Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: W2Y+7yPqRyThNO+H6A3vEGT1J11XlblVmuyVqZ/nuFw=
Subject key identifier: 02:AD:01:B2:D8:CD:FE:1E:B5:12:4B:1F:11:44:E4:5D:FF:B4:2F:AF
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 019F91DA9065D823086F373632CAA2EAE139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 02:00:47 +0000
Manifest this update: Fri 24 Jul 2026 02:00:47 +0000
Manifest next update: Sat 25 Jul 2026 02:00:47 +0000
Files and hashes: 1: ZnpQKujkco2TpKWWsMQlGKeCUk4.roa (hash: nReeCNRcHVWJZjQmjL+vKj9L8WAcWx5VrQARrGlJtBU=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: qdcSXRMUfCRVGny/t71/Vr7webRCWPWUtSShbzwtsHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:90:65:d8:23:08:6f:37:36:32:ca:a2:ea:e1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Jul 24 02:00:47 2026 GMT
Not After : Jul 25 02:00:47 2026 GMT
Subject: CN=02ad01b2d8cdfe1eb5124b1f1144e45dffb42faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:79:57:4a:dd:49:65:23:5c:e6:04:13:13:
6b:ba:e3:fc:57:72:e1:2a:2b:83:b7:8e:62:20:65:
5c:24:5a:6c:ee:2d:12:0a:13:82:4e:d3:29:43:c7:
50:a8:7f:2d:da:6a:61:45:a1:d8:19:ff:f6:4b:aa:
d5:b2:ec:34:fb:87:f2:f8:55:a9:74:21:24:9e:9c:
c7:a7:cd:bc:3b:42:9f:07:18:f3:97:4c:25:53:37:
94:51:7c:d0:e7:b2:46:61:16:19:85:0c:4d:73:b0:
d6:ff:f0:eb:58:39:67:b3:a5:1f:fc:9c:0a:76:e7:
ac:99:76:9e:10:e2:2b:86:a3:71:e8:04:50:26:fc:
86:d0:45:b7:14:1f:95:55:46:8c:33:8f:91:1b:67:
71:72:05:90:b4:35:dc:ea:5d:f9:e9:f4:91:b3:57:
0a:55:4d:94:96:b8:74:38:82:76:d9:e6:32:8a:63:
be:ea:ec:89:ce:c1:b5:94:90:9d:b0:8f:03:6b:c5:
42:2f:7f:4a:f3:75:81:7b:2c:43:cc:6e:70:57:52:
fa:7d:7a:71:c9:67:96:bc:18:cd:0a:88:26:14:00:
57:7b:79:e3:c3:0a:49:f8:aa:21:8d:00:27:8d:f5:
00:cd:ab:d5:87:93:39:b8:d1:a8:45:24:eb:1b:e7:
a3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AD:01:B2:D8:CD:FE:1E:B5:12:4B:1F:11:44:E4:5D:FF:B4:2F:AF
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f5:d3:43:c1:8a:c6:88:68:73:2c:53:80:11:3f:5d:16:7a:
94:da:4d:e8:db:34:4c:d0:3e:ff:e6:ad:b5:1c:be:e0:78:b5:
61:e0:cb:85:25:12:ae:78:22:be:ff:b9:05:ee:7e:ae:fa:f3:
31:24:2e:e7:c6:a5:c2:07:8c:f7:fb:37:ee:0f:7a:99:90:6b:
43:2a:1f:99:f0:e5:fc:e0:09:c2:fc:54:a7:10:f8:1b:85:ad:
37:60:6b:09:1c:05:11:cd:94:57:f3:ec:3c:7c:d6:ef:3e:6f:
68:6b:a0:5a:cf:1c:fb:82:e3:e7:1d:e0:d7:56:d5:55:19:96:
95:31:05:ac:d5:85:95:3a:ae:e9:5e:78:20:6c:76:89:cb:72:
29:f8:24:86:e6:02:3f:cf:b7:f2:8d:7e:16:0c:ba:91:44:08:
30:75:1c:7e:df:54:b9:b3:2e:71:e2:12:12:e3:65:a0:af:e5:
ef:82:e8:31:8a:f3:a8:1d:8c:53:45:c5:71:05:62:79:25:ec:
8d:b4:d0:67:0b:d6:e1:18:4c:1b:dc:6b:40:af:d5:d4:00:b6:
20:20:8f:16:ea:4a:76:58:aa:52:c7:a9:72:ac:4a:12:cd:d0:
d8:a6:93:72:3d:70:73:51:44:79:17:3b:c1:9e:d2:66:46:62:
53:ea:99:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:48:01 2026 by rpki-client