Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
File: r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft (raw, json)
Hash identifier: w0vXAXxwzumD4NZs3zEqgjaOuxI/8pRlAGQvOpi9WTg=
Subject key identifier: CF:49:BF:08:BB:45:AF:CD:92:42:29:C1:53:32:AD:3A:94:6B:F1:6F
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 019FA2CF3A32A3584F5B83DE36776F5CA14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
Manifest number: 0DF8
Signing time: Mon 27 Jul 2026 09:01:57 +0000
Manifest this update: Mon 27 Jul 2026 09:01:57 +0000
Manifest next update: Tue 28 Jul 2026 09:01:57 +0000
Files and hashes: 1: CmIJnjwGRsNcmhAutOTs4YMD2fE.roa (hash: Jua19yCeg1t/mfvLvJYnD0rI4VExJ2vBY7mPBdrmdaI=)
2: Iuaoq7xqZRoecZzyevNXwAMi3-c.roa (hash: SRPau6cxiFHTMpBCP5vvZIhkHG5VuskjK4s4tpPVTEM=)
3: aPz9jYSsAHsZtg1cdjuxCtxCBzk.roa (hash: N0uPovVPRwzq0UQVV7PxhoVVAuzDhOF3XOBQjYFpbpI=)
4: r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl (hash: rDFX3I0kMXWbouTxGClAtkhL1tr4Hb7hQ6dCbjl4nDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cf:3a:32:a3:58:4f:5b:83:de:36:77:6f:5c:a1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Jul 27 09:01:57 2026 GMT
Not After : Jul 28 09:01:57 2026 GMT
Subject: CN=cf49bf08bb45afcd924229c15332ad3a946bf16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a6:d3:1e:7e:cd:b8:33:d4:70:ed:85:d4:be:
63:98:40:66:88:c7:9b:49:d6:c3:ab:d5:7f:34:79:
12:59:17:de:bc:49:9d:bb:de:8b:5c:a2:41:8e:c7:
44:01:af:9a:8e:a0:ae:ce:63:5f:e5:0d:b1:20:a1:
64:7e:44:fc:e7:f0:4e:bb:dd:b9:4d:7d:9b:4c:8c:
b4:c0:63:cd:46:6e:58:0e:66:67:ff:4e:42:db:77:
15:9a:67:c5:45:29:61:5d:5d:a7:6f:0f:16:02:c8:
72:51:97:f2:cf:67:c2:3e:55:b2:69:26:86:8b:b1:
32:4b:b5:80:f4:60:11:80:0d:94:35:1c:b3:b7:17:
40:0c:60:6d:f9:5b:cc:34:2e:eb:11:2a:ce:4a:6c:
62:68:b5:bf:9f:0b:3d:85:d4:03:2b:03:08:41:8e:
74:0a:23:bc:be:c3:1a:17:9a:49:dd:44:0d:26:87:
77:be:81:dc:ea:28:2c:11:7e:59:87:cb:72:4b:d5:
d4:58:94:09:e1:55:ce:c9:e8:02:26:99:bc:55:ff:
85:24:09:27:a1:9f:8a:b6:09:0b:e4:b5:89:e0:14:
3d:5e:25:62:e6:65:9c:3d:89:b4:77:8d:45:81:8a:
ea:91:71:82:0d:04:bc:e8:64:fb:a0:ca:05:67:86:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:49:BF:08:BB:45:AF:CD:92:42:29:C1:53:32:AD:3A:94:6B:F1:6F
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:10:be:c5:d6:12:74:6a:56:c5:3d:00:0f:3e:17:2b:4b:05:
d8:b5:53:ce:6f:8c:3b:8d:4e:1d:da:35:e9:85:5d:78:4f:7e:
02:4a:da:7a:ec:d1:f2:1d:ec:99:cf:b7:37:86:09:e8:84:f3:
dc:19:f4:6e:b9:23:10:a5:24:e4:41:30:01:0c:ff:30:cf:b2:
44:30:1e:be:e2:f4:a2:8f:aa:5a:a5:a2:30:b0:3b:e3:88:ea:
d3:1b:b8:e6:2a:64:99:d6:a9:79:89:33:89:98:da:8b:fb:26:
5f:a5:a6:bc:4e:bf:1c:f0:01:53:4e:0e:a2:a0:71:3e:c1:08:
9a:e3:a7:77:c1:19:b6:1a:8a:a1:a4:a5:b0:07:1d:a7:28:2e:
63:1b:0f:5a:58:3c:1f:b5:d7:2a:69:b1:87:36:a1:87:4c:08:
57:de:99:b3:0a:8e:22:6f:22:7f:13:2b:b9:35:f4:00:e6:46:
35:51:f5:d0:98:bc:ef:f2:ad:59:5e:81:ea:53:45:30:68:18:
39:24:0c:49:e2:8d:a4:1e:92:74:13:9e:42:3b:5d:eb:ef:28:
8b:ac:9c:21:eb:ef:e9:29:d0:bc:7a:73:00:1a:bc:ea:da:74:
22:41:6c:0a:f2:65:0b:f7:5a:fb:5a:b0:91:b1:0c:b0:53:47:
ca:5a:47:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:15:05 2026 by rpki-client