Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File: v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier: 4GWPJCcAr4UA/5kkpx112+LktLK3bOLBdMLdyiVrFKA=
Subject key identifier: A5:EB:47:B4:A4:8F:E0:BC:C8:7C:D1:35:21:80:F2:DE:33:AF:FB:95
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 019CABD917DF3D6D4903B66EDCC0F417C611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number: 0CF6
Signing time: Mon 02 Mar 2026 00:00:57 +0000
Manifest this update: Mon 02 Mar 2026 00:00:57 +0000
Manifest next update: Tue 03 Mar 2026 00:00:57 +0000
Files and hashes: 1: 5qCGbZj0fFzeN9z8gSaICT7yMA8.roa (hash: G66CwDSwPZ1mdj+oT5dw0nJbDcfnWDDiijDE5PcBGVI=)
2: W6VRxWMjY9RGYyNWUZ2Zrt5iGrQ.roa (hash: yDioc2gm4HKxpifXJms6Im9q4otOwWsYrylm+7dKp/8=)
3: Xts4DhBp7ZAXfoRbGSvo9y0epuw.roa (hash: +l+O+f+RgDS0P2v4v/Eiuo9qo0STO/EOfvPlMPBfz4M=)
4: ba0ulzzlxoKj7mmyIENd0mKkNQw.roa (hash: p7fb2fAb3ItubjjP5l3VBGCbn7g/XTc7585asMeO0R0=)
5: c5q6TPwm54z2LvrJGvcWXn2lLuc.roa (hash: PfHyIuw7JwnsE13vLHW24JJ5nVp6Ybi/KbqXWAmiqzc=)
6: ck5nzW7UcSxKWzHP2H-a3ylVN5E.roa (hash: OEda1WOM4ctfo76KkiHy1LOUWsgAZX7lWi/0FxF3rRA=)
7: dPJN6UsUvoT-CwaD6I6GCSDt2l8.roa (hash: Lm0/M7odPEdXSXGeFcgguujGj4w0jC2wgnprNlK79t8=)
8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: vgtJkMBYjAVz0IO1H/JuhxhiE0As0gZyT5xux5vAps4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:17:df:3d:6d:49:03:b6:6e:dc:c0:f4:17:c6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Mar 2 00:00:57 2026 GMT
Not After : Mar 3 00:00:57 2026 GMT
Subject: CN=a5eb47b4a48fe0bcc87cd1352180f2de33affb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:69:ac:7e:db:a4:f8:6d:6c:3b:8f:d5:d5:
df:26:70:d4:60:b9:36:5d:aa:97:95:1e:be:a1:65:
6a:c6:71:2b:09:ef:54:8d:50:c0:d1:98:83:9f:2b:
97:0f:9e:fb:49:84:a4:10:ea:e0:14:0a:23:4b:d8:
76:4b:1e:82:71:fc:3a:ab:f3:f2:f5:8b:79:97:f3:
c9:69:45:fa:bb:38:bb:bc:72:e9:9c:0f:63:f0:c3:
a0:a6:5c:32:0b:9b:8e:52:bf:78:56:10:ab:fc:0b:
96:a6:65:96:ac:0d:48:d8:b6:bd:05:3b:87:5a:38:
c8:38:1a:3f:41:0e:7b:fc:33:8d:61:e4:a1:e6:dd:
c1:aa:30:a5:cf:e2:c3:33:5b:8e:93:b9:b6:11:4b:
d8:4e:f2:39:84:6a:c1:87:91:df:a0:eb:05:33:80:
08:33:56:62:0d:2e:ce:30:23:0b:48:08:60:ee:20:
86:88:27:d2:be:9e:de:5a:b4:a1:f6:d0:ec:c0:18:
dc:d5:f7:17:a6:22:45:60:e6:be:5d:c9:e0:a0:f5:
47:d8:82:dd:0f:ca:88:68:ee:2a:83:0c:a5:5c:48:
57:ea:89:62:72:13:1a:2f:77:4e:a9:4d:cc:bd:2f:
8d:a0:4e:f8:94:c9:bc:29:59:3b:b9:1b:58:69:e0:
bf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EB:47:B4:A4:8F:E0:BC:C8:7C:D1:35:21:80:F2:DE:33:AF:FB:95
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e4:8f:ed:15:ea:c6:ab:d1:19:0f:24:b8:07:a0:1c:e3:bb:
97:fb:eb:86:68:32:7e:91:29:b6:90:87:8a:88:ce:f0:24:fe:
cf:27:68:ac:93:5b:ea:6c:b2:d1:62:82:fd:1f:42:13:20:de:
01:11:e3:88:cb:c3:f0:5b:07:d8:23:7a:c9:5a:9e:f6:d7:38:
c1:ab:b4:06:99:4d:c6:b6:ad:7f:f5:14:dc:85:06:b9:52:ca:
52:62:f9:61:df:fe:db:f5:aa:c1:d9:20:9f:b0:33:aa:34:2a:
b9:bb:c7:9e:a6:9d:de:26:5a:35:7b:88:8e:07:2a:83:12:fb:
71:1f:f3:60:94:e2:ac:9f:66:11:16:6a:97:52:5f:d7:d7:91:
96:2f:85:80:5b:9c:ea:69:da:45:a7:21:45:0d:9f:97:4a:d0:
54:6a:23:b3:86:5a:59:e3:0d:4a:d2:9c:08:9c:9e:3f:fc:cc:
2e:58:4d:fd:ef:8d:37:08:46:b2:3d:ed:3d:83:c1:90:e1:42:
26:dd:1f:eb:0e:1c:64:ec:ed:26:b8:18:63:b6:5c:25:6a:ef:
53:3a:61:af:42:96:a3:b6:0b:d3:c6:12:53:b8:f0:31:5a:8a:
48:ee:ce:36:33:a1:03:3e:31:11:9d:b0:43:db:31:02:29:7c:
48:a9:41:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:29 2026 by rpki-client