Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File: v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier: Cd5sB8+qPUUHF+KI7zdfAVuz9t4i806o5fTQ26M3ZEk=
Subject key identifier: E9:E9:15:08:9D:A7:1B:EF:F2:91:7D:82:9C:DB:11:4D:FC:1E:28:03
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 019D2583E4E58DCC24E03CF0FB91A60CB134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number: 0D35
Signing time: Wed 25 Mar 2026 15:01:33 +0000
Manifest this update: Wed 25 Mar 2026 15:01:33 +0000
Manifest next update: Thu 26 Mar 2026 15:01:33 +0000
Files and hashes: 1: 5qCGbZj0fFzeN9z8gSaICT7yMA8.roa (hash: G66CwDSwPZ1mdj+oT5dw0nJbDcfnWDDiijDE5PcBGVI=)
2: W6VRxWMjY9RGYyNWUZ2Zrt5iGrQ.roa (hash: yDioc2gm4HKxpifXJms6Im9q4otOwWsYrylm+7dKp/8=)
3: Xts4DhBp7ZAXfoRbGSvo9y0epuw.roa (hash: +l+O+f+RgDS0P2v4v/Eiuo9qo0STO/EOfvPlMPBfz4M=)
4: ba0ulzzlxoKj7mmyIENd0mKkNQw.roa (hash: p7fb2fAb3ItubjjP5l3VBGCbn7g/XTc7585asMeO0R0=)
5: c5q6TPwm54z2LvrJGvcWXn2lLuc.roa (hash: PfHyIuw7JwnsE13vLHW24JJ5nVp6Ybi/KbqXWAmiqzc=)
6: ck5nzW7UcSxKWzHP2H-a3ylVN5E.roa (hash: OEda1WOM4ctfo76KkiHy1LOUWsgAZX7lWi/0FxF3rRA=)
7: dPJN6UsUvoT-CwaD6I6GCSDt2l8.roa (hash: Lm0/M7odPEdXSXGeFcgguujGj4w0jC2wgnprNlK79t8=)
8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: Urql0UKxTf+BDcK3Df9wvX3nu+vWfYewAN9SDLqWuIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:e4:e5:8d:cc:24:e0:3c:f0:fb:91:a6:0c:b1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Mar 25 15:01:33 2026 GMT
Not After : Mar 26 15:01:33 2026 GMT
Subject: CN=e9e915089da71beff2917d829cdb114dfc1e2803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cb:d9:d5:58:d4:71:5b:b0:94:51:ce:5c:a8:
9c:5a:c6:a8:78:e5:9e:d4:c3:5b:f6:dc:9d:cf:d3:
8f:a7:91:61:16:8f:87:3d:b2:58:8f:85:4e:37:6d:
4e:8f:d2:43:39:e7:bc:23:33:d4:4d:f4:46:2b:4a:
f8:68:b5:00:94:37:f3:a5:c1:b4:c2:db:cb:e6:47:
40:05:0c:1b:a1:5c:33:5e:5f:61:99:c2:6a:c2:60:
8c:35:fd:bc:58:e6:ff:87:99:e3:f2:eb:64:f3:6b:
35:2b:06:bb:8a:db:7d:94:7a:ee:c9:73:3c:f0:23:
a0:2e:3e:d2:a4:1c:8a:7a:0e:13:bb:1a:82:3f:7d:
4e:b1:10:ce:5c:93:2d:66:a4:9d:66:9a:4d:21:c8:
0f:0b:af:40:73:11:11:06:39:f7:6c:b4:59:af:3f:
58:07:aa:a9:f4:c0:f4:44:ff:6d:60:38:dc:27:9b:
94:6e:f4:9a:61:dd:6c:2f:cd:0b:f1:5a:27:0c:50:
20:7e:19:91:8b:dc:57:d5:b0:68:46:1d:76:88:6c:
02:03:67:8c:ae:6c:74:fa:e5:71:bb:2b:09:3d:bf:
23:9e:e0:6e:83:88:f2:3b:15:6c:d4:f0:5a:86:c4:
42:ba:12:03:09:c7:97:52:d4:d7:db:5e:9f:e2:aa:
77:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E9:15:08:9D:A7:1B:EF:F2:91:7D:82:9C:DB:11:4D:FC:1E:28:03
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:05:42:e8:9e:89:c3:75:1c:5f:8b:c3:c3:6f:be:e1:f2:f1:
a2:1b:1b:75:0d:7d:02:e1:8a:a2:c2:4e:1b:c3:40:de:ee:f0:
0d:53:ea:0c:75:a8:0b:1a:e8:d7:41:e5:9e:9b:75:7c:e8:d6:
90:86:5a:60:15:eb:4e:90:14:b7:e6:92:38:29:57:4e:37:e1:
a2:2d:f6:a2:b1:9e:92:6d:b4:12:74:5a:a6:42:94:51:d2:f0:
a5:cc:dd:17:f8:4b:eb:3c:eb:1e:9d:30:2f:69:69:5d:e1:40:
ae:7f:c3:ad:23:b6:7f:7c:90:2a:8d:32:7e:d1:b2:eb:9d:24:
eb:0c:eb:e1:3c:70:01:49:2b:83:b2:1d:17:52:26:04:9a:3d:
f8:78:7f:03:38:1b:c3:30:85:96:9b:00:86:6a:b3:ee:83:e0:
28:24:61:42:e5:30:b9:61:67:2c:f6:ab:6d:5d:1d:a1:c0:11:
6c:22:2f:26:2e:8b:8b:da:95:20:f1:6c:bd:1e:05:84:e1:6f:
fd:8d:e6:b8:21:5e:30:f8:25:45:20:1b:96:25:5e:5c:7c:91:
c2:96:9a:09:51:20:40:a6:f6:08:0f:6c:4b:b4:ba:81:97:23:
d1:e2:08:a7:29:8f:f5:86:ef:fa:ac:ad:a4:1c:a2:fd:a9:c6:
3c:9e:44:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:50 2026 by rpki-client