Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: NqHXotPQjaIYECvi7Sxyl1x7M7tCc5ab2zpmDv+x64g=
Subject key identifier: B4:A2:DB:FD:97:D9:2C:E0:99:47:64:FB:21:02:01:FB:B5:AC:CC:5B
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 019D25F12971C9F35132FC6990816438C85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:00:54 +0000
Manifest this update: Wed 25 Mar 2026 17:00:54 +0000
Manifest next update: Thu 26 Mar 2026 17:00:54 +0000
Files and hashes: 1: ZnpQKujkco2TpKWWsMQlGKeCUk4.roa (hash: nReeCNRcHVWJZjQmjL+vKj9L8WAcWx5VrQARrGlJtBU=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: mLyQZnbp7nqEAZLv9GogetGuKPTRmEwZ2zxca1ZSXBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:29:71:c9:f3:51:32:fc:69:90:81:64:38:c8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Mar 25 17:00:54 2026 GMT
Not After : Mar 26 17:00:54 2026 GMT
Subject: CN=b4a2dbfd97d92ce0994764fb210201fbb5accc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:85:20:b0:1a:68:de:49:de:56:ba:d2:f8:fa:
c3:ee:4c:bc:1a:7e:38:39:e5:0e:b7:a1:15:de:53:
c0:6f:fa:62:3f:6e:fd:9b:46:bc:f9:a9:f3:5c:02:
3e:ff:8e:0c:d0:9a:55:36:72:56:fc:44:80:00:8d:
cd:af:dc:e0:c6:cb:6a:da:8d:35:c7:43:54:51:f6:
59:89:c4:b6:c1:e8:80:2d:37:96:9e:77:06:e1:32:
72:0b:1a:c7:10:1b:7c:96:b2:81:74:b7:a2:8f:be:
6b:b1:cd:01:70:fc:60:15:24:87:77:74:c9:91:62:
98:06:09:bd:32:ca:7d:00:45:2b:74:31:9e:7b:08:
69:cd:2b:a2:7d:69:07:bd:63:b2:c5:2a:3f:03:6b:
3b:a3:e0:20:a1:5d:4f:12:3b:23:38:97:cf:45:e5:
58:b7:b2:39:3c:b1:ab:93:da:5b:cc:a1:c2:24:73:
31:05:c8:e2:f4:c9:04:0d:66:86:18:f1:a1:86:91:
06:7b:9e:53:03:50:ca:ca:ee:69:69:91:ab:bd:4b:
c6:86:5b:41:a0:f8:3a:ba:cd:be:d5:b9:10:e6:66:
88:3d:48:e3:03:7b:0e:c3:3a:82:7d:28:1f:d5:34:
92:5e:c0:f6:8d:60:85:27:4e:38:4f:72:98:a0:c4:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A2:DB:FD:97:D9:2C:E0:99:47:64:FB:21:02:01:FB:B5:AC:CC:5B
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3f:e7:38:f5:f2:d3:3a:ef:54:c6:38:06:76:46:2d:c0:ba:
17:4b:38:2f:86:4d:b7:b5:e2:bc:58:2a:f1:d1:d1:35:18:cc:
e7:a3:b8:4d:62:89:52:6c:c4:96:ee:8b:8c:d5:c5:f4:45:92:
54:60:86:97:b2:c3:8b:f4:3d:fc:f6:0f:92:59:c9:22:8a:03:
07:7f:5d:89:04:58:2c:bb:ea:51:12:ad:a1:ce:24:15:1b:dc:
1e:77:4d:f2:7a:7d:59:a4:0e:41:a5:bc:97:8d:a6:85:3e:52:
7f:fa:77:76:bb:ab:27:81:84:d9:2a:9c:a9:9e:be:51:2e:0c:
83:d9:23:8d:2b:7b:46:53:e1:bd:b2:27:78:4c:8f:94:26:7e:
f2:52:e8:ed:b8:a9:7d:81:1f:5e:7b:fa:0b:34:7d:ea:8c:77:
ea:6d:f0:52:6f:ef:8b:22:bd:df:a3:36:3e:67:c6:a2:d0:08:
7e:78:02:a3:22:6c:f5:c9:7b:04:77:c6:40:7c:a1:08:60:59:
71:ed:1d:27:f9:d9:77:c1:0d:90:1f:ab:99:99:f6:b6:f0:ff:
cc:27:f7:59:63:9b:97:a2:8a:b6:f4:1d:c5:92:9b:10:8e:15:
af:53:8f:2d:2e:57:99:6d:2b:36:77:fc:63:1a:0f:53:15:41:
38:69:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:42 2026 by rpki-client