Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File: v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier: GS4whbq/3+TRoJqjBG2C1uAGWnvOjSzHpcMiqoA4po8=
Subject key identifier: E3:73:C6:5D:DE:EE:DB:EB:AD:3A:22:57:31:8B:36:23:9C:BB:69:BE
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 019D99632689C98DEB5F876B800B4C31F9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number: 0D71
Signing time: Fri 17 Apr 2026 03:01:45 +0000
Manifest this update: Fri 17 Apr 2026 03:01:45 +0000
Manifest next update: Sat 18 Apr 2026 03:01:45 +0000
Files and hashes: 1: 5qCGbZj0fFzeN9z8gSaICT7yMA8.roa (hash: G66CwDSwPZ1mdj+oT5dw0nJbDcfnWDDiijDE5PcBGVI=)
2: W6VRxWMjY9RGYyNWUZ2Zrt5iGrQ.roa (hash: yDioc2gm4HKxpifXJms6Im9q4otOwWsYrylm+7dKp/8=)
3: Xts4DhBp7ZAXfoRbGSvo9y0epuw.roa (hash: +l+O+f+RgDS0P2v4v/Eiuo9qo0STO/EOfvPlMPBfz4M=)
4: ba0ulzzlxoKj7mmyIENd0mKkNQw.roa (hash: p7fb2fAb3ItubjjP5l3VBGCbn7g/XTc7585asMeO0R0=)
5: c5q6TPwm54z2LvrJGvcWXn2lLuc.roa (hash: PfHyIuw7JwnsE13vLHW24JJ5nVp6Ybi/KbqXWAmiqzc=)
6: ck5nzW7UcSxKWzHP2H-a3ylVN5E.roa (hash: OEda1WOM4ctfo76KkiHy1LOUWsgAZX7lWi/0FxF3rRA=)
7: dPJN6UsUvoT-CwaD6I6GCSDt2l8.roa (hash: Lm0/M7odPEdXSXGeFcgguujGj4w0jC2wgnprNlK79t8=)
8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: og9qVQH19FLWscvEJi52S4z1Z2Bmg4JZiJhRvjdxaOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:26:89:c9:8d:eb:5f:87:6b:80:0b:4c:31:f9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Apr 17 03:01:45 2026 GMT
Not After : Apr 18 03:01:45 2026 GMT
Subject: CN=e373c65ddeeedbebad3a2257318b36239cbb69be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:64:67:9b:2f:c9:5f:1c:b9:b4:c0:a5:90:
54:c6:1a:fb:b2:da:af:7f:f9:3f:d1:f9:25:a1:30:
a2:ed:be:47:78:2c:4f:a0:d0:4e:66:84:82:e5:3e:
ec:19:28:ec:25:06:df:ff:22:3b:6b:2e:28:86:d1:
2b:18:6e:59:b1:c4:44:1d:ae:3a:28:f1:8d:ff:8b:
73:4d:fa:09:11:64:cc:33:2a:8e:64:14:87:b3:8e:
a7:ef:79:6a:b9:09:b4:0a:89:23:cf:32:ac:d5:c6:
2f:32:aa:0e:b7:07:27:78:e6:43:70:2f:c5:a1:97:
66:e1:e5:65:b2:24:f8:2a:ee:5d:b1:83:77:e2:b4:
11:09:11:48:6a:50:c1:a6:c1:04:e9:d5:f3:0d:ba:
09:9a:a9:e1:61:20:1c:ea:b2:c3:b3:29:82:23:5c:
49:bd:f2:a4:52:17:19:ea:c6:c3:0f:17:e9:57:51:
25:0a:35:2b:42:f8:68:42:e6:e6:be:6f:59:33:1f:
1c:01:3a:00:1d:90:ef:58:89:b4:ec:89:2a:41:9e:
f4:a7:a9:9e:5e:0d:4b:ee:32:28:74:18:0b:80:28:
47:3c:b3:fb:f6:e9:e5:91:ac:7f:a6:4e:53:64:62:
7f:ce:17:c2:54:b7:87:bd:2c:3c:24:de:ce:6a:cd:
ce:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:73:C6:5D:DE:EE:DB:EB:AD:3A:22:57:31:8B:36:23:9C:BB:69:BE
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:74:97:8b:06:b3:70:99:5d:ed:72:98:27:bb:65:37:8e:22:
eb:45:b4:c4:ee:40:26:74:f5:42:b6:1d:e5:85:51:2a:c7:68:
0a:49:65:44:f0:01:05:da:db:94:de:dc:56:c0:f4:86:f6:bf:
1a:7a:65:68:d7:04:51:4e:0a:b0:fc:44:ba:41:d2:d1:4a:6a:
87:ca:98:1b:4b:c8:17:fc:70:d8:4a:62:6f:ad:d8:b0:21:6c:
ed:b2:cd:bc:69:a4:46:65:d9:a2:3e:d3:ca:6a:03:87:d7:e5:
8c:fe:00:97:5c:41:59:cc:03:04:b6:85:a7:db:32:fc:eb:c0:
93:1e:c9:e7:9a:e9:fa:7e:1d:7b:8d:e9:59:7f:14:5b:17:be:
0d:27:6c:7d:f8:63:c1:c9:5c:c7:24:97:3e:52:c5:ed:03:7f:
38:1a:64:e5:fd:a5:8c:5a:72:ad:0d:67:b2:12:78:6a:c5:3c:
2b:85:65:b2:47:48:30:b3:28:94:d4:d0:8f:a1:51:73:36:6c:
80:5a:cb:51:58:e1:66:80:e1:47:25:3e:18:21:35:9f:c3:28:
b0:01:9c:4d:f3:b7:a5:e1:49:e8:95:bb:f9:78:91:1d:30:84:
55:36:30:7e:af:8e:40:56:20:74:63:89:80:82:96:00:30:fb:
85:1e:f7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:25 2026 by rpki-client