Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
File: r7ALKTlueAM-26yv75hQsbDjUyM.mft (raw, json)
Hash identifier: J45DZiJLWf95j6mVP6Xdm/Ia+BXJO8AlE8af3mgO2vg=
Subject key identifier: E2:EE:DF:15:0C:EE:BE:E6:CC:45:C8:D6:A4:13:BB:72:72:62:1B:F1
Authority key identifier: AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23
Certificate issuer: /CN=afb00b29396e78033edbacafef9850b1b0e35323
Certificate serial: 019D273B3DD4792E92DEC061EF82565B9A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
Manifest number: 1134
Signing time: Wed 25 Mar 2026 23:01:27 +0000
Manifest this update: Wed 25 Mar 2026 23:01:27 +0000
Manifest next update: Thu 26 Mar 2026 23:01:27 +0000
Files and hashes: 1: BqKXTfV1zxu7JcLG72Zso4SHOOg.roa (hash: T8VlSosgzu97SNLjSfAlphc7hdN+zQvpmKY8/+PTx/s=)
2: r7ALKTlueAM-26yv75hQsbDjUyM.crl (hash: ouAPC8pd3hDihn0tU+Xn2CuSg9BJ2qApDkJ6b3GAtEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:3d:d4:79:2e:92:de:c0:61:ef:82:56:5b:9a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb00b29396e78033edbacafef9850b1b0e35323
Validity
Not Before: Mar 25 23:01:27 2026 GMT
Not After : Mar 26 23:01:27 2026 GMT
Subject: CN=e2eedf150ceebee6cc45c8d6a413bb7272621bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cb:47:e1:64:ba:ed:d1:61:e1:15:8e:ef:28:
03:e9:47:8d:64:69:34:42:09:21:3e:09:47:2b:47:
71:ed:96:4e:30:ce:a0:11:08:1d:7c:0c:cf:51:ec:
4e:65:aa:c2:92:16:ab:ae:c3:b1:23:fe:5a:e4:20:
ac:5d:ac:3d:ac:4b:6c:23:9d:36:a1:2b:26:fd:d2:
98:28:69:23:2a:8d:d7:bd:a7:13:76:5e:a4:8a:24:
e9:9c:af:81:df:83:09:de:c1:48:f0:a0:6c:39:5b:
63:cb:ef:a0:87:03:32:f0:23:1c:e7:ee:09:7f:fd:
61:61:ff:c6:e6:5a:8b:e6:43:46:6d:b3:b8:56:b6:
ae:33:62:a7:c8:f5:fe:70:f5:e9:1d:58:5c:45:20:
32:e4:f9:a2:bf:04:44:eb:84:d5:d0:9a:be:da:98:
87:35:af:80:8f:12:ed:ad:2d:f1:36:bf:8f:d3:ab:
30:53:66:56:93:ea:25:29:53:d2:98:42:0a:49:26:
27:af:e3:5f:5c:68:90:2f:bb:22:91:89:44:c3:3f:
b8:3b:f7:1c:4b:66:1c:af:19:7a:08:b1:69:ae:00:
72:16:50:cf:91:70:81:92:4c:11:b2:f8:ba:63:61:
61:bd:01:19:62:3e:d5:6a:07:d2:52:1e:8d:45:1a:
4e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EE:DF:15:0C:EE:BE:E6:CC:45:C8:D6:A4:13:BB:72:72:62:1B:F1
X509v3 Authority Key Identifier:
keyid:AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:59:c0:aa:91:44:f0:4d:fc:f6:64:af:ca:52:89:5a:4b:b8:
75:e0:15:d0:a9:a2:3d:13:8c:9c:f2:ae:33:2e:d7:0b:b2:cc:
de:0a:40:91:2e:5c:ff:8d:af:bb:e9:e1:86:f1:53:15:b4:79:
16:26:9c:aa:47:9e:c8:a3:a0:d9:15:c9:8b:c9:b3:0e:74:5b:
65:5c:a2:84:f3:0b:1e:78:86:42:53:41:26:75:f5:42:e6:3f:
0a:a9:c3:70:c5:1f:dd:21:20:0a:08:00:5d:0d:c9:71:c4:0f:
4d:42:23:06:76:e7:c3:c1:81:3b:89:bd:74:cd:66:01:41:cf:
e5:7e:77:e7:39:c2:53:01:8b:15:93:91:44:fe:8d:d0:25:5f:
d6:05:fd:a6:cd:93:d5:fa:19:88:33:2d:fd:73:41:32:b4:91:
16:ae:41:0a:fa:0b:c8:7a:7b:f6:f5:d9:71:28:76:d5:9e:69:
5f:62:c7:a2:ab:ab:58:1c:91:4e:5c:98:a4:d1:b8:03:7a:79:
a6:34:f9:f8:72:c6:90:b2:5d:64:05:4b:bc:cb:a9:23:ab:50:
f1:99:1c:27:7e:91:cf:0d:6d:89:ab:8c:89:5f:9d:f1:0b:49:
14:ed:1c:a3:de:8c:76:c7:18:95:11:08:b6:59:6f:80:39:77:
24:20:53:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:52 2026 by rpki-client