Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: FdtSQeoc1yzeG9ghnmEH4CvFGvJbdTSnz7UJ03PDx7o=
Subject key identifier: CF:82:27:CE:A4:12:82:41:FF:5D:5D:31:CE:0A:F7:1B:36:BC:C6:21
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 019CAC1042F2C65E52A2F0DC5F8B1658155D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 01:01:12 +0000
Manifest this update: Mon 02 Mar 2026 01:01:12 +0000
Manifest next update: Tue 03 Mar 2026 01:01:12 +0000
Files and hashes: 1: 1-OuWPae2QmllBKFyaudDbNphGTc.roa (hash: TeZRPwnS84XUZCjrREzBGuK8EpeGGUaXoq1j2Y/fQSQ=)
2: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: /m7w6YbOJ84nDl9+xvSiP+284Haj0EYf2sPou+RIn2w=)
3: egw9QX1Wt4p34wD72nrev9Z3xNY.roa (hash: nskdvkCOlHahXUYLR2CJrMUSg+SVahy3tOlmXUVE40k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:42:f2:c6:5e:52:a2:f0:dc:5f:8b:16:58:15:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Mar 2 01:01:12 2026 GMT
Not After : Mar 3 01:01:12 2026 GMT
Subject: CN=cf8227cea4128241ff5d5d31ce0af71b36bcc621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:8b:3e:21:74:f5:3d:f1:db:27:0f:d0:99:
37:2c:d3:09:8d:3c:5d:b4:83:c4:9e:da:02:79:c9:
55:b6:60:9f:08:f4:fa:25:05:14:27:f8:2b:f5:ce:
75:0f:58:98:03:8f:aa:93:85:b1:5a:5c:13:7c:e1:
2b:f3:3b:ff:f9:4b:37:64:10:d9:c8:1b:4d:6a:7f:
f2:ff:26:a7:83:2c:8d:91:e3:f3:e4:17:c2:df:3d:
4d:7c:b7:34:6d:c5:4d:72:65:6d:8e:95:fe:89:ee:
a8:b2:28:32:17:66:61:75:4a:b3:4c:a1:5b:0b:84:
a5:d8:02:ff:a3:76:98:a3:66:75:53:f9:db:f5:7a:
14:de:0d:32:56:ae:c7:91:31:3e:94:9d:85:2b:f2:
af:6b:2b:e4:46:79:20:27:d5:c2:0d:0c:98:b1:c9:
e5:70:5d:df:20:e9:7b:bf:64:46:d1:b7:68:4c:f4:
21:a1:df:84:23:f4:88:6a:fb:83:ce:ec:79:98:10:
70:aa:14:ed:ee:3a:0a:e7:64:1f:88:2a:04:c2:0c:
7a:61:8b:64:59:38:7e:89:9b:51:43:34:a3:a2:0e:
fd:05:7e:49:cb:eb:09:29:06:a7:66:4e:29:3a:e2:
05:f3:2a:d9:07:8e:7d:2e:2e:df:bb:f2:14:5d:13:
5e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:82:27:CE:A4:12:82:41:FF:5D:5D:31:CE:0A:F7:1B:36:BC:C6:21
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4c:f3:e1:ba:37:0b:d0:69:c2:f9:10:d1:5b:76:d0:5d:33:
44:09:2c:1b:03:09:50:6d:d6:24:7b:e5:a2:63:83:fb:ea:c7:
51:46:11:e9:29:00:2b:b1:a8:bc:09:07:68:59:f0:d8:93:64:
27:18:78:e5:05:4c:9b:b2:33:96:bd:ea:a2:07:4a:8e:fb:79:
89:1c:a6:4a:3f:f1:01:5f:1a:51:ba:86:89:80:b8:a8:e2:ef:
79:a5:a1:a3:33:d8:ee:81:9b:be:df:af:10:fd:84:57:b9:d3:
64:5b:f7:1e:e7:b6:ef:bf:3a:9a:7a:47:84:12:a2:c3:82:7b:
fe:47:13:00:1c:1d:11:a6:e3:25:69:6f:b1:7d:d2:a8:88:56:
af:65:56:4e:1a:1f:49:d6:d9:2c:fe:08:a6:52:3c:b8:e9:fa:
48:6c:2e:3a:63:ed:00:ba:4e:01:e3:2a:18:9a:b9:e2:24:1c:
0a:1d:52:90:70:f3:41:24:30:23:91:e5:9c:44:c4:21:0e:3f:
d7:d2:5b:29:cd:ff:3c:b3:bb:1c:a1:92:45:06:11:93:4d:52:
f2:41:07:f9:2c:3f:c7:68:cc:ab:b9:11:0e:6d:f1:03:de:61:
0a:15:a6:70:cc:d2:35:58:7b:05:30:c7:44:ad:b0:b1:e5:ac:
e1:c1:e9:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEELyxl5SovDcX4sWWBVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZjU0YmUxYjVlZDVmZDU5MmZhY2E0NjhkZjExMTAwOTVm
M2VhMGEwHhcNMjYwMzAyMDEwMTEyWhcNMjYwMzAzMDEwMTEyWjAzMTEwLwYDVQQD
EyhjZjgyMjdjZWE0MTI4MjQxZmY1ZDVkMzFjZTBhZjcxYjM2YmNjNjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYOLPiF09T3x2ycP0Jk3LNMJjTxd
tIPEntoCeclVtmCfCPT6JQUUJ/gr9c51D1iYA4+qk4WxWlwTfOEr8zv/+Us3ZBDZ
yBtNan/y/yangyyNkePz5BfC3z1NfLc0bcVNcmVtjpX+ie6osigyF2ZhdUqzTKFb
C4Sl2AL/o3aYo2Z1U/nb9XoU3g0yVq7HkTE+lJ2FK/KvayvkRnkgJ9XCDQyYscnl
cF3fIOl7v2RG0bdoTPQhod+EI/SIavuDzux5mBBwqhTt7joK52QfiCoEwgx6YYtk
WTh+iZtRQzSjog79BX5Jy+sJKQanZk4pOuIF8yrZB459Li7fu/IUXRNeiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+CJ86kEoJB/11dMc4K9xs2vMYhMB8GA1UdIwQY
MBaAFO31S+G17V/VkvrKRo3xEQCV8+oKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUt
OWU2MTRmNDQ2NmM1LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUtOWU2MTRmNDQ2NmM1
LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEzz4bo3
C9BpwvkQ0Vt20F0zRAksGwMJUG3WJHvlomOD++rHUUYR6SkAK7GovAkHaFnw2JNk
Jxh45QVMm7Izlr3qogdKjvt5iRymSj/xAV8aUbqGiYC4qOLveaWhozPY7oGbvt+v
EP2EV7nTZFv3Hue27786mnpHhBKiw4J7/kcTABwdEabjJWlvsX3SqIhWr2VWThof
SdbZLP4IplI8uOn6SGwuOmPtALpOAeMqGJq54iQcCh1SkHDzQSQwI5HlnETEIQ4/
19JbKc3/PLO7HKGSRQYRk01S8kEH+Sw/x2jMq7kRDm3xA95hChWmcMzSNVh7BTDH
RK2wseWs4cHpPA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:46 2026 by rpki-client