Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: i8jWeHxwtBARW9CATG6fg+jVWCpgLRayAl0SnZTWGgs=
Subject key identifier: 92:61:A8:9D:3A:CC:1E:87:3D:EA:EA:47:77:86:07:4E:57:AA:67:FD
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 01A0D26E6EDAEC1FAAD314B38FAC998AD1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 08:00:47 +0000
Manifest this update: Thu 24 Sep 2026 08:00:47 +0000
Manifest next update: Fri 25 Sep 2026 08:00:47 +0000
Files and hashes: 1: ZnpQKujkco2TpKWWsMQlGKeCUk4.roa (hash: nReeCNRcHVWJZjQmjL+vKj9L8WAcWx5VrQARrGlJtBU=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: SmStasnDVu/8elI8J0VW2igEgwINueRCRJxFgqgH5wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:6e:da:ec:1f:aa:d3:14:b3:8f:ac:99:8a:d1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Sep 24 08:00:47 2026 GMT
Not After : Sep 25 08:00:47 2026 GMT
Subject: CN=9261a89d3acc1e873deaea477786074e57aa67fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:33:dd:11:30:96:99:9a:a0:d6:d5:80:4d:41:
e3:53:27:54:2f:0a:89:0e:ce:fb:ca:4d:c6:75:d8:
39:1d:23:c8:54:15:75:16:35:c5:6a:7c:94:dd:50:
7c:ec:57:1b:6b:c3:89:db:67:da:20:63:b2:f6:b6:
69:18:22:9e:f0:4d:86:1e:f2:43:47:23:80:f2:96:
11:6a:67:c8:22:df:c1:95:09:a2:6a:cd:e7:52:d2:
e4:d2:4d:97:00:5e:24:12:1a:dc:31:b0:32:2d:5b:
a2:d9:0d:3b:f4:aa:fa:d1:29:f6:f0:38:5a:ab:1c:
f4:2f:64:7c:4e:c3:e6:20:17:d1:e0:56:d3:d8:09:
f7:b5:8c:d9:e4:d2:97:5f:fd:e3:b4:f1:e2:b8:a8:
12:9e:9b:1f:b3:70:58:fa:19:72:dc:f1:d5:b3:fb:
15:85:ac:21:5f:63:46:cd:85:5b:f1:03:61:46:e0:
c5:8d:fe:68:93:62:64:69:d4:2c:f4:36:44:a9:59:
16:67:a1:12:8d:74:d9:83:b4:cd:5e:b1:27:c9:dc:
12:cb:48:e3:e5:6f:62:86:86:67:e1:04:53:1d:e4:
f2:e6:89:2e:b8:29:f7:4c:7f:b2:1b:28:f8:06:47:
34:ff:22:41:2e:95:ce:02:c3:1f:ff:ce:52:a3:39:
71:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:61:A8:9D:3A:CC:1E:87:3D:EA:EA:47:77:86:07:4E:57:AA:67:FD
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:6b:15:09:05:ef:b0:75:fe:e7:16:20:32:b6:9b:84:3d:cc:
30:22:15:4c:60:68:27:a9:e8:65:b2:54:0b:2c:b5:99:25:9e:
60:6c:e7:09:c5:c7:50:49:e3:c0:9f:5b:46:20:16:d2:ef:e6:
b7:f6:4e:56:51:d3:b9:41:b5:f4:83:fd:0b:70:5c:fc:1a:89:
2b:62:21:a7:48:5a:5e:27:ef:48:43:b6:0b:dc:0a:29:e5:70:
be:a3:dc:3a:d9:09:c9:e8:68:f4:73:18:b7:20:a6:e1:b2:02:
33:f3:0c:a7:c2:1c:fb:4a:aa:53:70:cf:d0:96:ca:45:a4:d5:
5d:d6:2f:14:a1:ea:f3:72:24:95:c9:b3:08:7d:f0:95:32:fb:
95:63:9f:d3:cd:88:6f:9a:aa:b2:98:8e:46:49:11:22:0c:5f:
56:27:b8:63:c2:9c:dc:52:00:58:c5:81:59:94:48:dd:26:7e:
91:19:99:bd:65:66:e8:33:31:3d:7a:32:b1:12:12:9c:0a:19:
cb:2a:ab:d6:0a:36:4f:99:34:f7:5a:5d:0a:5b:f0:86:31:ea:
c1:40:c9:db:84:ab:16:24:42:a7:24:c9:b8:77:ea:77:43:69:
e1:cc:67:12:99:40:d8:33:58:51:3b:71:67:cf:9e:2e:b0:3b:
18:a7:10:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:24:42 2026 by rpki-client