Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
File: r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft (raw, json)
Hash identifier: LXqkObgNp7x3P7xkwkNaqT6j41D6yvKSX9GLkppYag8=
Subject key identifier: C1:88:4E:7F:5C:AE:29:48:9D:31:99:36:D0:0A:56:7F:2E:99:0E:32
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 019E9A3BEE2119361CF9618A6E015D4DA9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
Manifest number: 0D6F
Signing time: Sat 06 Jun 2026 00:01:19 +0000
Manifest this update: Sat 06 Jun 2026 00:01:19 +0000
Manifest next update: Sun 07 Jun 2026 00:01:19 +0000
Files and hashes: 1: CmIJnjwGRsNcmhAutOTs4YMD2fE.roa (hash: Jua19yCeg1t/mfvLvJYnD0rI4VExJ2vBY7mPBdrmdaI=)
2: Iuaoq7xqZRoecZzyevNXwAMi3-c.roa (hash: SRPau6cxiFHTMpBCP5vvZIhkHG5VuskjK4s4tpPVTEM=)
3: aPz9jYSsAHsZtg1cdjuxCtxCBzk.roa (hash: N0uPovVPRwzq0UQVV7PxhoVVAuzDhOF3XOBQjYFpbpI=)
4: r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl (hash: haYF3nQly98HaxIizdGzy1y9gwMSCW+sVtTfseT9PLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 00:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:3b:ee:21:19:36:1c:f9:61:8a:6e:01:5d:4d:a9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Jun 6 00:01:19 2026 GMT
Not After : Jun 7 00:01:19 2026 GMT
Subject: CN=c1884e7f5cae29489d319936d00a567f2e990e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:47:d5:92:3d:da:4a:0d:55:d2:26:48:90:
08:7e:05:61:13:2d:9d:fd:1d:fe:1f:2d:b5:f0:d7:
a7:a9:c1:e4:b7:8a:12:cb:c5:92:e4:0a:67:81:01:
f8:01:b8:06:dd:a1:7f:90:aa:95:ff:3c:ea:c4:49:
a2:83:4a:3d:e2:07:23:63:cc:fe:82:2c:02:6f:5b:
a6:f1:ed:78:30:90:3b:fa:b0:42:02:88:a4:b3:60:
af:0f:fb:ff:4b:51:c9:ab:2e:d0:a6:67:2a:b7:a1:
46:f4:64:f9:a4:1a:5b:d6:3b:17:75:44:15:cf:65:
f4:b9:13:fd:b8:8b:85:8c:aa:b8:3b:b3:7d:29:d1:
cd:23:93:79:d6:1c:83:bf:e2:74:7b:01:09:ee:77:
27:40:4b:67:5e:37:78:42:03:a2:76:6f:6a:a4:63:
80:32:19:f8:f4:7f:89:30:cd:49:9a:d8:7e:62:87:
a8:97:96:64:99:e3:04:2b:2c:0f:51:95:e7:09:31:
de:7a:fb:43:05:fd:a2:7c:e6:a0:58:c9:71:94:18:
b4:ab:15:16:75:65:04:fa:9e:81:ec:06:b8:c5:f6:
95:1a:bf:17:d5:85:9c:93:4d:33:10:00:dc:bc:fc:
0e:e5:81:d7:a2:62:4b:0b:2a:3b:cc:5f:dd:25:2d:
0b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:88:4E:7F:5C:AE:29:48:9D:31:99:36:D0:0A:56:7F:2E:99:0E:32
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0f:16:20:20:84:f1:60:b9:ff:6a:0f:f4:1a:26:ae:b1:1c:
24:a4:72:44:f1:f1:62:73:5d:7e:fe:e6:72:46:16:92:ec:a7:
98:7a:69:4a:91:67:59:11:73:94:e1:50:6a:f8:08:bc:1b:23:
85:91:ad:41:00:71:bc:c6:60:da:9f:39:e1:d8:1f:ca:e8:91:
17:b9:97:46:16:93:8a:32:ee:9e:42:7d:b3:dc:40:96:29:4c:
85:f0:8d:6d:6b:28:d3:e2:b8:c6:7f:a2:88:ef:40:1a:a1:08:
0a:2d:a6:39:f1:34:63:ef:b4:c1:43:eb:28:dc:b7:51:fe:d7:
e8:75:86:9d:b0:fa:f9:ec:d1:58:89:88:b7:fd:30:8e:dc:8d:
cf:28:22:76:06:75:f4:2f:40:ff:22:6b:a8:91:94:91:13:ff:
39:29:dc:a5:e4:27:3e:4a:00:e9:90:32:00:d3:76:6f:e1:92:
46:50:d9:96:b8:da:1f:7f:f6:93:f4:cc:59:53:62:78:85:87:
92:a7:db:62:59:2a:05:16:87:d0:02:9d:56:05:6d:5f:17:6c:
fc:53:3d:1e:e4:a6:95:ff:89:f5:a9:98:ad:cf:b2:50:c1:1e:
ec:20:7f:1b:7b:fe:22:8c:e9:89:8c:60:8f:91:45:8a:63:cf:
45:de:59:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:37 2026 by rpki-client