Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
File: r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft (raw, json)
Hash identifier: 5si01wSC65m4A3D959ZCeX/qEr6lBmL+uSrZYNLYVl4=
Subject key identifier: 85:E0:D8:85:F0:F5:79:4F:3C:5D:66:B6:74:D3:EF:9B:D9:0B:C1:82
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 019D38D2E46AF94226943A9C946A40DA87CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
Manifest number: 0CB6
Signing time: Sun 29 Mar 2026 09:00:38 +0000
Manifest this update: Sun 29 Mar 2026 09:00:38 +0000
Manifest next update: Mon 30 Mar 2026 09:00:38 +0000
Files and hashes: 1: ASO-wECtUbDG1DckYZ24HiUg6DU.roa (hash: VgGdV7+deLKhr4gB8tleb/RqVtkbUSprjT1l2cEz5/g=)
2: CmIJnjwGRsNcmhAutOTs4YMD2fE.roa (hash: Jua19yCeg1t/mfvLvJYnD0rI4VExJ2vBY7mPBdrmdaI=)
3: Iuaoq7xqZRoecZzyevNXwAMi3-c.roa (hash: SRPau6cxiFHTMpBCP5vvZIhkHG5VuskjK4s4tpPVTEM=)
4: aPz9jYSsAHsZtg1cdjuxCtxCBzk.roa (hash: N0uPovVPRwzq0UQVV7PxhoVVAuzDhOF3XOBQjYFpbpI=)
5: r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl (hash: To7SjbvD7O9fGyoUvV73HEb4fmXXWHhi06YO3u0iy5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e4:6a:f9:42:26:94:3a:9c:94:6a:40:da:87:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Mar 29 09:00:38 2026 GMT
Not After : Mar 30 09:00:38 2026 GMT
Subject: CN=85e0d885f0f5794f3c5d66b674d3ef9bd90bc182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:e3:de:c5:3e:2d:e4:86:69:02:d7:ef:4a:
3f:e9:54:9f:47:fa:e2:09:f7:23:b5:cc:99:4d:5c:
94:84:a2:64:e6:2c:1c:04:4b:f6:67:8a:f4:56:9b:
d8:10:07:ad:cd:67:a0:d0:af:ff:00:e9:3b:e3:6a:
f0:37:c3:86:6c:19:d9:0f:a5:45:25:62:e8:ab:66:
fc:7b:07:e4:f5:58:78:64:24:9d:4d:8b:c0:c9:6c:
00:ec:92:2c:42:60:45:d9:7f:0c:9b:f6:fe:cb:e5:
de:78:3b:a0:fd:37:56:6a:4a:c5:54:b7:08:51:d9:
70:c9:47:e3:43:4b:44:13:2d:8c:56:ec:aa:7f:d8:
7b:f3:49:e7:a7:fc:f4:7a:9c:54:2d:53:da:b1:88:
f8:2d:18:d3:20:00:2b:e6:21:97:97:58:68:09:cf:
06:b0:92:a9:6e:33:56:3e:42:29:07:9a:91:81:ef:
4a:2e:50:67:43:80:87:e7:23:08:c2:3d:88:6d:be:
a7:25:1f:a2:a0:26:40:96:6b:ad:07:2c:fc:61:54:
7f:1c:33:ed:f7:da:17:d7:85:ff:6a:5f:c9:2c:b9:
c1:6f:d5:f0:64:cc:18:24:3f:40:41:ca:f1:e8:15:
05:e1:d7:95:06:06:9e:b9:f4:28:6f:d1:73:62:ba:
67:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E0:D8:85:F0:F5:79:4F:3C:5D:66:B6:74:D3:EF:9B:D9:0B:C1:82
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:65:d2:f7:58:a7:5d:4c:a5:55:30:e4:2a:69:02:33:4d:e8:
2e:27:c9:53:89:fa:7f:50:71:98:5c:aa:89:8b:a6:2f:39:ba:
1c:0e:68:9c:4e:8b:63:02:6a:cc:de:7b:72:5c:72:dd:d5:d4:
3f:c1:d7:a9:0b:ec:9b:f9:12:fd:1c:e1:d5:46:8b:f7:87:57:
e3:66:1f:e7:07:92:83:3d:92:05:17:36:3f:19:3e:c0:f0:c3:
62:b0:ee:d3:b5:7b:d4:40:2d:ac:ac:62:55:93:43:98:18:d6:
45:c2:fc:0a:2d:f3:db:43:82:70:10:93:01:3d:36:1e:2e:ba:
1e:af:f4:21:6c:da:e7:c9:44:46:c7:60:39:e7:b7:53:25:ba:
68:2d:17:94:5c:b5:e1:01:16:8e:d6:a1:e9:04:4d:36:85:a3:
23:80:38:a0:09:10:48:29:02:d4:28:94:3d:82:c3:db:46:6d:
2b:53:2b:03:bb:ed:9f:5a:0b:88:ae:fe:81:fd:b3:b2:e5:53:
fd:af:b5:65:9e:13:cb:c8:65:e3:81:ff:4a:5d:93:a1:eb:a5:
3c:ce:f5:28:30:f6:12:9b:5c:30:94:50:96:b7:c4:89:88:63:
6e:66:cb:58:7d:e5:3a:ad:1f:1c:e0:89:49:ba:23:59:2a:37:
54:39:7e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:11 2026 by rpki-client