Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: P0gJiUoH7s6bDoNhgiBYcKQRjIrmicRpqEL87HtiQEc=
Subject key identifier: AC:62:8C:99:EA:72:91:19:DF:2C:75:1C:23:A4:32:25:1D:75:E4:0A
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 019CAA59381FD944ED9C4F045BC3CAFE4CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:01:39 +0000
Manifest this update: Sun 01 Mar 2026 17:01:39 +0000
Manifest next update: Mon 02 Mar 2026 17:01:39 +0000
Files and hashes: 1: ZnpQKujkco2TpKWWsMQlGKeCUk4.roa (hash: nReeCNRcHVWJZjQmjL+vKj9L8WAcWx5VrQARrGlJtBU=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: 51B4RS6O1++LYiF11aOkScxZce7zirbcPy4xu5HldDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:38:1f:d9:44:ed:9c:4f:04:5b:c3:ca:fe:4c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Mar 1 17:01:39 2026 GMT
Not After : Mar 2 17:01:39 2026 GMT
Subject: CN=ac628c99ea729119df2c751c23a432251d75e40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:6a:91:78:19:93:d7:a1:cc:4e:91:a1:3b:
39:84:99:9b:28:3b:ed:a6:99:b0:dc:76:5d:3b:89:
e1:0f:21:f8:00:d4:02:22:b9:17:36:1c:97:2e:ae:
9a:f7:dd:91:9f:39:88:dc:bc:5c:62:46:dc:3d:f7:
2d:9f:f5:14:c8:d1:96:de:08:ed:24:73:13:6b:9b:
66:4a:f4:bd:ae:2d:1f:ac:bb:51:41:fd:26:06:72:
53:a2:d1:a8:56:8f:cb:7c:ac:df:74:5a:19:3d:2c:
7c:46:cb:cb:e7:10:f5:4f:aa:5b:cb:b6:be:60:c3:
dd:c2:7b:de:a3:81:1e:f9:6d:73:e1:14:2c:da:86:
41:f6:c0:b5:9d:25:d1:3a:e4:b7:c0:a7:a6:c0:24:
97:bb:89:e1:99:7b:e3:75:3b:37:f3:2c:0d:3e:29:
3f:75:d5:f4:3e:f6:59:80:36:71:86:95:b3:70:a7:
51:3a:c4:1f:2d:ce:14:c1:a9:66:67:2b:5d:42:76:
c6:90:46:43:e7:da:c0:9d:6e:a7:c7:67:90:6c:60:
f2:17:ea:38:17:34:20:46:d2:44:fa:71:96:dc:af:
a7:a0:a9:0c:65:8c:87:4d:b3:9b:5f:67:80:09:21:
8d:77:a2:00:03:fc:1d:0c:dd:15:4f:c4:ad:46:5c:
9b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:62:8C:99:EA:72:91:19:DF:2C:75:1C:23:A4:32:25:1D:75:E4:0A
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fc:ec:2b:9c:79:75:13:6b:46:d7:ad:89:b4:13:eb:8d:d1:
f5:ad:a1:83:4b:c0:38:a9:9f:e1:d0:3b:ae:aa:cc:b7:92:64:
00:e0:48:60:74:de:d0:54:de:19:aa:a5:0e:d4:cd:40:a8:db:
00:e5:ee:3c:c9:1d:7d:36:53:ea:c7:78:f9:99:c5:21:a4:ff:
47:67:81:5c:ca:a5:9e:2c:9e:c0:1a:16:cf:42:97:1f:14:c0:
a0:bc:96:97:ef:ab:72:ed:dd:be:7f:63:a4:2a:9c:79:f8:55:
b1:59:73:d7:62:ac:ad:9e:a7:1b:6f:b9:78:97:64:af:14:dd:
38:f3:d8:2e:6d:29:28:08:1f:09:d3:28:cd:0c:70:4d:c2:ba:
6f:d7:be:62:3d:01:4c:4e:58:5f:fe:ed:d9:a2:4b:e0:99:5d:
ab:b9:08:33:3d:16:df:0b:6a:66:5e:9f:99:09:a1:24:93:14:
74:4f:29:63:95:f3:47:65:12:3a:4f:b3:14:87:7c:eb:46:b3:
f8:e7:17:1f:ae:ee:3f:d4:b8:d9:9e:e7:02:80:2d:f2:5e:78:
86:26:a7:06:4e:33:18:7d:59:fa:1e:e3:bc:1e:5c:aa:80:d5:
7f:cc:1f:68:fb:3d:d4:d5:7d:33:27:52:1b:3c:70:46:0a:51:
df:08:e3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:09 2026 by rpki-client