Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
File: r7ALKTlueAM-26yv75hQsbDjUyM.mft (raw, json)
Hash identifier: CmDUvcnCYRvHhmHj5b3tZ1kwhsNXcIL5YR6E/G0rM7w=
Subject key identifier: 0D:6F:70:53:11:80:11:F8:8C:E6:0C:9D:DB:E7:EA:D5:0D:4F:45:1A
Authority key identifier: AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23
Certificate issuer: /CN=afb00b29396e78033edbacafef9850b1b0e35323
Certificate serial: 019D389C4C07926A75830A3929E8DD644D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
Manifest number: 113D
Signing time: Sun 29 Mar 2026 08:01:00 +0000
Manifest this update: Sun 29 Mar 2026 08:01:00 +0000
Manifest next update: Mon 30 Mar 2026 08:01:00 +0000
Files and hashes: 1: BqKXTfV1zxu7JcLG72Zso4SHOOg.roa (hash: T8VlSosgzu97SNLjSfAlphc7hdN+zQvpmKY8/+PTx/s=)
2: r7ALKTlueAM-26yv75hQsbDjUyM.crl (hash: Lruspj2jdbJFIVPCVG5rFQ7WZabgpTP07/Y6PDJSLiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:4c:07:92:6a:75:83:0a:39:29:e8:dd:64:4d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb00b29396e78033edbacafef9850b1b0e35323
Validity
Not Before: Mar 29 08:01:00 2026 GMT
Not After : Mar 30 08:01:00 2026 GMT
Subject: CN=0d6f7053118011f88ce60c9ddbe7ead50d4f451a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5b:48:af:0a:e9:13:8f:b8:8e:58:da:08:31:
98:2b:fa:e7:ef:e3:dd:83:f5:91:e1:66:ab:8a:71:
05:87:d3:8a:47:9e:58:ad:2c:7a:9f:7e:be:da:6c:
14:ea:af:05:c1:98:f1:e1:da:93:f9:17:ce:cf:fc:
50:8f:fb:5a:5e:ef:20:6c:75:a0:b8:84:d9:d4:27:
7a:96:fc:b6:50:e7:09:7e:f2:63:05:04:b0:55:ab:
3c:c2:6a:d4:2d:9b:da:09:46:99:d5:fe:d5:98:e0:
41:1c:72:b0:6e:5a:ee:d6:af:dd:8e:b1:44:8e:73:
68:13:1d:1a:d1:de:61:72:66:78:3f:06:bf:da:71:
e8:d5:cf:16:d2:e2:40:0b:f7:21:2a:7f:6b:92:ba:
78:4a:1c:ef:65:2e:0c:5e:84:79:a4:bf:22:f9:89:
ff:62:f2:c3:d1:c4:6e:2d:3c:43:5e:1c:e9:9d:40:
5e:60:fe:b7:f1:a7:f5:31:6a:12:86:a4:75:1e:14:
ca:18:b9:dc:f7:16:24:e2:c8:61:ff:6b:2e:3d:8a:
fb:b4:5d:3b:fe:6a:d2:53:e4:8d:4c:a0:35:94:26:
4c:06:03:f1:dd:90:fc:cc:a9:f4:4e:7a:65:8a:60:
67:bf:cd:b9:96:e1:e6:1d:eb:38:fa:74:c7:32:50:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6F:70:53:11:80:11:F8:8C:E6:0C:9D:DB:E7:EA:D5:0D:4F:45:1A
X509v3 Authority Key Identifier:
keyid:AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c6:52:87:5a:8c:f1:2f:a8:2d:5d:b8:98:38:19:02:90:a4:
8c:04:52:81:4d:8e:9c:af:3a:45:25:f7:7e:ae:b1:66:03:f8:
bd:5c:dc:43:05:12:8d:e6:f4:a3:d6:18:12:89:6b:46:41:82:
28:87:19:23:7c:49:d8:98:de:1a:9b:5d:97:95:f8:c3:02:5b:
1d:47:f2:72:d9:c4:b9:ee:a7:98:7a:fe:97:8b:34:7c:2c:ad:
54:c0:95:fb:b5:ae:e9:7a:7d:f6:3a:fd:4c:9e:2f:d5:79:8f:
b6:f6:d7:79:07:b2:dd:f2:dc:a8:9a:d3:1e:21:53:19:8a:43:
4e:26:47:ea:1c:d0:c6:3e:39:58:b8:77:1c:88:56:d5:c1:2f:
39:a1:df:bb:ba:54:6c:11:c3:7a:e6:2c:36:f8:1f:5f:91:d3:
43:41:63:36:60:06:23:51:46:5f:89:a5:1a:36:8c:5a:75:3b:
73:28:83:51:64:18:a1:db:35:52:27:f6:31:87:cf:7e:fa:08:
b3:26:cb:18:5e:a1:d6:65:f6:10:25:d5:58:1c:92:96:bc:4d:
a1:6a:c3:66:ce:02:90:66:99:67:43:c2:8a:0a:9f:bd:c8:6c:
3b:62:e6:71:19:61:38:a4:b7:ae:0f:7e:6f:93:23:4d:e5:28:
2c:1d:ef:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:47 2026 by rpki-client