Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: 5tOam26UZnm+or5gqC68cyWtFtmfwZgEjFLnItsxLJA=
Subject key identifier: 29:F2:1D:BA:B8:5C:66:81:CB:9B:B6:CC:3E:D2:D5:EC:13:9B:26:EE
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 01A0C0D5EAB9ED1B15E3425C20E0DE7A5C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 1A63
Signing time: Sun 20 Sep 2026 22:00:39 +0000
Manifest this update: Sun 20 Sep 2026 22:00:39 +0000
Manifest next update: Mon 21 Sep 2026 22:00:39 +0000
Files and hashes: 1: 1-OuWPae2QmllBKFyaudDbNphGTc.roa (hash: TeZRPwnS84XUZCjrREzBGuK8EpeGGUaXoq1j2Y/fQSQ=)
2: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: LE+0AAr3RHrU1c567VOuRNmoDMdEyKfT7ITm8vPtF28=)
3: egw9QX1Wt4p34wD72nrev9Z3xNY.roa (hash: nskdvkCOlHahXUYLR2CJrMUSg+SVahy3tOlmXUVE40k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:d5:ea:b9:ed:1b:15:e3:42:5c:20:e0:de:7a:5c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Sep 20 22:00:39 2026 GMT
Not After : Sep 21 22:00:39 2026 GMT
Subject: CN=29f21dbab85c6681cb9bb6cc3ed2d5ec139b26ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9b:b2:d3:ac:39:1d:6a:44:16:8a:7c:55:b8:
7a:1c:a5:39:4f:2f:52:f9:fc:84:54:2a:fb:55:af:
08:22:b0:d7:12:54:c5:62:e0:c5:0d:fd:4d:55:b6:
4e:6c:f9:3d:de:57:25:35:7a:1d:41:cc:dd:76:35:
ff:76:8a:6f:b9:a6:62:68:af:6e:80:63:d2:a2:19:
b9:a8:c9:0c:54:ed:56:f4:10:b3:80:f8:b4:a8:2f:
f5:a9:54:11:b0:7f:32:c9:14:34:76:fa:15:10:cd:
42:14:1f:8a:57:ac:00:f8:4c:2e:d4:cc:a8:6c:53:
04:bb:0a:33:e5:02:1c:1c:35:b1:7c:6a:a5:1e:64:
0c:2c:4b:cf:49:1d:f1:55:f3:7d:19:5a:74:e0:d6:
0b:a3:22:88:18:35:51:18:f0:86:db:96:6e:63:40:
99:d8:76:40:81:a4:ee:c3:67:10:17:52:1d:90:f2:
7d:37:42:a4:02:ac:13:4c:31:90:e0:ef:3c:38:d0:
cc:78:2d:f9:89:06:6b:c8:21:13:ab:89:1d:76:7f:
26:59:ad:16:f6:47:bf:1b:dd:7d:23:35:97:bc:b0:
80:2d:f9:b3:d4:dd:0d:bf:74:67:f9:7f:a5:f7:3d:
f3:cb:dd:67:28:0a:75:1a:fc:df:18:e8:57:4c:4f:
d3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F2:1D:BA:B8:5C:66:81:CB:9B:B6:CC:3E:D2:D5:EC:13:9B:26:EE
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c1:1b:95:9d:1f:2a:ba:9d:19:7a:25:08:e8:ef:02:b8:f7:
b1:9b:ac:a0:2e:ab:a5:e6:e0:a6:f4:b3:0f:88:30:5b:d2:82:
e1:91:f2:51:14:c7:08:15:71:cd:f7:f7:0a:d1:2f:15:7f:47:
bd:8a:a6:df:3c:c1:88:ef:1b:3d:7c:22:b1:15:50:9f:66:39:
7e:54:f0:6e:ec:b6:38:25:a8:b3:5d:4f:fd:39:6a:15:14:71:
9f:4e:bc:14:c3:fc:a6:d3:b0:11:a7:d4:8a:b9:4e:34:3e:8f:
dd:bc:be:bb:a2:91:da:bd:e6:12:2d:de:30:72:83:0c:30:d0:
57:fe:a1:27:e9:34:bb:fe:8d:65:d7:6d:25:02:a0:f6:8b:18:
92:cd:27:c3:44:3f:9b:2b:03:40:ac:d8:e9:58:21:60:6f:21:
2b:77:c3:f0:11:a9:ec:ce:fa:02:7a:14:40:7b:35:17:9c:2c:
c8:c5:52:c4:26:57:6e:90:51:e5:84:04:3a:40:95:60:94:44:
b4:1d:8b:1c:83:66:6c:35:8c:30:ee:dd:85:6f:e1:5c:e1:c6:
e7:89:40:2f:16:ef:66:6f:79:7c:75:13:43:eb:d2:48:49:a6:
32:51:69:a9:99:34:74:55:83:79:1f:ce:41:d0:4a:02:d9:b9:
b5:5c:f9:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDA1eq57RsV40JcIODeelwmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZjU0YmUxYjVlZDVmZDU5MmZhY2E0NjhkZjExMTAwOTVm
M2VhMGEwHhcNMjYwOTIwMjIwMDM5WhcNMjYwOTIxMjIwMDM5WjAzMTEwLwYDVQQD
EygyOWYyMWRiYWI4NWM2NjgxY2I5YmI2Y2MzZWQyZDVlYzEzOWIyNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZuy06w5HWpEFop8Vbh6HKU5Ty9S
+fyEVCr7Va8IIrDXElTFYuDFDf1NVbZObPk93lclNXodQczddjX/dopvuaZiaK9u
gGPSohm5qMkMVO1W9BCzgPi0qC/1qVQRsH8yyRQ0dvoVEM1CFB+KV6wA+Ewu1Myo
bFMEuwoz5QIcHDWxfGqlHmQMLEvPSR3xVfN9GVp04NYLoyKIGDVRGPCG25ZuY0CZ
2HZAgaTuw2cQF1IdkPJ9N0KkAqwTTDGQ4O88ONDMeC35iQZryCETq4kddn8mWa0W
9ke/G919IzWXvLCALfmz1N0Nv3Rn+X+l9z3zy91nKAp1GvzfGOhXTE/TOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnyHbq4XGaBy5u2zD7S1ewTmybuMB8GA1UdIwQY
MBaAFO31S+G17V/VkvrKRo3xEQCV8+oKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUt
OWU2MTRmNDQ2NmM1LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUtOWU2MTRmNDQ2NmM1
LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8EblZ0f
KrqdGXolCOjvArj3sZusoC6rpebgpvSzD4gwW9KC4ZHyURTHCBVxzff3CtEvFX9H
vYqm3zzBiO8bPXwisRVQn2Y5flTwbuy2OCWos11P/TlqFRRxn068FMP8ptOwEafU
irlOND6P3by+u6KR2r3mEi3eMHKDDDDQV/6hJ+k0u/6NZddtJQKg9osYks0nw0Q/
mysDQKzY6VghYG8hK3fD8BGp7M76AnoUQHs1F5wsyMVSxCZXbpBR5YQEOkCVYJRE
tB2LHINmbDWMMO7dhW/hXOHG54lALxbvZm95fHUTQ+vSSEmmMlFpqZk0dFWDeR/O
QdBKAtm5tVz5TA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:05:18 2026 by rpki-client