Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: C7+9wDTwfMWEtMjj3YXPTIDaLHaGznuW7NVm057VF+k=
Subject key identifier: F1:9D:4D:E5:4A:6F:6A:B3:96:7F:AA:18:D3:5B:37:93:50:4B:41:F6
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 019CD6C2FD1E321973118E750942F9EE80D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 185D
Signing time: Tue 10 Mar 2026 08:00:28 +0000
Manifest this update: Tue 10 Mar 2026 08:00:28 +0000
Manifest next update: Wed 11 Mar 2026 08:00:28 +0000
Files and hashes: 1: ZnpQKujkco2TpKWWsMQlGKeCUk4.roa (hash: nReeCNRcHVWJZjQmjL+vKj9L8WAcWx5VrQARrGlJtBU=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: O4hAjWLJfhd8Phrd3Tbz4kFynGjX+LFredOXw0/7VLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d6:c2:fd:1e:32:19:73:11:8e:75:09:42:f9:ee:80:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Mar 10 08:00:28 2026 GMT
Not After : Mar 11 08:00:28 2026 GMT
Subject: CN=f19d4de54a6f6ab3967faa18d35b3793504b41f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:a8:e6:86:16:0a:b0:d7:e2:18:2e:d4:7f:
2e:55:6d:da:75:24:ce:cd:98:10:57:fa:1b:a2:dc:
62:d6:57:28:b0:36:fa:8b:86:b8:47:64:0b:d1:d4:
fc:e7:9e:15:83:f9:33:ca:c7:67:1c:00:88:8e:c5:
76:0b:ce:79:15:e6:e3:c5:d0:3f:e7:28:58:13:d6:
51:16:ea:88:40:fc:64:d8:5b:e6:d5:48:50:6d:0e:
05:cf:09:02:54:48:b6:56:c7:0e:10:cc:5b:40:fd:
6d:c9:d8:b9:c6:94:63:63:5e:a6:e9:49:00:b9:a3:
6e:3b:d8:2c:e3:bd:39:ae:2c:40:e7:29:ba:f7:44:
47:8d:ae:8a:41:6d:a5:e2:40:7f:5c:e0:79:6c:4e:
cd:da:c9:31:34:de:85:f5:2f:42:06:64:25:35:58:
dc:9a:c8:20:f7:4b:74:97:0e:e1:a6:14:6f:a5:6a:
63:33:ca:35:4b:85:b9:87:73:01:14:7e:29:7d:93:
8f:9f:87:c8:3e:f3:a3:2e:c4:9f:ae:2e:c5:aa:9f:
9d:3e:f3:44:49:d5:0e:e1:de:6e:e5:f9:69:91:4c:
88:b3:b2:8a:32:33:d8:7a:91:15:8c:44:18:8a:86:
38:a9:ed:c1:a6:6d:a1:14:a4:55:2a:c1:ae:3f:08:
54:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9D:4D:E5:4A:6F:6A:B3:96:7F:AA:18:D3:5B:37:93:50:4B:41:F6
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f0:1b:b9:2a:7f:94:3b:c8:05:d0:81:29:53:59:ca:37:cf:
31:5e:ca:82:a1:25:1e:0a:d0:3e:9c:6b:63:2f:df:8c:07:41:
e6:e3:3a:b6:44:47:65:f3:40:4e:ea:73:b4:01:48:61:ff:7a:
52:08:b0:f4:64:e2:cf:55:95:e4:fe:f9:60:f6:52:c5:39:cd:
57:15:4b:ab:38:d6:b0:b7:4d:86:89:68:ab:43:f4:e5:a4:ed:
c1:e3:17:70:7f:f5:ea:22:a3:fa:7a:e7:c7:fe:b7:cd:42:cb:
95:dd:eb:2e:a3:ac:2a:61:31:f4:10:4c:aa:60:ab:ea:da:0e:
bf:3b:d7:a8:a5:1a:a8:79:98:27:87:a7:8c:af:10:6a:53:20:
a8:6d:f4:f7:24:92:10:31:dd:c5:36:8b:fd:2a:0b:ea:12:8e:
50:40:8e:b3:68:7b:cd:ce:26:fb:e7:96:0d:88:a1:07:82:46:
32:72:76:7d:75:47:d3:b5:eb:87:b0:a5:6d:e7:3c:98:0e:c6:
71:ee:b1:96:c8:0b:9d:23:fe:d0:2f:e4:a8:2c:49:f8:40:8a:
29:18:ce:a3:8f:60:0c:7f:1b:cc:fe:1c:2a:53:a9:79:f6:39:
a8:ec:d1:6e:59:d1:29:66:93:c9:c8:fd:13:91:7a:40:40:4f:
7f:40:9a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 18:26:00 2026 by rpki-client