Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
File: r7oQsKZ20-H6tWUoQw-siRoINlI.mft (raw, json)
Hash identifier: ChexP07NlhY5kuqBVqrzbmUfrZ1pP75I9GfjQeBH+bw=
Subject key identifier: 11:6B:91:1A:46:C8:0E:54:11:57:65:29:2C:38:71:8B:4F:A6:EA:AA
Authority key identifier: AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
Certificate issuer: /CN=afba10b0a676d3e1fab56528430fac891a083652
Certificate serial: 019D25F1EE43CE36AD029963AB338013C3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:01:45 +0000
Manifest this update: Wed 25 Mar 2026 17:01:45 +0000
Manifest next update: Thu 26 Mar 2026 17:01:45 +0000
Files and hashes: 1: WMBlv5TYOFhb5nmDTbMHQgVvFpc.roa (hash: aKDzW6jTAaiYbIZ5LNCccfbLrCredMGyDoJe0MXZVlA=)
2: r7oQsKZ20-H6tWUoQw-siRoINlI.crl (hash: Q6tb9xVfvADR/O4k1hjUi+Xgwjh0JYCn4DyhOntXRR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ee:43:ce:36:ad:02:99:63:ab:33:80:13:c3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afba10b0a676d3e1fab56528430fac891a083652
Validity
Not Before: Mar 25 17:01:45 2026 GMT
Not After : Mar 26 17:01:45 2026 GMT
Subject: CN=116b911a46c80e54115765292c38718b4fa6eaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:b5:88:79:11:26:84:bf:0e:78:0e:f9:0c:
1b:80:43:26:66:db:62:f4:8d:c5:02:63:c1:15:f7:
a8:44:ec:1a:5c:11:c5:bc:79:17:0d:47:87:ec:4a:
bf:94:fe:45:27:d0:91:c1:a5:2f:2c:76:ab:a5:9b:
96:50:a1:32:82:56:e4:28:48:8b:5c:f8:bd:99:e6:
45:cf:31:c0:a6:07:8c:61:ae:fc:21:6e:a6:ba:b1:
19:da:0a:11:7e:41:64:4e:1d:1b:2b:8e:ad:aa:4f:
c1:a2:7e:42:73:05:a1:d8:e9:34:f7:68:e6:b4:71:
ba:a0:cd:67:11:10:9d:7f:35:0a:f4:4d:24:f5:95:
93:df:b8:58:e2:bb:72:2d:ac:86:60:55:df:c7:70:
b6:e3:99:18:41:ad:3c:f1:33:0e:8e:35:30:fa:45:
03:30:bb:17:52:90:cc:ea:e3:be:b9:31:0b:16:8d:
68:d1:1d:79:6b:38:36:c5:bc:22:97:97:39:4e:8d:
37:40:34:05:cc:a4:6b:23:57:6e:21:d5:8f:b8:c3:
78:2a:0d:e7:a9:ec:6a:01:60:5d:06:87:37:59:45:
a9:7a:94:35:e9:a4:49:ce:40:a3:dd:7c:14:f1:e9:
f3:3a:e0:c1:aa:3d:35:91:12:69:b7:73:4a:a4:ef:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6B:91:1A:46:C8:0E:54:11:57:65:29:2C:38:71:8B:4F:A6:EA:AA
X509v3 Authority Key Identifier:
keyid:AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bb:15:71:7b:a2:5e:72:86:3c:9f:2b:76:bb:66:3d:bc:61:
c3:be:56:f5:6b:d0:34:29:8e:4b:3d:e3:3f:ca:02:9f:9b:bd:
14:32:76:fd:c9:2c:4f:fa:1e:91:91:a9:cb:7c:d7:3f:29:0e:
ab:30:b2:94:64:c5:23:91:f2:5b:0e:5e:ae:16:74:b1:e7:54:
a6:06:7a:de:d0:ba:27:6d:cf:90:30:8e:68:55:49:a6:49:dc:
45:5e:ad:7d:5a:6b:c8:b0:c4:d8:42:58:ca:76:a3:9c:91:3c:
05:19:d1:29:46:33:a5:af:b4:ac:f0:fb:9d:78:e5:27:51:4b:
eb:f8:49:fd:1f:52:52:88:60:aa:52:a3:f6:e3:6e:4b:65:9d:
e1:7f:5a:a5:b0:a8:c1:0b:b4:db:da:d3:1c:e5:7f:4d:6b:c4:
f6:5a:51:32:fd:1d:50:b4:38:46:6f:8c:10:8a:66:bf:48:dd:
58:71:3a:90:3d:6f:e0:8a:2c:31:5f:8f:78:74:47:e3:d8:0f:
dc:db:38:de:01:10:c0:7e:7c:29:c4:dd:7e:cd:e6:fd:6e:58:
ba:84:11:c5:b3:47:26:63:10:27:05:e7:26:2e:02:97:a7:4f:
21:33:08:e5:b9:83:9c:e7:f8:ef:38:8c:55:f4:dd:d8:54:db:
5e:9b:e4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:26:22 2026 by rpki-client