Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: AXlXn8Auro6hhCbXya0mvS23GbdK0wFZx5ew74BteBw=
Subject key identifier: F6:A5:64:4E:EE:E3:1C:88:6E:D2:F4:F0:5F:E9:0D:A2:71:07:B6:65
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 019D99CFDAE48EAC4F7130C92AA3CF2F9A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:00:28 +0000
Manifest this update: Fri 17 Apr 2026 05:00:28 +0000
Manifest next update: Sat 18 Apr 2026 05:00:28 +0000
Files and hashes: 1: ZnpQKujkco2TpKWWsMQlGKeCUk4.roa (hash: nReeCNRcHVWJZjQmjL+vKj9L8WAcWx5VrQARrGlJtBU=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: ail3AKGrT/ygtv5PWYEADbwl4eQAa49bg+/eiPJvHhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:da:e4:8e:ac:4f:71:30:c9:2a:a3:cf:2f:9a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Apr 17 05:00:28 2026 GMT
Not After : Apr 18 05:00:28 2026 GMT
Subject: CN=f6a5644eeee31c886ed2f4f05fe90da27107b665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:2d:fe:65:30:6a:87:af:9d:bf:fd:d6:23:
90:1f:db:99:4f:d8:4b:fb:f9:dc:f2:4b:38:f4:1e:
46:0f:ff:7d:45:ab:ee:98:10:da:89:59:22:92:ba:
4e:e4:35:19:57:1c:a1:ef:0e:3f:b9:61:f6:4c:18:
e7:49:c3:64:6b:68:2f:31:e4:db:7a:31:95:3c:31:
4f:23:6a:6d:62:a8:10:55:46:4a:d6:81:ab:7b:05:
fe:ee:be:fb:bf:57:7b:ac:5e:96:37:d7:c7:d8:e8:
88:16:81:2e:65:41:6a:e7:0d:3e:40:4c:f3:b1:dd:
b4:c7:7b:7f:73:e7:37:fd:06:c7:77:02:c1:d6:f0:
bf:98:37:d4:a5:8d:a4:25:c5:72:65:2e:b1:58:c9:
f2:c7:9b:6f:24:db:9c:64:24:01:62:27:9c:aa:56:
76:41:0c:39:03:46:3d:6a:94:1e:2a:7f:48:be:ac:
fc:26:b0:37:49:67:7f:d6:0e:2e:ad:6e:8a:fe:ef:
d1:12:f2:5d:3c:b6:02:02:38:78:21:e5:84:5f:8a:
19:89:31:79:db:60:19:81:5d:4f:f1:5c:cf:86:6a:
91:23:74:11:a8:37:04:62:ce:5f:88:4b:52:6f:f2:
c0:0f:ba:b0:a6:02:00:22:ea:de:ce:b4:27:49:8a:
95:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A5:64:4E:EE:E3:1C:88:6E:D2:F4:F0:5F:E9:0D:A2:71:07:B6:65
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9c:27:df:d5:e2:5b:05:01:7c:e4:6c:9d:83:03:1c:e2:a8:
3d:44:66:54:31:73:29:35:69:28:f2:98:d3:a1:1a:43:db:80:
4f:15:26:c5:97:90:3b:6f:6d:e7:35:95:a7:eb:8c:c9:5b:b8:
e3:8c:12:14:53:42:58:5b:c5:2d:67:38:63:7d:e4:2e:25:74:
1d:ab:d9:8c:56:dc:01:b5:c1:81:21:89:16:2d:6d:1b:f8:24:
d6:a5:63:38:18:06:cd:fc:f9:53:57:a5:e9:31:e1:8a:a9:a5:
e9:18:80:03:dd:b0:e0:1d:13:04:9d:60:83:12:1f:c4:a1:af:
7b:c3:03:34:ed:d4:1f:66:fc:de:0d:6e:da:a5:27:65:d3:15:
7c:3b:f1:93:a7:26:e7:d2:45:79:36:2b:26:12:11:8e:df:bd:
2e:14:29:d1:6e:54:a5:66:61:3d:87:f3:c0:68:0a:1a:67:5d:
76:33:3a:53:c4:30:85:93:be:bb:56:d6:7e:70:a9:7f:9d:f5:
3f:46:dd:66:d1:6a:3e:b8:e8:c7:da:84:71:6b:42:6c:4d:a5:
80:7e:52:7e:d3:f7:4c:6f:50:17:13:e3:3d:67:af:24:da:60:
1f:45:7c:b4:eb:c6:6c:bc:45:40:ba:90:a9:ad:ac:ef:60:24:
22:ff:05:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:17:07 2026 by rpki-client