Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File: v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier: 6wCZThzaJ2jbVgaRAbtTSCOqM4E1dkqejW3hGzHfoQs=
Subject key identifier: 50:47:BC:FE:76:86:F3:97:DB:57:17:ED:71:46:B8:0C:FE:9F:A4:23
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 019F935C12344C1CF3964D74F625D909191F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number: 0E77
Signing time: Fri 24 Jul 2026 09:01:52 +0000
Manifest this update: Fri 24 Jul 2026 09:01:52 +0000
Manifest next update: Sat 25 Jul 2026 09:01:52 +0000
Files and hashes: 1: 5qCGbZj0fFzeN9z8gSaICT7yMA8.roa (hash: G66CwDSwPZ1mdj+oT5dw0nJbDcfnWDDiijDE5PcBGVI=)
2: W6VRxWMjY9RGYyNWUZ2Zrt5iGrQ.roa (hash: yDioc2gm4HKxpifXJms6Im9q4otOwWsYrylm+7dKp/8=)
3: Xts4DhBp7ZAXfoRbGSvo9y0epuw.roa (hash: +l+O+f+RgDS0P2v4v/Eiuo9qo0STO/EOfvPlMPBfz4M=)
4: ba0ulzzlxoKj7mmyIENd0mKkNQw.roa (hash: p7fb2fAb3ItubjjP5l3VBGCbn7g/XTc7585asMeO0R0=)
5: c5q6TPwm54z2LvrJGvcWXn2lLuc.roa (hash: PfHyIuw7JwnsE13vLHW24JJ5nVp6Ybi/KbqXWAmiqzc=)
6: ck5nzW7UcSxKWzHP2H-a3ylVN5E.roa (hash: OEda1WOM4ctfo76KkiHy1LOUWsgAZX7lWi/0FxF3rRA=)
7: dPJN6UsUvoT-CwaD6I6GCSDt2l8.roa (hash: Lm0/M7odPEdXSXGeFcgguujGj4w0jC2wgnprNlK79t8=)
8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: WTje9vADGhHz7ivIxeuPGkU0RJ0X7uKKP3RQ0W0BOL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:12:34:4c:1c:f3:96:4d:74:f6:25:d9:09:19:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Jul 24 09:01:52 2026 GMT
Not After : Jul 25 09:01:52 2026 GMT
Subject: CN=5047bcfe7686f397db5717ed7146b80cfe9fa423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:08:45:0d:30:42:4d:9c:9f:bb:5a:59:6e:
53:f2:7d:83:f8:ca:46:b7:65:e4:be:da:3b:69:7a:
9c:96:25:19:9e:6e:11:fe:83:f5:92:7c:7b:d7:2b:
aa:3a:77:8d:14:ec:61:46:7e:5f:60:6d:90:c4:91:
f0:26:d8:67:ba:40:89:16:66:32:b2:7c:98:e7:b0:
e5:b2:fd:dc:19:04:cf:09:f5:21:48:b1:9a:9a:3c:
e5:6b:e4:39:70:85:e5:f1:2d:a9:10:75:62:73:ea:
5f:b5:de:f2:fa:91:94:74:d8:4b:51:d5:49:02:dc:
b3:08:85:93:5d:d9:c7:ce:e6:0e:b1:62:c0:34:ed:
b9:f1:8b:1d:ce:c8:b7:26:0f:6c:94:78:cc:64:8d:
7e:58:ce:1d:53:e0:bb:de:b9:d4:72:5a:2a:91:ca:
43:d0:88:e6:43:36:87:20:1d:d4:4a:6d:cd:ce:24:
9f:9c:40:30:47:41:e4:81:c6:78:01:e5:e1:46:46:
c3:2c:25:a0:87:49:d9:92:02:ae:fc:48:3a:11:36:
1b:72:7b:c9:65:b7:ec:dc:9d:7e:a7:2a:55:d1:e5:
08:f0:6a:3c:e4:c5:e4:f0:34:3d:00:a3:b3:83:d9:
d1:13:c0:40:34:e0:a0:28:d5:63:67:59:58:e0:3b:
ff:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:47:BC:FE:76:86:F3:97:DB:57:17:ED:71:46:B8:0C:FE:9F:A4:23
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:00:52:15:b7:26:c5:0b:92:ca:6d:41:8a:76:20:13:94:78:
fa:59:bd:5a:db:cf:7a:6f:d9:bf:be:56:b1:a7:2e:3d:ed:26:
3b:c8:93:de:43:5f:92:81:3d:42:8b:cf:d9:f2:97:fe:12:16:
da:9b:75:ab:d1:ee:95:ce:10:d3:73:3f:1e:12:fa:cf:bf:44:
10:da:1b:8e:4d:a2:31:7d:6e:ca:f2:4f:e5:f6:a2:6f:ea:c3:
22:7d:81:fa:d6:11:fe:46:ba:9e:22:a2:2a:6f:89:85:3a:8f:
54:09:45:69:f0:e7:52:bd:58:df:73:3e:4c:9d:1c:2c:40:3f:
8a:10:2c:64:a8:ee:b2:0c:85:8f:64:1e:e6:a6:7d:c4:04:20:
ea:2e:f3:f7:83:9a:9e:1c:e3:c8:60:97:5a:43:dc:20:36:11:
3e:49:e1:53:8b:92:dd:cd:b7:fd:21:dc:55:d8:d0:13:49:e6:
e9:68:93:cb:17:fa:67:40:b4:27:b2:77:f6:94:30:23:71:7d:
65:be:93:6d:f3:85:64:c1:34:10:9e:0b:28:98:a5:4e:d5:04:
5a:d8:23:c9:48:6c:ed:ad:86:ea:db:c9:79:01:2b:a7:d6:9d:
42:c6:55:f3:56:56:a2:5f:9e:91:c5:77:7c:73:82:41:82:7f:
0a:99:b0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:55:47 2026 by rpki-client