Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
File: r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft (raw, json)
Hash identifier: EwvbmLV1NC1JrdcBB0YyXFXZ+AIM3isdLlC6PsSQeEY=
Subject key identifier: F4:46:30:18:B8:D3:E7:BA:88:C5:B9:04:8B:ED:AF:5C:EC:20:0F:A9
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 019E1EA2AEC6E614ED5E1EF2DEDCA2A258BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
Manifest number: 0D2F
Signing time: Wed 13 May 2026 00:00:38 +0000
Manifest this update: Wed 13 May 2026 00:00:38 +0000
Manifest next update: Thu 14 May 2026 00:00:38 +0000
Files and hashes: 1: CmIJnjwGRsNcmhAutOTs4YMD2fE.roa (hash: Jua19yCeg1t/mfvLvJYnD0rI4VExJ2vBY7mPBdrmdaI=)
2: Iuaoq7xqZRoecZzyevNXwAMi3-c.roa (hash: SRPau6cxiFHTMpBCP5vvZIhkHG5VuskjK4s4tpPVTEM=)
3: aPz9jYSsAHsZtg1cdjuxCtxCBzk.roa (hash: N0uPovVPRwzq0UQVV7PxhoVVAuzDhOF3XOBQjYFpbpI=)
4: r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl (hash: j5/hd1zPPt2YFAfTxHYgOzQFrA36Q6PfK1BLmkL/VXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:ae:c6:e6:14:ed:5e:1e:f2:de:dc:a2:a2:58:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: May 13 00:00:38 2026 GMT
Not After : May 14 00:00:38 2026 GMT
Subject: CN=f4463018b8d3e7ba88c5b9048bedaf5cec200fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:d5:e6:df:23:dc:91:ee:e5:55:68:41:60:
ab:b7:ec:18:cd:52:04:75:3a:0c:7e:ad:fe:a6:fb:
fc:d7:be:68:d5:cf:c8:38:4a:25:b3:90:6e:29:e4:
05:63:37:61:cd:ed:5f:e7:a4:a0:7c:1a:b4:5b:13:
d5:29:17:8f:4e:7b:87:9d:b4:6a:e8:a4:3f:18:fb:
6c:c0:82:c5:de:41:3b:74:e5:14:52:e6:4e:8f:a7:
0c:d0:a4:9e:22:bb:50:1d:50:6b:ae:ac:f5:4d:1b:
d1:ca:55:42:bb:b5:4c:2f:8c:98:51:34:5c:19:a8:
be:81:b9:bf:15:46:5a:fa:07:6e:9b:16:d4:4d:ed:
d3:a5:ba:fe:ac:67:85:d2:82:f9:a9:04:b3:15:7e:
30:89:8c:df:7f:c1:82:bc:ec:a3:86:d6:66:7f:7b:
8f:21:d5:8d:ea:e6:b7:57:70:53:44:82:a4:5b:53:
28:16:c9:25:24:d6:1a:51:0a:de:35:69:22:12:23:
89:59:8a:81:07:dc:4a:af:29:0d:51:c9:a5:c3:47:
1d:7c:1a:86:c3:b0:45:25:10:47:73:ef:4b:16:9c:
07:be:91:24:7b:90:0c:1d:df:2c:37:c1:f9:84:8f:
36:0a:72:3e:59:16:5e:ee:dd:27:93:76:78:ac:ec:
22:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:46:30:18:B8:D3:E7:BA:88:C5:B9:04:8B:ED:AF:5C:EC:20:0F:A9
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8b:37:05:b3:de:0d:6e:77:3f:88:84:a1:cb:07:c6:9c:02:
bd:cb:24:be:8f:f3:63:09:51:1d:29:8a:d0:95:9b:7a:f8:96:
48:ef:87:54:0f:b0:4a:2b:53:99:1a:c3:87:1c:b4:80:22:bd:
e8:1d:d4:1f:8c:90:0e:0e:6c:c6:66:10:eb:76:33:dc:12:3d:
ba:18:0b:1d:b8:d6:1b:ae:42:82:e2:e4:5d:b6:4f:d8:e0:b8:
e7:b6:53:69:13:1a:1a:a2:29:9c:8f:ea:71:b7:dd:8a:0b:7f:
7c:0e:a7:aa:72:0e:82:08:5a:67:98:e6:96:57:f2:31:5b:f1:
b3:28:88:26:8e:d8:fc:08:e7:e0:b5:b0:ff:78:78:b7:f2:a1:
35:42:8f:f3:43:cd:a5:17:3a:83:92:2f:85:ae:55:6d:e4:25:
a4:d8:aa:93:1a:a1:0c:ae:66:0b:39:aa:0a:a8:90:62:f1:36:
91:51:40:d6:48:a3:6c:ce:b9:e7:1f:1a:7f:b8:2a:33:17:3f:
ad:06:99:1f:75:a7:f5:4f:bf:24:56:79:f4:2e:ad:1b:f5:8c:
c9:ef:e3:7d:aa:a3:8d:4f:57:41:e8:1c:f0:87:26:a6:92:dd:
9b:18:e1:34:44:9b:7f:b3:04:41:7f:ad:50:2d:d1:d5:68:1f:
af:d6:66:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:06:20 2026 by rpki-client