Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
File: r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft (raw, json)
Hash identifier: EgSpmWQ09KVzNcfKRF4QmopWfFnXBJjRstTOWmYmBOI=
Subject key identifier: BD:8E:3D:FA:3B:5D:EB:40:F5:47:A4:B4:F2:BA:A0:66:09:9E:35:2F
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 019D277298A18BF5BD3FCDE7D987C3157108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
Manifest number: 0CAD
Signing time: Thu 26 Mar 2026 00:01:54 +0000
Manifest this update: Thu 26 Mar 2026 00:01:54 +0000
Manifest next update: Fri 27 Mar 2026 00:01:54 +0000
Files and hashes: 1: ASO-wECtUbDG1DckYZ24HiUg6DU.roa (hash: VgGdV7+deLKhr4gB8tleb/RqVtkbUSprjT1l2cEz5/g=)
2: CmIJnjwGRsNcmhAutOTs4YMD2fE.roa (hash: Jua19yCeg1t/mfvLvJYnD0rI4VExJ2vBY7mPBdrmdaI=)
3: Iuaoq7xqZRoecZzyevNXwAMi3-c.roa (hash: SRPau6cxiFHTMpBCP5vvZIhkHG5VuskjK4s4tpPVTEM=)
4: aPz9jYSsAHsZtg1cdjuxCtxCBzk.roa (hash: N0uPovVPRwzq0UQVV7PxhoVVAuzDhOF3XOBQjYFpbpI=)
5: r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl (hash: +7VlyxMUou4WKnvvxGBtEL+mAnMLQqfXEmiMPl3v+HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:98:a1:8b:f5:bd:3f:cd:e7:d9:87:c3:15:71:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Mar 26 00:01:54 2026 GMT
Not After : Mar 27 00:01:54 2026 GMT
Subject: CN=bd8e3dfa3b5deb40f547a4b4f2baa066099e352f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cc:c1:bb:3f:96:17:d0:0d:0b:40:46:78:29:
7e:97:12:20:98:a1:8c:fc:4a:36:21:46:60:e4:ae:
6f:07:c4:64:c2:82:7f:db:08:3f:b6:31:1a:c1:66:
2f:4f:68:6b:71:c5:44:43:ed:b4:ca:96:b2:8b:a0:
ac:23:46:e2:e5:df:fc:37:d5:45:0f:9f:ca:97:09:
b0:ba:7d:08:c2:ec:0f:35:76:a5:46:f0:3f:a8:96:
0d:87:94:04:7e:54:2f:3d:43:93:d3:8b:04:b1:af:
35:6c:00:9d:07:7d:f1:52:59:7a:b7:5a:bf:73:00:
1c:be:59:0b:93:b7:c9:69:f1:1f:1f:49:52:4e:12:
c0:88:fa:93:e9:ff:01:67:75:57:3f:2e:72:89:35:
19:3d:ce:97:d8:22:aa:27:23:bc:c2:1d:7e:5e:d8:
5e:57:34:6f:1a:90:19:20:78:d6:8a:9f:56:f3:29:
42:a2:75:43:32:b7:d3:31:08:a5:45:17:ed:5f:74:
18:86:05:29:ba:d1:6f:e0:72:f5:67:55:3c:51:1c:
81:4a:19:74:23:13:c9:a6:96:78:97:86:82:f9:b6:
e0:91:64:29:bd:40:41:06:1d:9f:83:cf:bc:5b:c3:
18:e4:c5:6c:0a:80:9f:27:17:6c:f2:11:3c:0f:b8:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8E:3D:FA:3B:5D:EB:40:F5:47:A4:B4:F2:BA:A0:66:09:9E:35:2F
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:df:69:a6:c1:12:21:f4:77:33:6d:4e:90:8b:ae:7b:56:66:
49:ab:66:93:cd:b2:d7:5a:c6:c0:b0:75:69:57:a0:84:cc:e8:
8d:20:b1:ef:be:be:75:98:b1:a5:69:cb:64:ad:e4:1b:b8:8d:
42:8d:2e:29:c1:44:9c:0a:1d:7f:b5:a5:64:d0:2d:69:ef:84:
43:62:4b:f9:06:3c:c2:47:0a:60:fa:17:99:d9:14:28:ed:dc:
cf:05:71:06:15:91:eb:12:77:aa:ed:5c:c8:56:5b:54:8b:40:
12:4b:ba:89:28:96:6b:f0:d5:ef:e9:04:11:2d:dc:57:38:d5:
f6:a5:5b:16:1c:53:53:bd:60:ca:9f:7f:9f:62:2f:b5:18:1f:
96:e1:8e:9b:77:13:8f:89:a9:9b:33:a4:30:62:9b:d9:bb:31:
70:1b:21:a7:f8:19:cc:35:86:b2:7a:4e:b3:b2:c1:c9:c2:81:
fa:55:38:8d:70:ab:e1:74:ba:d0:0a:f3:14:ab:69:ae:7c:f5:
7a:a5:5e:94:7f:94:27:c4:a4:3b:90:9d:ef:65:70:aa:b6:a7:
50:99:c6:27:26:70:3c:3d:ec:1c:42:8a:b9:b4:46:98:8e:a2:
69:88:9e:d4:1c:6e:e9:14:30:ed:c4:07:97:2f:a7:c8:9c:6a:
e4:7d:28:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:02:08 2026 by rpki-client