Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: TnMDGprrTfOYVZMrjcUGVlTqoW6yK6Q4370566oBtCo=
Subject key identifier: 26:1B:70:3C:76:29:21:AF:BE:85:08:19:E2:4E:2D:40:7E:EF:E3:B4
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 019EB7A0A4647E0236C7075BAF53E0F44DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 17:00:18 +0000
Manifest this update: Thu 11 Jun 2026 17:00:18 +0000
Manifest next update: Fri 12 Jun 2026 17:00:18 +0000
Files and hashes: 1: ZnpQKujkco2TpKWWsMQlGKeCUk4.roa (hash: nReeCNRcHVWJZjQmjL+vKj9L8WAcWx5VrQARrGlJtBU=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: uRp4TRZTTkaBEA07tGyWo9mLaMNOElszqfrw1vjfXsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:a4:64:7e:02:36:c7:07:5b:af:53:e0:f4:4d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Jun 11 17:00:18 2026 GMT
Not After : Jun 12 17:00:18 2026 GMT
Subject: CN=261b703c762921afbe850819e24e2d407eefe3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:48:f2:6c:b8:47:fa:d2:de:24:d1:78:d5:
41:80:29:04:77:35:1a:f5:d7:04:c5:89:73:cf:28:
61:31:48:14:60:b1:bb:b1:04:63:c0:0d:35:dc:04:
55:31:62:cf:d1:2b:cd:ae:0e:53:34:c8:2d:8b:93:
5b:14:b2:0f:bc:02:8c:0e:f1:9a:a9:38:1c:24:08:
40:96:7b:77:ad:9a:c6:14:fc:a0:87:34:ca:e2:90:
70:7c:a5:84:d7:64:04:67:21:f1:b8:de:2b:1f:0d:
43:75:f2:79:45:93:d6:2d:83:fb:2d:6a:94:c1:17:
c1:2d:de:39:a9:4e:42:8c:cf:24:fa:41:35:87:1d:
fa:6b:ac:59:e2:4d:95:19:d4:90:78:32:c6:a1:18:
d7:12:45:48:b8:98:ab:fd:59:bc:64:51:9b:bf:df:
c2:db:c6:2c:e7:15:18:60:ff:6d:e5:c9:b7:65:1b:
f7:e6:3c:ff:e3:7e:29:e5:57:0f:c5:6d:2f:7c:c5:
0e:fd:5a:1b:4f:2d:83:a0:16:ab:96:da:ff:45:1c:
05:fb:90:09:3c:97:d8:31:2f:4a:47:2e:e9:6f:05:
ec:d0:1a:2a:0d:13:fa:fd:4a:bd:53:fc:b7:99:60:
29:9c:af:c9:9a:75:05:60:09:37:00:87:14:7a:11:
81:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1B:70:3C:76:29:21:AF:BE:85:08:19:E2:4E:2D:40:7E:EF:E3:B4
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:87:f2:a5:0e:29:f9:2c:ed:5f:4d:e9:04:9c:ef:0a:6a:cf:
d0:3d:0e:5b:8b:b1:cf:eb:55:5b:a1:0b:be:fa:fd:7a:93:4e:
92:67:0e:11:d0:fc:a0:62:cb:96:fe:41:cf:db:23:b0:fa:40:
03:2e:e5:b4:96:69:61:11:fb:87:18:c7:3b:ee:4d:d6:7f:ef:
31:a3:5c:aa:72:62:bc:38:ac:00:12:b3:e4:95:64:7f:15:86:
e7:60:66:e9:71:54:25:88:5f:b7:95:0b:a9:86:ec:e7:ee:ce:
c7:c4:45:c4:d9:c1:5e:ef:bf:99:f4:39:b6:f0:bd:fa:eb:b4:
1b:46:c1:ca:8e:1e:62:bf:51:26:2c:20:2b:23:1c:31:f2:95:
b1:d5:9c:ed:1a:dc:4a:61:58:2f:03:46:fe:73:da:81:27:90:
01:18:4c:36:2e:32:f2:f3:46:16:3d:29:f1:6f:8e:81:a5:f2:
46:df:cd:ae:0a:a8:6f:8b:82:32:3e:41:4b:cf:97:05:e8:e5:
c4:40:0d:94:2c:4c:f5:27:da:6b:cd:73:fa:a7:83:de:23:d0:
42:85:54:ae:89:37:0e:fa:ba:e5:cb:68:08:d5:eb:90:15:19:
ba:4a:97:51:5a:e8:6f:67:5f:24:17:a1:eb:79:a9:09:52:7b:
21:b0:05:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:58:05 2026 by rpki-client