Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: FRmRpjwcYhakJTcc89pmNTT6Ks+uzAtE5sHYBpUMLW8=
Subject key identifier: 4E:C8:DF:DD:35:F2:DA:79:13:5F:C1:90:D9:7B:09:B4:EA:97:D1:01
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 019F91A3C34B36ED4EB924BB04BAEA32B58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 01:00:56 +0000
Manifest this update: Fri 24 Jul 2026 01:00:56 +0000
Manifest next update: Sat 25 Jul 2026 01:00:56 +0000
Files and hashes: 1: 1-OuWPae2QmllBKFyaudDbNphGTc.roa (hash: TeZRPwnS84XUZCjrREzBGuK8EpeGGUaXoq1j2Y/fQSQ=)
2: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: 7z6t6ILTPa940JNKe1zVlaBFSn8tnE/yA3g6pO83XlE=)
3: egw9QX1Wt4p34wD72nrev9Z3xNY.roa (hash: nskdvkCOlHahXUYLR2CJrMUSg+SVahy3tOlmXUVE40k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:c3:4b:36:ed:4e:b9:24:bb:04:ba:ea:32:b5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Jul 24 01:00:56 2026 GMT
Not After : Jul 25 01:00:56 2026 GMT
Subject: CN=4ec8dfdd35f2da79135fc190d97b09b4ea97d101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:86:cc:30:69:c0:6f:cb:6b:d1:b7:6b:5d:a2:
f7:d5:48:65:2b:da:0d:45:c2:a6:34:c5:37:1b:84:
12:34:a4:5c:6d:aa:cb:3c:62:f1:bc:fd:97:a7:ec:
d2:a8:f7:2e:16:5e:4b:54:ce:46:3c:c7:63:b3:07:
6e:74:fb:7a:df:50:02:57:6a:fc:d3:36:80:3b:53:
1d:dd:1b:54:89:61:00:fd:fc:f3:d3:9d:42:63:ee:
22:41:ea:5a:38:55:e1:d5:a2:80:50:c6:7c:f1:7a:
58:a9:0c:19:ef:fd:76:b4:57:3a:53:9f:ef:1d:49:
fe:44:3b:0c:b6:26:c6:a2:b8:25:74:a5:ad:3c:03:
9f:a5:d2:a1:be:4c:97:87:1f:5b:3b:94:ed:75:cb:
c3:67:60:1f:e3:83:85:f0:40:46:11:26:31:56:82:
03:74:72:bb:93:bd:69:97:e7:b4:68:c9:5b:3a:b3:
8c:df:85:60:88:d3:7a:51:e0:d2:0c:d1:a4:f4:ef:
b7:49:d5:3a:61:f1:13:c7:c5:69:12:11:e3:0e:4b:
9a:2b:08:60:14:fd:e8:50:ba:16:f0:56:fa:26:ff:
32:cf:55:3c:58:00:a1:a4:b8:7f:9d:10:86:de:2f:
85:5d:40:32:50:b6:e8:78:5a:57:eb:d5:ee:02:71:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C8:DF:DD:35:F2:DA:79:13:5F:C1:90:D9:7B:09:B4:EA:97:D1:01
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ad:dd:04:19:61:35:27:e8:dd:f8:69:fe:28:2c:c7:1a:bb:
54:29:3b:e6:39:0e:2a:2c:5a:9d:19:67:20:84:54:16:2a:9d:
72:58:6b:93:e6:73:dd:96:7f:f2:fd:ec:40:6d:7d:4e:6e:09:
a0:94:84:6c:51:41:90:a5:33:cf:66:15:53:4a:b1:dc:6a:55:
fd:ad:a8:14:c6:cd:5d:7d:ac:de:56:97:c3:9a:55:63:fc:36:
2d:c5:52:11:02:52:77:c1:2f:f5:96:c2:dd:63:8b:e8:45:a7:
c6:a3:fa:33:97:7c:bf:28:f2:bd:16:e6:92:e4:df:61:c2:c5:
10:0a:d6:6e:9b:79:d3:7d:08:b3:02:dd:17:31:7b:3f:3f:28:
75:4d:31:1b:b3:42:b8:53:3b:9e:f4:10:ff:18:54:3e:fd:64:
90:26:43:21:81:dc:c0:5e:c7:d5:4d:76:d2:0e:44:91:58:67:
1d:6c:ff:77:13:20:03:81:3e:4d:fb:8f:ef:13:7d:58:01:5d:
d3:fe:a3:b4:68:ba:41:ce:89:c3:83:08:ca:bc:55:76:06:fe:
e9:50:47:d8:62:7a:2c:2e:a8:ce:d7:16:0b:2b:3c:93:a8:e5:
fd:fb:ab:0c:7b:e0:17:29:13:b6:44:2d:53:90:0d:41:bb:2c:
b0:df:c3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:20:59 2026 by rpki-client