Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File: v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier: Mjl6Fam4pd33LqD+Ki5J9kAa3QgO4Au2uhClHuJP/6U=
Subject key identifier: 4C:DD:2D:E3:B8:A2:16:B7:07:0A:95:F3:C1:6B:70:ED:5B:B9:7F:7D
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 019E1EA2DF0C609B36AF887E9FBDB11F7167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number: 0DB6
Signing time: Wed 13 May 2026 00:00:50 +0000
Manifest this update: Wed 13 May 2026 00:00:50 +0000
Manifest next update: Thu 14 May 2026 00:00:50 +0000
Files and hashes: 1: 5qCGbZj0fFzeN9z8gSaICT7yMA8.roa (hash: G66CwDSwPZ1mdj+oT5dw0nJbDcfnWDDiijDE5PcBGVI=)
2: W6VRxWMjY9RGYyNWUZ2Zrt5iGrQ.roa (hash: yDioc2gm4HKxpifXJms6Im9q4otOwWsYrylm+7dKp/8=)
3: Xts4DhBp7ZAXfoRbGSvo9y0epuw.roa (hash: +l+O+f+RgDS0P2v4v/Eiuo9qo0STO/EOfvPlMPBfz4M=)
4: ba0ulzzlxoKj7mmyIENd0mKkNQw.roa (hash: p7fb2fAb3ItubjjP5l3VBGCbn7g/XTc7585asMeO0R0=)
5: c5q6TPwm54z2LvrJGvcWXn2lLuc.roa (hash: PfHyIuw7JwnsE13vLHW24JJ5nVp6Ybi/KbqXWAmiqzc=)
6: ck5nzW7UcSxKWzHP2H-a3ylVN5E.roa (hash: OEda1WOM4ctfo76KkiHy1LOUWsgAZX7lWi/0FxF3rRA=)
7: dPJN6UsUvoT-CwaD6I6GCSDt2l8.roa (hash: Lm0/M7odPEdXSXGeFcgguujGj4w0jC2wgnprNlK79t8=)
8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: KGrxygqnZ0soNLuH7uf+XWRiPx4+Rw0YFsrYvrygxRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:df:0c:60:9b:36:af:88:7e:9f:bd:b1:1f:71:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: May 13 00:00:50 2026 GMT
Not After : May 14 00:00:50 2026 GMT
Subject: CN=4cdd2de3b8a216b7070a95f3c16b70ed5bb97f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:53:79:30:71:6f:20:b5:36:0e:e7:68:a5:
98:76:27:4b:12:a8:d2:c9:ad:9b:15:7e:94:37:4c:
ab:db:48:6a:67:72:be:16:b9:14:5c:58:a6:3c:e3:
b8:66:84:ac:64:94:1c:3a:53:1e:87:ce:9e:d8:49:
d8:e5:c6:ef:b1:8c:d0:74:c4:dc:db:9c:66:1f:8f:
3c:bc:55:ac:31:72:3f:13:1d:1b:c9:71:1e:8c:25:
73:9f:a5:c9:da:4b:d4:64:fa:67:9d:93:87:84:52:
10:d4:68:42:74:b9:f1:f7:ec:ec:39:60:b0:f0:85:
9b:a7:5f:ad:06:c8:e2:5c:c3:ea:97:49:98:88:ec:
3e:6c:c8:42:43:8b:8c:20:05:42:50:c5:57:3e:e0:
82:72:8f:16:9d:1d:a2:bd:b9:fa:c7:32:0f:e5:14:
b3:0a:ed:df:37:ab:6b:b9:1b:3f:13:b1:f5:d0:db:
4c:37:2b:d7:e5:28:8e:53:6f:fb:7d:8a:2a:0c:95:
b9:50:81:75:4b:82:06:ab:9c:15:bb:ae:16:11:74:
42:22:7e:c4:fb:53:7d:5c:ec:b0:dd:f5:48:19:5e:
88:05:86:71:92:70:d3:42:de:c2:18:dd:69:8e:7c:
f5:d8:18:dd:01:00:11:40:0e:6e:69:e6:3b:e8:6c:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DD:2D:E3:B8:A2:16:B7:07:0A:95:F3:C1:6B:70:ED:5B:B9:7F:7D
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e6:b5:56:ac:37:5d:19:26:5f:f8:18:5e:29:f2:4b:7a:7a:
5d:85:65:8d:35:e2:9d:f1:25:20:f6:e7:73:f6:e6:83:36:8b:
8b:bd:c5:8b:1d:83:dd:d3:e1:e9:e7:5d:20:fe:a7:ec:61:df:
2a:18:ee:2e:30:8a:b2:b0:26:31:07:2e:2b:41:8f:6a:66:8f:
c2:68:c4:78:2a:8a:11:23:5c:82:67:a9:55:f5:57:5d:35:14:
b1:06:a2:80:a6:da:92:da:0e:cc:b6:d5:76:94:54:90:fe:21:
02:86:43:e3:9b:c3:1a:11:8d:0f:2b:61:56:df:3e:ba:78:59:
f6:fa:78:10:73:d4:d0:d1:13:51:dd:2e:81:b4:5b:7a:cf:d9:
73:d4:f8:69:db:7e:e9:94:1a:7d:c6:44:d9:84:0e:e1:07:ae:
5b:cf:04:5c:13:c5:ae:75:30:36:e0:21:df:5b:ad:c7:b5:b5:
55:80:b4:ec:dd:4d:75:c4:e7:4c:f1:ac:04:8d:46:e4:31:24:
9a:75:09:9d:41:48:00:86:f4:20:8e:43:70:1a:a3:c3:83:bd:
bd:86:1e:b3:92:a5:8c:6f:d3:0a:f4:bb:66:44:6f:5a:19:b3:
15:5b:38:59:f0:64:b9:3b:c5:73:21:9f:e9:17:81:2b:b4:25:
62:cc:13:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eot8MYJs2r4h+n72xH3FnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYjQ5MzQ1N2IyZjAyZTY5Yjg1ZjcxOGRjYzE2YTlhOWVm
MGZjZDEwHhcNMjYwNTEzMDAwMDUwWhcNMjYwNTE0MDAwMDUwWjAzMTEwLwYDVQQD
Eyg0Y2RkMmRlM2I4YTIxNmI3MDcwYTk1ZjNjMTZiNzBlZDViYjk3ZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6BTeTBxbyC1Ng7naKWYdidLEqjS
ya2bFX6UN0yr20hqZ3K+FrkUXFimPOO4ZoSsZJQcOlMeh86e2EnY5cbvsYzQdMTc
25xmH488vFWsMXI/Ex0byXEejCVzn6XJ2kvUZPpnnZOHhFIQ1GhCdLnx9+zsOWCw
8IWbp1+tBsjiXMPql0mYiOw+bMhCQ4uMIAVCUMVXPuCCco8WnR2ivbn6xzIP5RSz
Cu3fN6truRs/E7H10NtMNyvX5SiOU2/7fYoqDJW5UIF1S4IGq5wVu64WEXRCIn7E
+1N9XOyw3fVIGV6IBYZxknDTQt7CGN1pjnz12BjdAQARQA5uaeY76Gxj+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzdLeO4oha3BwqV88FrcO1buX99MB8GA1UdIwQY
MBaAFL+0k0V7LwLmm4X3GNzBapqe8PzRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdTVFJYc3ZBdWFiaGZjWTNNRnFtcDd3X05FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hNDE0MWQtODQ5OC00MmY0LWIyZjMt
MWY2NDA5ODQ4MTUwLzEvdjdTVFJYc3ZBdWFiaGZjWTNNRnFtcDd3X05FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hNDE0MWQtODQ5OC00MmY0LWIyZjMtMWY2NDA5ODQ4MTUw
LzEvdjdTVFJYc3ZBdWFiaGZjWTNNRnFtcDd3X05FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkua1Vqw3
XRkmX/gYXinyS3p6XYVljTXinfElIPbnc/bmgzaLi73Fix2D3dPh6eddIP6n7GHf
KhjuLjCKsrAmMQcuK0GPamaPwmjEeCqKESNcgmepVfVXXTUUsQaigKbaktoOzLbV
dpRUkP4hAoZD45vDGhGNDythVt8+unhZ9vp4EHPU0NETUd0ugbRbes/Zc9T4adt+
6ZQafcZE2YQO4QeuW88EXBPFrnUwNuAh31utx7W1VYC07N1NdcTnTPGsBI1G5DEk
mnUJnUFIAIb0II5DcBqjw4O9vYYes5KljG/TCvS7ZkRvWhmzFVs4WfBkuTvFcyGf
6ReBK7QlYswTxA==
-----END CERTIFICATE-----
Generated at Wed May 13 08:44:01 2026 by rpki-client