Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: xyhIVSBH7X264pxpGkAVN/ovFnIjvc9SzECweF9Be70=
Subject key identifier: D6:ED:65:17:47:E2:E1:5A:04:A2:E5:9C:34:75:A5:52:43:69:8E:FB
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 019FA8D0854EEE55B6DF36011EF3B38FF387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 13:01:05 +0000
Manifest this update: Tue 28 Jul 2026 13:01:05 +0000
Manifest next update: Wed 29 Jul 2026 13:01:05 +0000
Files and hashes: 1: 1-OuWPae2QmllBKFyaudDbNphGTc.roa (hash: TeZRPwnS84XUZCjrREzBGuK8EpeGGUaXoq1j2Y/fQSQ=)
2: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: 7+asItOVLncbMK/s9Z6Ydcp4BbC31kSRd3Nln5QMuhU=)
3: egw9QX1Wt4p34wD72nrev9Z3xNY.roa (hash: nskdvkCOlHahXUYLR2CJrMUSg+SVahy3tOlmXUVE40k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:85:4e:ee:55:b6:df:36:01:1e:f3:b3:8f:f3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Jul 28 13:01:05 2026 GMT
Not After : Jul 29 13:01:05 2026 GMT
Subject: CN=d6ed651747e2e15a04a2e59c3475a55243698efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:96:b9:89:79:5f:78:da:4c:26:ad:db:ab:49:
8c:95:34:fc:94:6a:2b:f9:9c:f8:d6:44:26:c7:62:
0d:f8:35:f7:ac:1b:2a:1a:7a:66:87:de:51:a6:60:
7c:77:67:75:fb:72:78:85:ea:f7:71:3d:e3:af:c3:
94:d1:86:fd:7e:f5:fc:34:a2:c3:1c:3a:d5:ff:b7:
1e:e2:dd:00:91:86:31:1c:11:83:ee:62:af:9a:72:
dc:48:88:50:b7:14:81:2a:68:40:64:44:2e:13:74:
6f:51:de:ff:0f:8c:f0:e1:87:fe:a5:98:a5:5d:b9:
82:b9:6f:e5:fa:8d:bc:c1:14:16:0c:8e:2c:16:5b:
7e:93:6f:ea:d3:6f:86:38:8d:a4:7b:8e:de:5b:5b:
a9:2b:47:64:ce:3a:65:d7:9c:59:7a:ef:87:75:ee:
a1:b4:0a:f4:82:7b:62:bd:bb:d1:bf:ae:03:45:79:
04:88:30:cb:92:84:c8:d7:41:98:f7:50:8c:da:67:
8a:1b:2a:62:75:ff:3d:87:7b:df:bd:69:93:57:bd:
a1:a2:3a:55:67:c7:19:a0:91:01:4e:26:57:a7:f5:
54:48:5d:47:6b:d8:11:ea:bd:19:35:1d:a2:05:d2:
e3:27:ef:4e:24:9e:fc:a9:39:67:0a:31:b8:9c:b5:
03:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:ED:65:17:47:E2:E1:5A:04:A2:E5:9C:34:75:A5:52:43:69:8E:FB
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:37:a7:3b:d8:f0:38:ff:35:6a:8a:8b:0b:24:df:3a:2f:5c:
43:9d:53:8b:38:a0:1f:71:6d:a6:71:e4:7b:bf:06:e4:c1:04:
fc:24:a6:48:a1:5d:bf:7c:4b:64:8e:3a:8e:72:13:f9:15:d4:
e4:53:8c:c7:a3:41:5f:60:5c:af:21:69:1b:6a:16:6a:72:27:
33:79:f2:a1:05:fa:72:77:de:ed:0e:ef:7d:f5:12:24:e7:fc:
7a:44:d3:3d:51:7e:52:41:b8:a0:58:7e:53:1e:f9:43:3b:8f:
75:ea:00:4d:5b:3b:c2:f4:d6:4d:32:a3:a2:b8:11:cc:1c:89:
12:03:fd:5f:12:ba:33:da:26:14:f4:3d:47:43:69:67:6b:00:
6a:26:6e:58:4f:3c:1a:97:2e:87:5b:16:0b:fb:b6:35:80:3b:
dd:51:95:03:5c:ca:5f:40:6c:65:67:83:ad:7d:66:0d:fe:7d:
90:fe:68:b0:dc:df:62:7a:64:66:29:1b:7d:2c:49:4c:93:90:
1b:b2:1a:86:a0:b3:d4:ac:86:21:2c:2f:b4:f9:bf:9d:90:e9:
9f:de:00:6f:ca:ab:42:7f:93:4a:39:fc:99:00:0f:43:75:3d:
43:de:04:7d:61:4d:83:cd:0c:7d:db:0d:16:34:13:ac:00:52:
7d:05:a6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:49 2026 by rpki-client