
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: e/Bw0OvH94nniiAR75u7bAaUqC4Qvt0ChuFSiGUv5LQ=
Subject key identifier: B8:FA:78:81:38:F1:12:6B:86:8B:57:6D:07:A2:AE:76:93:1D:49:C7
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 019EBF23B90A719A21A03E2A5B7950AEFD68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 04:00:49 +0000
Manifest this update: Sat 13 Jun 2026 04:00:49 +0000
Manifest next update: Sun 14 Jun 2026 04:00:49 +0000
Files and hashes: 1: 1-OuWPae2QmllBKFyaudDbNphGTc.roa (hash: TeZRPwnS84XUZCjrREzBGuK8EpeGGUaXoq1j2Y/fQSQ=)
2: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: 5B5JyaftxRX9rLNcOw+oO2npGF/wPe2K7ElEWfdi0N4=)
3: egw9QX1Wt4p34wD72nrev9Z3xNY.roa (hash: nskdvkCOlHahXUYLR2CJrMUSg+SVahy3tOlmXUVE40k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:b9:0a:71:9a:21:a0:3e:2a:5b:79:50:ae:fd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Jun 13 04:00:49 2026 GMT
Not After : Jun 14 04:00:49 2026 GMT
Subject: CN=b8fa788138f1126b868b576d07a2ae76931d49c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9b:70:bd:66:0d:a3:21:2c:a5:18:ab:90:8e:
79:70:50:d4:97:92:9f:2c:e4:99:41:58:11:4c:f5:
c5:96:e8:e4:3c:7a:93:80:0c:06:d2:6f:cb:ea:49:
ce:4d:31:02:c5:60:b1:65:78:1a:86:25:f2:9f:7d:
f1:da:10:f7:b5:f9:ba:b5:d8:9d:94:9e:9a:9d:45:
75:51:3d:8f:53:fc:37:c5:a3:03:12:08:09:e4:9e:
74:ea:a7:fa:96:36:8e:f3:8a:b2:61:8c:2a:c0:36:
8f:c9:26:55:5d:a2:82:ff:c2:ee:30:2d:da:ab:25:
06:ad:3d:3b:dd:d5:80:f0:bb:79:46:c9:c0:fa:b8:
11:83:15:bd:a6:84:44:c4:94:d9:10:84:50:42:4a:
dd:1e:19:6d:7f:b8:11:7c:1b:45:73:b8:6e:40:e3:
80:c7:c4:47:de:fd:5d:ab:be:d8:b9:31:bf:8e:8d:
fa:27:58:b8:50:90:08:c5:b3:17:80:db:cb:fd:4a:
f9:26:2a:bc:f5:5c:f3:22:93:53:48:3b:09:e0:e0:
0a:d8:d4:18:26:84:04:19:85:86:44:40:7e:c5:68:
f2:c8:1c:47:b1:71:7c:c8:82:c7:87:66:51:fd:bd:
9f:fe:6f:c5:96:a2:cf:3a:3a:d5:2a:9e:88:42:1b:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FA:78:81:38:F1:12:6B:86:8B:57:6D:07:A2:AE:76:93:1D:49:C7
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:57:69:e4:85:43:31:78:a4:c9:e1:06:df:d8:14:3a:59:1a:
0f:79:9e:d6:f2:3c:8c:21:9a:23:14:47:a5:c9:25:aa:bc:48:
c5:bb:7c:66:d7:62:0d:20:62:08:32:48:85:7a:2f:62:6e:46:
1d:c1:37:70:4a:11:7e:74:80:48:a5:1c:e6:cb:24:3b:a2:dd:
c0:db:d2:4a:b1:8b:5c:14:52:ff:d4:c6:f4:33:ab:2b:7f:79:
72:d1:73:4d:75:af:95:61:62:68:63:ed:c3:e2:10:b4:83:5b:
9d:26:42:78:c0:05:12:88:ca:3b:7e:f6:8f:e8:de:31:4d:6b:
53:40:d0:92:90:3d:a9:3f:66:b5:54:1f:60:f0:34:15:72:c4:
91:b3:ed:96:58:ea:af:19:0e:56:60:d2:ef:39:49:f9:85:d0:
54:1b:02:c9:f7:a8:b4:a8:ca:a9:88:90:e8:95:e0:71:ff:25:
ed:8c:53:fa:14:e5:51:ae:9e:3f:c0:8d:25:67:d1:59:bf:22:
4c:7b:08:ff:79:b2:9f:69:43:02:4c:6f:4b:b8:61:3d:01:4b:
a0:c5:8d:56:53:8a:bd:ce:38:b5:db:17:5b:ec:bd:f9:2f:10:
ea:ed:d4:c8:98:72:d1:13:78:5d:1a:8a:4a:ac:29:7c:6b:c4:
26:1b:63:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:18:45 2026 by rpki-client