Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File: v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier: ypN+SVKlWPzCQZWCbjrEj4Zcj/2RKoeNBXPQTG/jH0I=
Subject key identifier: AA:E8:DC:82:24:0A:6F:95:81:E6:E8:92:43:67:33:8B:B0:87:DB:29
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 01A1005A637D9B47C25771DFA8854B42AA35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number: 0F34
Signing time: Sat 03 Oct 2026 06:01:26 +0000
Manifest this update: Sat 03 Oct 2026 06:01:26 +0000
Manifest next update: Sun 04 Oct 2026 06:01:26 +0000
Files and hashes: 1: 5qCGbZj0fFzeN9z8gSaICT7yMA8.roa (hash: G66CwDSwPZ1mdj+oT5dw0nJbDcfnWDDiijDE5PcBGVI=)
2: W6VRxWMjY9RGYyNWUZ2Zrt5iGrQ.roa (hash: yDioc2gm4HKxpifXJms6Im9q4otOwWsYrylm+7dKp/8=)
3: Xts4DhBp7ZAXfoRbGSvo9y0epuw.roa (hash: +l+O+f+RgDS0P2v4v/Eiuo9qo0STO/EOfvPlMPBfz4M=)
4: ba0ulzzlxoKj7mmyIENd0mKkNQw.roa (hash: p7fb2fAb3ItubjjP5l3VBGCbn7g/XTc7585asMeO0R0=)
5: c5q6TPwm54z2LvrJGvcWXn2lLuc.roa (hash: PfHyIuw7JwnsE13vLHW24JJ5nVp6Ybi/KbqXWAmiqzc=)
6: ck5nzW7UcSxKWzHP2H-a3ylVN5E.roa (hash: OEda1WOM4ctfo76KkiHy1LOUWsgAZX7lWi/0FxF3rRA=)
7: dPJN6UsUvoT-CwaD6I6GCSDt2l8.roa (hash: Lm0/M7odPEdXSXGeFcgguujGj4w0jC2wgnprNlK79t8=)
8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: lmiIdvCBXCCuk7dsdEfkEJs8e7ZqbR63YlOVW3abcno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:5a:63:7d:9b:47:c2:57:71:df:a8:85:4b:42:aa:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Oct 3 06:01:26 2026 GMT
Not After : Oct 4 06:01:26 2026 GMT
Subject: CN=aae8dc82240a6f9581e6e8924367338bb087db29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c7:05:80:64:ed:36:4a:a3:b4:d2:5b:d4:07:
90:f3:2e:79:43:f9:f2:69:4d:09:7c:22:08:70:d7:
28:c2:fe:f3:bf:ed:65:0f:18:1b:44:b5:a2:7b:1d:
8c:02:83:f5:ab:a2:b1:29:73:47:42:6e:5f:37:49:
2a:c6:c2:b3:21:d4:fa:0d:a6:5e:6c:b3:90:04:a9:
21:55:43:a4:1c:17:76:ad:a1:4a:97:48:17:40:3a:
e6:2d:02:14:e9:ad:95:9e:27:d9:6c:31:cc:a5:4a:
e7:9e:8d:8a:18:ab:83:1c:51:27:15:59:89:a7:9d:
1a:ff:09:35:e4:0e:19:20:e1:a8:42:a4:48:4d:3e:
09:9d:b0:16:ac:8d:44:b4:76:a3:dd:c4:87:19:a9:
4c:9d:60:6b:93:43:45:d7:ee:08:af:7f:2c:e4:96:
b0:ec:85:68:6f:68:57:74:e0:44:1a:8f:34:5a:67:
a3:81:cb:a0:70:a3:09:df:94:80:23:08:78:34:56:
b9:95:66:33:15:48:a5:e2:c6:13:f4:ff:31:0c:11:
73:1c:c7:d9:10:83:3b:15:51:02:69:72:74:86:5c:
55:89:55:bd:06:f1:8e:19:d7:a9:67:6c:4b:7b:5b:
ed:44:82:61:e8:b2:ad:96:d2:ce:b3:70:b5:30:6c:
9a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E8:DC:82:24:0A:6F:95:81:E6:E8:92:43:67:33:8B:B0:87:DB:29
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2c:22:e4:47:f9:18:dd:af:b0:37:f8:87:2c:d4:24:01:ee:
dd:dc:54:ff:25:38:56:21:77:23:47:78:e2:27:2b:a3:79:3b:
33:da:78:4f:e2:4c:eb:85:73:42:4f:0a:90:1b:ed:fb:d5:1f:
44:1a:bb:ec:a7:c7:b0:5b:53:41:ff:0f:31:b1:57:e0:06:73:
7d:dd:80:77:6a:a1:9d:b7:df:68:b5:29:3e:0a:17:b6:6e:52:
99:68:64:14:51:69:3b:a5:a4:b7:48:26:4f:3c:66:f1:35:95:
86:82:ba:b8:52:28:2a:8c:ad:ec:87:ab:e4:53:1c:f0:12:ff:
c6:0b:bf:be:6f:6f:06:d4:63:7f:2b:79:5b:7f:c4:4d:1b:bd:
1a:1d:f5:cc:68:3d:31:9a:1d:45:98:77:e4:d5:a3:49:cf:1f:
ec:ea:76:02:1c:f8:5b:82:fd:ac:18:b6:71:57:f5:d6:8e:45:
48:fd:05:88:d9:c5:bf:36:80:0f:4d:22:e2:03:52:7e:48:8b:
db:ad:4c:17:fc:9a:36:6a:1d:be:28:72:d7:61:7e:ec:32:23:
00:b3:92:de:6a:e5:89:b0:67:3c:69:2f:13:19:29:e4:cf:30:
05:e6:35:bf:b7:c2:0d:7a:0c:3c:8f:5d:43:d0:a7:66:f6:b1:
f2:53:43:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:19:51 2026 by rpki-client