Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: OiBK2yfvRvdi5+tOjK+vGDrZr2y3oBgyzEm32OywLoE=
Subject key identifier: 80:43:0E:0A:81:5F:36:21:19:77:46:84:CE:16:1E:7C:4C:02:9A:1F
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 01A08AFA2A52B6AFB0A9CE806CC4CA7BC1EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 11:00:45 +0000
Manifest this update: Thu 10 Sep 2026 11:00:45 +0000
Manifest next update: Fri 11 Sep 2026 11:00:45 +0000
Files and hashes: 1: ZnpQKujkco2TpKWWsMQlGKeCUk4.roa (hash: nReeCNRcHVWJZjQmjL+vKj9L8WAcWx5VrQARrGlJtBU=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: Gy34PV29kYyiaPHARg9elsTHBIQAD288a1TQ+7IsErs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:2a:52:b6:af:b0:a9:ce:80:6c:c4:ca:7b:c1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Sep 10 11:00:45 2026 GMT
Not After : Sep 11 11:00:45 2026 GMT
Subject: CN=80430e0a815f362119774684ce161e7c4c029a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:66:90:38:02:f1:f3:c7:8a:bc:1a:c9:d7:
88:f5:29:6e:77:96:af:2f:e0:36:c4:06:d9:f7:1e:
f0:6b:24:4e:0a:32:08:06:5c:95:f4:40:e4:6a:b0:
03:cd:ea:0d:9b:17:34:60:d8:04:8f:ab:98:18:4e:
7a:5c:e7:53:f7:63:ad:06:1b:0f:db:fd:f5:56:c6:
8a:66:52:13:bc:b7:99:af:4c:90:63:21:4b:ca:f2:
0a:16:c7:65:16:e9:da:74:37:ab:74:0a:d9:44:f0:
8e:24:c9:7c:56:18:c8:f8:98:14:81:42:3e:1a:46:
a4:9b:f2:c8:b4:eb:22:ef:06:5b:f4:24:5c:d9:7e:
82:5d:2f:1c:3e:8e:96:3f:94:74:06:f8:95:84:9d:
37:86:5c:d2:0a:7c:19:0a:86:8f:e6:76:0f:6b:8f:
f7:35:f2:e1:a6:2f:dc:9a:da:ab:61:75:2b:5c:e6:
f6:5e:b0:2b:1d:f4:10:a9:c0:04:70:fe:c3:00:ba:
2b:6a:92:02:09:84:28:51:84:c4:d7:ed:ca:9c:bb:
f8:ba:54:23:ac:9a:d4:2c:fd:6e:64:00:04:2b:d1:
cd:9f:8a:61:6d:2a:cb:a5:18:f5:3a:e1:94:25:61:
c4:27:06:e6:21:4d:6f:dc:a0:67:aa:c1:5c:d5:a7:
a7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:43:0E:0A:81:5F:36:21:19:77:46:84:CE:16:1E:7C:4C:02:9A:1F
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f4:75:95:62:8e:fc:b1:da:49:70:10:91:18:1e:3a:96:19:
50:5c:3b:ee:a8:b3:03:38:bf:f2:7f:a7:ab:00:b0:0c:96:38:
c6:c7:e9:60:4e:81:15:73:61:b2:56:a9:67:94:18:35:2a:b9:
e5:3f:58:71:61:fd:12:cc:27:99:03:f1:1b:67:e9:52:e9:a2:
c2:71:d8:fe:52:e8:e3:84:3f:8c:4c:c5:5f:b2:f7:fc:e0:6b:
1e:be:ee:cb:63:66:da:03:2d:f5:84:4f:c1:ea:f6:bc:45:35:
97:49:02:36:7d:3e:6a:c8:a7:6a:18:b8:cf:28:41:af:c5:67:
7d:63:6b:bc:22:47:cf:e6:85:e9:bd:f3:73:b7:41:97:15:5e:
2e:7b:cd:95:55:c5:f1:a6:df:dd:46:36:ff:24:ee:f0:69:ec:
db:4d:8e:fe:89:ea:97:c2:e3:a9:14:9f:fd:ff:12:4d:8c:33:
24:22:ef:76:27:ad:81:dd:4e:1e:78:17:17:e6:eb:f3:56:08:
34:7b:50:ae:09:75:c2:90:d6:f6:56:4b:85:a0:f2:9b:46:ae:
8a:a2:7b:75:88:7f:7a:81:a5:fd:8e:fa:90:be:36:71:ea:c6:
f4:c2:e0:1b:37:9c:f3:b6:a0:b4:c4:e7:02:96:09:98:13:e2:
d0:68:ea:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:32:02 2026 by rpki-client