Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: /RYzgmybnGVioTa5J9B27P+Cta4NEwxyZxdo7igKDcw=
Subject key identifier: 95:ED:A1:57:44:DA:6E:C1:2C:90:34:47:BC:DB:C9:AB:EB:1C:F6:5E
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 019D99997C7C9F55A05E5FDA3EA86F1A10F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 04:01:06 +0000
Manifest this update: Fri 17 Apr 2026 04:01:06 +0000
Manifest next update: Sat 18 Apr 2026 04:01:06 +0000
Files and hashes: 1: 1-OuWPae2QmllBKFyaudDbNphGTc.roa (hash: TeZRPwnS84XUZCjrREzBGuK8EpeGGUaXoq1j2Y/fQSQ=)
2: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: EVlX+qZh48GR34oIGvM5r0f7DnUYP1syLjN06tJFSUc=)
3: egw9QX1Wt4p34wD72nrev9Z3xNY.roa (hash: nskdvkCOlHahXUYLR2CJrMUSg+SVahy3tOlmXUVE40k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:7c:7c:9f:55:a0:5e:5f:da:3e:a8:6f:1a:10:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Apr 17 04:01:06 2026 GMT
Not After : Apr 18 04:01:06 2026 GMT
Subject: CN=95eda15744da6ec12c903447bcdbc9abeb1cf65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a8:99:58:33:67:14:b6:1b:bf:57:d9:80:3b:
35:d2:4e:c3:bc:e4:9c:0e:37:04:96:7c:31:0b:de:
f8:11:2b:35:66:1f:d6:25:65:02:49:9d:cf:b9:c7:
58:43:2a:87:b4:1d:fc:f4:94:79:4f:07:1f:05:95:
08:5b:c9:48:70:93:2a:fa:3d:87:2f:7d:19:01:93:
1c:f7:0e:64:11:39:70:10:0e:2f:5e:15:db:6a:71:
40:40:88:a3:f8:a9:e9:79:0b:72:46:fa:39:39:0a:
a2:bd:dc:70:b8:59:23:a3:3d:2d:59:e6:0d:81:f0:
16:d9:6f:f6:17:c4:76:e4:54:cf:69:f5:82:0d:bc:
cd:ef:55:31:10:d3:c9:91:10:c8:36:b2:cc:f8:74:
f3:2b:2d:5a:44:af:69:9d:b4:f7:9e:b9:17:3f:13:
23:05:5e:9b:1a:1f:b7:0b:78:4d:e4:fa:8b:f1:5c:
ac:09:78:e3:6b:2e:30:af:48:ad:d6:44:be:c3:47:
f3:99:2b:4b:ec:be:2d:18:d1:25:49:ac:ea:cc:2a:
a0:82:51:25:bd:f4:f3:c1:c5:cb:6a:f2:03:1f:33:
27:be:9b:64:05:11:ad:64:aa:e5:d5:5d:9d:f1:37:
25:51:8d:17:97:5d:9e:c4:73:a1:1e:b4:4b:b7:e5:
b6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:ED:A1:57:44:DA:6E:C1:2C:90:34:47:BC:DB:C9:AB:EB:1C:F6:5E
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b3:ce:a6:f3:b5:16:25:1c:c0:14:27:2d:ff:4c:bc:88:3e:
b0:88:c3:6c:22:ab:ca:21:b0:fa:bd:73:ed:fa:2c:25:fe:3e:
18:ad:6b:39:14:0a:59:f8:33:b7:7c:2d:67:45:d1:11:f1:0f:
bf:91:9f:53:02:e6:ea:ed:59:4b:5a:13:ee:8b:4b:a3:53:d5:
22:62:29:a4:bc:5f:81:c8:d2:2c:e6:cc:76:82:d6:e3:69:c1:
b1:0b:a3:4a:f6:ca:53:36:bd:1d:65:ad:0a:e1:c6:2a:82:04:
de:30:19:32:c9:90:ed:84:84:c5:fe:be:94:c7:91:ce:aa:d8:
79:0d:3f:b2:1d:0f:fe:f0:3c:1b:8a:c5:4b:54:2a:78:51:68:
79:3d:44:a6:ff:b8:69:72:56:20:3d:3d:21:83:46:d0:35:b8:
f6:c9:16:31:a5:4f:68:69:db:f5:09:d6:8c:b5:f0:2e:38:48:
2a:34:96:03:4d:a2:91:6c:62:a3:14:d6:cc:07:12:73:5a:a5:
31:94:55:2f:43:b2:16:f6:17:bb:ef:2c:d1:cc:c8:a8:f1:67:
65:77:6f:2f:3e:92:81:39:3d:64:30:77:28:96:3f:ed:6e:0e:
7f:5b:51:8a:d7:9a:f1:05:f0:72:81:af:c1:e9:e4:f7:10:58:
45:a2:d7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:14 2026 by rpki-client