:78:8e:ab:cd:0a:49:99:00:e3:f2:39:d8:
22:93:4d:99:a6:40:c4:bd:9e:33:b9:60:35:46:9e:
f4:30:0c:93:e9:06:43:13:3d:6e:41:3f:8b:7c:3a:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:51:5D:2B:3E:2F:90:CD:94:FF:A7:69:D0:43:E4:F5:3C:80:2D:26
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2c:2e:3d:a9:71:36:26:ac:a3:aa:bc:c4:f7:fd:eb:e9:e3:
2e:71:ac:78:da:35:12:d8:a8:ab:32:33:ab:c5:36:e6:60:2e:
cf:68:97:7c:b3:54:dc:84:aa:89:b2:bf:e0:79:8d:a0:47:a3:
b8:93:a0:7d:ed:37:5c:8b:7d:50:db:00:4b:d3:7b:be:2b:03:
8e:29:6a:6a:f2:a3:0d:95:2f:54:ca:5c:33:f4:87:01:7b:d5:
0e:9d:9d:2e:95:56:2d:4a:71:94:6c:2f:bf:45:5c:2d:b0:bc:
29:56:fb:75:3e:ed:e5:c4:92:01:b0:c6:8e:80:63:4a:ab:4b:
9b:1d:e8:54:4e:36:56:1e:8b:d1:3c:2c:7e:93:92:26:c3:64:
7d:bb:93:9d:4c:16:27:8a:69:a9:ff:23:af:56:78:2a:04:54:
74:a7:5a:a1:2e:54:09:3e:d3:d7:f4:97:b3:ba:49:85:5b:04:
a8:45:8c:71:4a:68:93:8c:d8:53:89:f9:98:bf:f4:59:ff:1d:
10:d0:07:87:13:fa:e3:7a:2b:da:31:8b:34:51:13:b6:bd:06:
02:a6:08:3b:06:53:76:ff:73:fb:86:e2:23:50:2d:d9:80:ca:
3f:17:38:ce:ea:32:73:4d:85:94:e9:b8:37:e0:95:8b:c3:43:
e4:1e:7e:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSNxqZvOKqBIz8SjwFKexOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZjU0YmUxYjVlZDVmZDU5MmZhY2E0NjhkZjExMTAwOTVm
M2VhMGEwHhcNMjYwOTI0MDcwMDIxWhcNMjYwOTI1MDcwMDIxWjAzMTEwLwYDVQQD
EyhlOTUxNWQyYjNlMmY5MGNkOTRmZmE3NjlkMDQzZTRmNTNjODAyZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLuc9yCEDxnywhC7TEQU6VCAbEfB
cRsJIaogrgK+qnrLJHk97B3sceoJdEKNpVX1M8KZPwiUNlZwwddNuAcVgM9j8s8d
XOQ2UpQAb/+xJDidDYk2rkrCFLOPddwNv16OgFBQAuWEZATlrEYsMQgOTijZgOe6
F1COcj23/PmeR7Q4nl4sXwcbWK4+S9NtAyxAoiVOFTV8E8exe8L8h30ROBpKfkb8
8LKd59HKOi7aNpQmXeKpMf9rsT9x1WGjl2SiZ0GNM+x1BcF+ccw4E9b3fUd1oMJ4
jqvNCkmZAOPyOdgik02ZpkDEvZ4zuWA1Rp70MAyT6QZDEz1uQT+LfDoh9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlRXSs+L5DNlP+nadBD5PU8gC0mMB8GA1UdIwQY
MBaAFO31S+G17V/VkvrKRo3xEQCV8+oKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUt
OWU2MTRmNDQ2NmM1LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUtOWU2MTRmNDQ2NmM1
LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACwuPalx
Niaso6q8xPf96+njLnGseNo1EtioqzIzq8U25mAuz2iXfLNU3ISqibK/4HmNoEej
uJOgfe03XIt9UNsAS9N7visDjilqavKjDZUvVMpcM/SHAXvVDp2dLpVWLUpxlGwv
v0VcLbC8KVb7dT7t5cSSAbDGjoBjSqtLmx3oVE42Vh6L0TwsfpOSJsNkfbuTnUwW
J4ppqf8jr1Z4KgRUdKdaoS5UCT7T1/SXs7pJhVsEqEWMcUpok4zYU4n5mL/0Wf8d
ENAHhxP643or2jGLNFETtr0GAqYIOwZTdv9z+4biI1At2YDKPxc4zuoyc02FlOm4
N+CVi8ND5B5+BA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:56:55 2026 by rpki-client