Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: 5Z8kYnGCjASSrtjE/YkQto60VjazobVviPFRLVDCIwk=
Subject key identifier: 3C:DE:B2:98:DF:D0:4A:14:19:53:3D:28:10:C9:A7:5B:E8:CE:77:F2
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 019FA14D7658AEA7B930AEE34D8D877E5018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 02:00:36 +0000
Manifest this update: Mon 27 Jul 2026 02:00:36 +0000
Manifest next update: Tue 28 Jul 2026 02:00:36 +0000
Files and hashes: 1: ZnpQKujkco2TpKWWsMQlGKeCUk4.roa (hash: nReeCNRcHVWJZjQmjL+vKj9L8WAcWx5VrQARrGlJtBU=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: shbkhsblWsh3pNMSrTM4RYVW0qtAMhgpOH14bKUupRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:76:58:ae:a7:b9:30:ae:e3:4d:8d:87:7e:50:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Jul 27 02:00:36 2026 GMT
Not After : Jul 28 02:00:36 2026 GMT
Subject: CN=3cdeb298dfd04a1419533d2810c9a75be8ce77f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:f5:22:a8:aa:51:a0:11:94:09:03:be:14:
ef:20:2f:70:ae:8f:9b:d1:c1:53:3a:51:ae:b5:ff:
73:2e:15:93:17:48:34:c0:f7:56:03:e6:c8:57:77:
72:53:0f:1e:ff:e2:fd:c8:eb:0e:b7:28:52:1b:fc:
d9:47:0f:97:c7:a9:02:f4:2f:3f:4f:09:ae:06:c3:
03:9a:87:c3:9d:75:d8:1f:1f:99:1a:2c:d1:50:09:
14:70:8d:04:2b:ef:a0:2d:40:40:6f:50:eb:23:f7:
37:cb:a7:8e:ad:36:ac:38:ab:cc:91:16:c7:6e:a0:
9e:7a:8c:fe:28:a8:db:25:49:47:49:73:30:05:3e:
9d:c1:fc:95:96:95:99:50:cd:bd:77:9f:92:26:e8:
70:98:e9:da:a8:73:7b:f9:83:3b:f6:aa:5e:8c:a1:
37:84:5b:24:d9:56:06:fb:9d:dc:bb:8c:a3:b9:14:
6b:ff:9b:a0:bb:0c:1a:28:d9:e8:35:eb:f4:2d:06:
34:8a:4d:c1:d3:60:6a:ed:75:ff:0a:c0:b1:ad:2f:
95:18:7d:74:14:d0:92:f5:a2:67:a0:92:f0:4a:d8:
47:ed:da:82:ac:f5:cb:6e:f4:dc:58:0a:87:c8:4c:
21:f5:b6:91:83:95:2f:59:0c:d1:0e:2f:61:9b:32:
f5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DE:B2:98:DF:D0:4A:14:19:53:3D:28:10:C9:A7:5B:E8:CE:77:F2
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c9:00:9b:75:17:16:8d:5b:25:ad:da:3e:75:b0:6a:4e:b5:
df:c9:78:57:fd:cd:1c:88:7b:59:ec:92:30:fc:cb:a5:d3:8f:
24:bf:bc:bf:68:b6:9c:e6:5e:eb:2d:89:c0:e1:b5:cc:d6:7e:
36:5f:24:15:98:67:c9:c7:fd:15:d2:a9:97:1c:3b:62:71:1f:
b9:7c:fd:9e:d7:35:18:bf:d9:ae:5d:1b:fc:09:52:74:96:32:
66:7a:0e:9b:75:24:6c:1f:35:d9:71:ec:98:cb:6e:b4:c7:46:
c3:dc:8e:f9:68:d3:a6:11:8c:24:1f:04:84:48:7a:4c:4c:e8:
f7:f8:57:31:2a:01:7a:1c:b1:74:c5:a9:57:9c:8f:63:05:76:
0c:06:f0:2c:35:b6:76:c7:bc:fe:94:2f:44:4c:99:ea:d4:c8:
cc:81:5f:e6:45:ad:9a:7a:f8:0f:cc:08:91:3c:52:ff:01:00:
f9:de:4f:1a:1e:39:ae:28:39:81:b0:da:0e:5b:3d:a0:6e:66:
57:1e:f4:31:60:97:e2:9e:6e:07:b9:fb:e6:a0:46:21:64:62:
3c:a4:17:93:de:fd:04:88:83:8a:f6:5d:62:6f:7c:15:b8:12:
44:4c:93:3c:c7:aa:4d:7e:e1:85:30:da:47:6a:b7:a8:41:c8:
bf:19:9d:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTXZYrqe5MK7jTY2HflAYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYjA0YjEzNTVlNWQ2ZWQyMjIzMjQ5NjMwYWM4YjlmNzQz
OWFlZTEwHhcNMjYwNzI3MDIwMDM2WhcNMjYwNzI4MDIwMDM2WjAzMTEwLwYDVQQD
EygzY2RlYjI5OGRmZDA0YTE0MTk1MzNkMjgxMGM5YTc1YmU4Y2U3N2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CP1IqiqUaARlAkDvhTvIC9wro+b
0cFTOlGutf9zLhWTF0g0wPdWA+bIV3dyUw8e/+L9yOsOtyhSG/zZRw+Xx6kC9C8/
TwmuBsMDmofDnXXYHx+ZGizRUAkUcI0EK++gLUBAb1DrI/c3y6eOrTasOKvMkRbH
bqCeeoz+KKjbJUlHSXMwBT6dwfyVlpWZUM29d5+SJuhwmOnaqHN7+YM79qpejKE3
hFsk2VYG+53cu4yjuRRr/5uguwwaKNnoNev0LQY0ik3B02Bq7XX/CsCxrS+VGH10
FNCS9aJnoJLwSthH7dqCrPXLbvTcWAqHyEwh9baRg5UvWQzRDi9hmzL1GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzespjf0EoUGVM9KBDJp1voznfyMB8GA1UdIwQY
MBaAFK+wSxNV5dbtIiMkljCsi590Oa7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lMmI0OTQtYzBiMi00M2Y0LWJjNGQt
YTZmNGYwZjRmNzJkLzEvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9lMmI0OTQtYzBiMi00M2Y0LWJjNGQtYTZmNGYwZjRmNzJk
LzEvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKskAm3UX
Fo1bJa3aPnWwak6138l4V/3NHIh7WeySMPzLpdOPJL+8v2i2nOZe6y2JwOG1zNZ+
Nl8kFZhnycf9FdKplxw7YnEfuXz9ntc1GL/Zrl0b/AlSdJYyZnoOm3UkbB812XHs
mMtutMdGw9yO+WjTphGMJB8EhEh6TEzo9/hXMSoBehyxdMWpV5yPYwV2DAbwLDW2
dse8/pQvREyZ6tTIzIFf5kWtmnr4D8wIkTxS/wEA+d5PGh45rig5gbDaDls9oG5m
Vx70MWCX4p5uB7n75qBGIWRiPKQXk979BIiDivZdYm98FbgSREyTPMeqTX7hhTDa
R2q3qEHIvxmdRQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:22:54 2026 by rpki-client