Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
File: vP7i_2ht6InD9Y3x2fXit41kHeQ.mft (raw, json)
Hash identifier: ZNN4yQPk/llnZuLVOTLzNHGq4NLJTiu+e8IDj2hoHNk=
Subject key identifier: F1:A1:CD:71:35:72:FF:DA:09:A1:D2:4F:F3:59:EB:6E:4B:9F:90:FA
Authority key identifier: BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4
Certificate issuer: /CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4
Certificate serial: 019D99CFEB96B5C221BDA5E73E23481D88E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
Manifest number: 07A5
Signing time: Fri 17 Apr 2026 05:00:33 +0000
Manifest this update: Fri 17 Apr 2026 05:00:33 +0000
Manifest next update: Sat 18 Apr 2026 05:00:33 +0000
Files and hashes: 1: 5trZT8H8b8qEyleVSfGYnOWywrY.roa (hash: eOu11Ek0FyJBzZ2HRO2uveVNcG5F2I/J6cQ5U17P66g=)
2: vP7i_2ht6InD9Y3x2fXit41kHeQ.crl (hash: N+DDllONBSAbFpveSL8V+K/jLpxG2Qj9jHJt1Y/7WGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:eb:96:b5:c2:21:bd:a5:e7:3e:23:48:1d:88:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4
Validity
Not Before: Apr 17 05:00:33 2026 GMT
Not After : Apr 18 05:00:33 2026 GMT
Subject: CN=f1a1cd713572ffda09a1d24ff359eb6e4b9f90fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:a9:14:be:00:dd:b9:6b:2c:29:e8:9e:74:
51:07:68:1b:95:25:6e:12:aa:67:eb:db:dc:81:5f:
95:c4:8d:70:5c:f3:37:42:59:b7:53:c9:a1:2e:b5:
07:65:f7:3b:b1:8d:d0:57:39:8e:0f:f9:91:50:90:
77:54:76:3d:a1:4f:8f:79:7f:93:82:42:bd:fc:4c:
be:dc:d4:70:af:a0:28:b9:28:1c:f7:39:d3:53:6c:
09:43:39:8e:9e:2f:a8:93:f9:2c:c7:be:1c:ee:c2:
c1:86:09:44:a7:04:4b:fe:23:9a:2a:5e:30:de:b5:
39:9a:22:bb:d4:5b:6b:d1:ed:03:ab:76:d0:01:40:
f4:54:7c:b5:3b:fe:53:d4:27:c1:f9:65:e4:d0:8b:
2e:ac:92:d1:43:a2:61:0a:7a:de:1d:de:49:29:f8:
4d:ee:d2:b1:1e:d5:2d:c0:1e:ff:7e:55:ad:11:87:
61:c3:32:b0:cd:1b:96:4a:43:e7:c3:00:cf:8c:7f:
24:1c:69:62:38:f9:79:34:17:0b:84:1b:85:8a:66:
dc:8c:83:8f:7a:c6:af:f6:47:1c:88:19:60:86:9f:
7d:8a:35:43:53:d0:a1:54:7d:92:d0:31:c9:15:4b:
96:ef:5f:47:4a:46:b1:b7:0f:01:34:6b:74:ce:fd:
35:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A1:CD:71:35:72:FF:DA:09:A1:D2:4F:F3:59:EB:6E:4B:9F:90:FA
X509v3 Authority Key Identifier:
keyid:BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:91:8b:4f:40:2e:92:cd:62:09:5f:d5:57:0b:b9:0b:48:df:
01:43:0d:6c:db:43:58:1f:01:e7:5c:3d:0c:67:91:f1:a6:ed:
90:07:57:fb:fa:e2:26:62:f0:cd:01:66:23:50:59:fa:23:2e:
8c:2b:ad:8c:9d:cb:42:0a:82:f1:55:d8:36:50:19:47:7e:a4:
54:83:5f:c0:25:b9:c6:69:ae:d8:55:24:c7:ac:0b:42:86:4d:
c8:92:b4:10:1f:32:42:c7:63:57:0f:d4:12:91:61:4a:1b:2d:
ee:d2:dc:0e:f0:ee:04:33:d1:5a:67:fd:3d:35:82:2a:72:af:
25:a9:5a:36:58:c2:6a:41:7f:af:08:a4:39:73:3b:ad:5e:00:
c1:16:e0:99:75:e7:0b:af:4b:af:b0:ec:5a:db:70:62:b2:cc:
d9:9e:52:e2:88:72:80:d1:5a:02:1f:db:8f:19:bc:e1:06:36:
10:00:69:05:80:1c:8c:96:91:ef:fd:88:35:9f:2e:b1:84:7a:
11:c9:fb:bc:92:69:35:ae:07:45:fc:2e:c6:ea:71:55:2c:b4:
19:b9:e6:38:cb:6e:4c:79:85:64:05:6a:83:02:ee:b2:a6:87:
14:53:3d:76:18:5f:15:40:f7:c6:09:4b:92:47:5a:1e:6f:ea:
ba:e2:97:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:48 2026 by rpki-client